{ "data": { "a": { "slug": "aidbox", "name": "Aidbox", "vendor": "Health Samurai, Inc.", "vendorUrl": "https://www.health-samurai.io/aidbox", "kind": "http-api", "category": "health-data", "summary": "FHIR R4 and R5 server on PostgreSQL from Health Samurai, run from Docker images under a free development licence or a paid production licence. Agents use each instance's FHIR REST API or its alpha MCP server.", "url": "https://www.anchorterminal.com/tools/aidbox", "markdownUrl": "https://www.anchorterminal.com/tools/aidbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/aidbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/aidbox.json", "repo": "https://github.com/Aidbox", "license": "Proprietary. Aidbox runs from Health Samurai's Docker images under a free development licence (no PHI) or a paid production licence. Examples and the Python SDK on GitHub are MIT", "transports": [ "http", "streamable-http", "sse" ], "packages": [ { "registry": "oci", "name": "healthsamurai/aidboxone" } ], "auth": "oauth", "authNotes": "Each instance has its own OAuth 2.0 server. Agents use a Client resource with the client credentials grant and POST to /auth/token, and SMART on FHIR backend services with private key JWT are supported. AccessPolicy resources decide what each client, user or operation may do, and access token lifetime is set per Client. Basic auth with the client ID and secret is also documented. The MCP endpoints are closed until an AccessPolicy opens them.", "pricing": "freemium", "pricingNotes": "Aidbox Dev is $0 for development and testing with no PHI, Aidbox Base from $1,900 a month or $19,000 a year, Enterprise by contact (health-samurai.io/price, checked 2026-10-14). A production licence runs 14 days as a trial before Health Samurai extends it. A free hosted sandbox on Google Cloud comes with an aidbox.app account. Whether sign-up asks for a card was not established.", "priceSummary": "$1900 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or pricing page (checked 2026-10-14).", "endpoints": [] }, "toolCount": 9, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://www.health-samurai.io/docs/aidbox", "llmsTxt": "https://www.health-samurai.io/docs/aidbox/llms.txt", "capabilities": [ "health.fhir", "health.records", "health.consent" ], "tags": [ "self-hosted", "fhir", "mcp", "oauth", "smart-on-fhir", "docker", "postgresql", "llms-txt", "iso27001" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 64.2, "grade": "B", "agentReady": false, "rank": 385, "ranked": true, "rankOf": 1076, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 80, "payments": 25, "reliability": 59, "schema": 77, "security": 74, "transparency": 45 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": 0, "verdict": "Graded on the FHIR REST API of an Aidbox instance the owner runs. Monthly releases, two-year LTS lines, SMART on FHIR, AccessPolicy rules and AuditEvent logging are documented, and a free development licence needs no sales call. Aidbox has no rate limiting of its own, its MCP module is alpha, and no terms of service were found on the website.", "bestFor": "An organisation building its own clinical data repository, EHR or payer platform on FHIR, where an agent works against that store.", "strengths": [ "Monthly releases with dated notes, the latest 2609 on 8 October 2026, and LTS lines supported for two years", "SMART on FHIR backend services, client credentials and AccessPolicy rules per client, user or operation", "AuditEvent recording and an audit event topic that can forward to an external repository", "Free development licence and hosted sandbox, with Base pricing published from $1,900 a month", "Cosign-signed images, SBOMs per release and remediation deadlines from 7 days for critical vulnerabilities" ], "weaknesses": [ "No built-in rate limiting or brute-force protection, by the vendor's hardening page", "The MCP module is alpha, its tools take whole resources as free JSON, and no tool annotations are documented", "No terms of service or licence agreement was found on the website, and the privacy policy dates from 10 June 2021", "Closed source with no public CI and no OpenAPI document", "No public status page, security.txt or sub-processor list was found" ], "agentNotes": [ "Ask the operator for a Client with an AccessPolicy limited to the task. Don't rely on the public MCP policy, which the docs mark unsafe", "Use `If-None-Exist` on creates and conditional update on identifiers so retries don't duplicate records", "Use `_elements` and `_count` to keep responses small, and follow the Bundle's paging