get_patient

What get_patient does on Nitrostack

AI agents call get_patient to retrieve information from Nitrostack without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_patient is rated Low

This tool retrieves patient data from the Cliniko practice management system with no modifications. While patient data is sensitive (medical information), the tool itself performs read-only access with no destructive or state-changing capability. Severity is low because exposure depends on API authentication and data sensitivity policies already in place at the healthcare provider level.

From the tool's definition Tool name is 'get_patient' which follows the standard 'get_*' pattern indicating data retrieval. Server context describes 'patient management' and 'practice data access' as core functions.

The rule that runs get_patient safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Nitrostack, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_patient, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_patient": {}
  }
}

Questions about get_patient