openehr_ehr_get

What openehr_ehr_get does on openEHR MCP Server

AI agents call openehr_ehr_get to retrieve information from openEHR MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why openehr_ehr_get is rated Low

Despite the empty description, the naming convention strongly indicates this fetches an EHR record by identifier. No deletion, creation, execution of arbitrary code, or financial operations occur. The blast radius is minimal—unauthorized EHR access could expose protected health information, but that is a confidentiality/authentication concern rather than a tool misuse risk.

From the tool's definition Tool name 'openehr_ehr_get' indicates a retrieval operation. In the context of the openEHR server's other tools (e.g., openehr_ehr_list, openehr_composition_get), 'get' is consistently used for data retrieval without modification.

The rule that runs openehr_ehr_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and openEHR MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For openehr_ehr_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "openehr_ehr_get": {}
  }
}

Questions about openehr_ehr_get