links", "Throttle yourself. Aidbox applies no rate limit, so a burst lands on the customer's database", "Don't load real patient data into an instance on a development licence" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 64.2 } ], "editorialScores": { "ergonomics": 79, "maintenance": 80, "payments": 25, "reliability": 59, "schema": 77, "security": 74, "transparency": 51 }, "provenanceScore": 39 }, "connect": { "install": "curl -JO https://aidbox.app/runme \u0026\u0026 docker compose up" }, "letme": { "capability": "https://letme.dev/health.fhir", "tool": "https://letme.dev/aidbox" }, "area": "domain-data", "unitPrices": [ { "item": "Aidbox Base licence", "unit": "month", "usd": 1900, "note": "From price, monthly billing. $19,000 a year on yearly billing" } ], "provenance": { "legalEntity": "Health Samurai, Inc.", "domain": "health-samurai.io", "domainRegistered": "", "endpointOnVendorDomain": false, "terms": "", "privacy": "https://www.health-samurai.io/legal/privacy-policy", "statusPage": "", "changelog": "https://www.health-samurai.io/docs/aidbox/overview/release-notes", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The site footer and privacy policy name Health Samurai, Inc. The privacy policy was last updated on 10 June 2021 and refers to Terms of Use that were not found.", "No terms of service or licence agreement was found at /legal or in the docs.", "www.health-samurai.io/.well-known/security.txt returns a 404 page. The supply chain page sends reports to security@health-samurai.io.", "Aidbox runs on the customer's infrastructure, so endpoints are on the customer's domain. The free sandbox runs on aidbox.app subdomains.", "No public status page was found. The domain registration date was not established." ], "score": 39 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/aidbox.json" }, "answer": "Aidbox scores 64.2 (B) on agent readiness against Health Gorilla's 59.3 (C), and leads in 5 of 7 scored categories. Health Gorilla leads on transparency \u0026 trust.", "b": { "slug": "health-gorilla", "name": "Health Gorilla", "vendor": "Health Gorilla, Inc.", "vendorUrl": "https://www.healthgorilla.com", "kind": "http-api", "category": "health-data", "summary": "Health Gorilla is a designated TEFCA QHIN whose FHIR R4 API retrieves patient records from national networks (Patient360), places lab orders and returns results, and sends ADT and clinical alerts, for organisations it onboards.", "url": "https://www.anchorterminal.com/tools/health-gorilla", "markdownUrl": "https://www.anchorterminal.com/tools/health-gorilla.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/health-gorilla.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/health-gorilla.json", "license": "Proprietary service under Health Gorilla's API Terms of Use (updated 22 January 2026), with a signed licence agreement required before production", "transports": [ "http" ], "packages": [], "auth": "oauth", "authNotes": "OAuth 2.0 credentials (client ID and secret) are issued by Health Gorilla during implementation, separately for sandbox and production. Server-to-server calls use the JWT bearer grant with an assertion signed HS256 with the client secret. User-facing apps use the authorisation code grant, and an implicit grant can be enabled. Scopes such as `system/Patient.read`, `system/Observation.write` and `patient360` are assigned at registration and cannot be self-assigned.", "pricing": "paid", "pricingNotes": "No public prices. The API Terms of Use say fees 'are determined on a case-by-case basis by our business development team', and the sandbox is requested through the contact page (checked 2026-10-14).", "priceSummary": "Paid", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer portal, llms.txt or the API terms (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://developer.healthgorilla.com", "llmsTxt": "https://developer.healthgorilla.com/llms.txt", "capabilities": [ "health.records", "health.fhir", "health.consent" ], "tags": [ "hosted", "health-records", "fhir", "qhin", "lab-orders", "oauth", "llms-txt", "webhooks", "status-page", "sales-led", "hitrust", "soc2" ], "lastRelease": "2026-10-14", "graded": true, "anchor": { "graded": true, "score": 59.3, "grade": "C", "agentReady": false, "rank": 583, "ranked": true, "rankOf": 1076, "categoryRank": 4, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 63, "payments": 5, "reliability": 58, "schema": 80, "security": 66, "transparency": 61 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": 0, "verdict": "A TEFCA QHIN with a FHIR R4 API, OpenAPI fragments on every reference page, idempotency keys on POST and dated weekly release notes. Access is sales-led, with case-by-case fees, a sandbox by request and no published rate limit numbers, and the API terms allow access to be cut at any time.", "bestFor": "US providers, labs and digital health companies that need network record retrieval and lab ordering through one FHIR API with a QHIN behind it.", "strengths": [ "Designated TEFCA QHIN with Patient360 retrieval across national networks, plus lab orders and ADT alerts", "`HG-Idempotency-Key` on POST, replaying the first response and returning 409 on conflicts", "llms.txt, Markdown pages and an OpenAPI 3.1 fragment on each reference page", "Release notes dated separately for sandbox and production, the latest on 14 October 2026" ], "weaknesses": [ "No public prices. Fees are set case by case and the sandbox is requested by form", "Rate limits are enforced with no published numbers", "JWT bearer assertions are signed HS256 with the shared client secret", "The API terms allow termination or disabling of access at any time, with or without notice" ], "agentNotes": [ "Send a fresh UUID in `HG-Idempotency-Key` on every POST and reuse it only when retrying the same payload", "Poll async operations no sooner than the `Retry-After` value and treat 454 as an expired result", "Follow `link.relation=next` in Bundles rather than building offsets yourself", "Expect mocked Patient360 data in sandbox unless network connectivity is enabled for the tenant", "Log `X-HG-Request-Id` from each response for support cases" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.3 } ], "editorialScores": { "ergonomics": 72, "maintenance": 63, "payments": 5, "reliability": 58, "schema": 80, "security": 66, "transparency": 38 }, "provenanceScore": 83 }, "connect": { "http": "GET https://sandbox.healthgorilla.com/fhir/R4/Patient?_count=50\nAuthorization: Bearer \u003caccess-token\u003e\nAccept: application/fhir+json" }, "letme": { "capability": "https://letme.dev/health.records", "tool": "https://letme.dev/health-gorilla" }, "area": "domain-data", "provenance": { "legalEntity": "Health Gorilla, Inc.", "domain": "healthgorilla.com", "domainRegistered": "2006-04-09", "endpointOnVendorDomain": true, "terms": "https://developer.healthgorilla.com/docs/terms-of-use", "privacy": "https://www.healthgorilla.com/home/privacy-policy", "statusPage": "https://status.healthgorilla.com", "changelog": "https://developer.healthgorilla.com/changelog", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The API Terms of Use (updated 22 January 2026) are between the developer and Health Gorilla, Inc., require a signed licence before production, and may be amended with or without notice.", "The privacy policy (last updated 30 August 2024) names Health Gorilla, Inc., covers the website and its platforms, gives no retention periods or sub-processors, and lists a Coral Gables, FL mailing address.", "www.healthgorilla.com/.well-known/security.txt returns the site's 404 page. A page at /home/security-txt shows a security.txt with Contact security@healthgorilla.com and Expires 2025-12-31.", "The website's Terms of Use page links an Enterprise SaaS Agreement (July 2024 version) that we did not read.", "RDAP gives healthgorilla.com a registration date of 2006-04-09." ], "score": 83 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/health-gorilla.json", "live": { "slug": "health-gorilla", "vendorStatus": { "page": "https://status.healthgorilla.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-14T09:52:42.042582907Z" }, "updatedAt": "2026-10-14T09:52:42.042582907Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Health Samurai, Inc.", "b": "Health Gorilla, Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP, SSE (legacy)", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "OAuth", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. Aidbox runs from Health Samurai's Docker images under a free development licence (no PHI) or a paid production licence. Examples and the Python SDK on GitHub are MIT", "b": "Proprietary service under Health Gorilla's API Terms of Use (updated 22 January 2026), with a signed licence agreement required before production", "name": "Licence" }, { "a": "9", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-08", "b": "2026-10-14", "name": "Last release" }, { "a": "no document linked", "b": "no date given", "name": "Terms last updated" }, { "a": "2021-06-10", "b": "2024-08-30", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "", "b": "not found in the text", "name": "Arbitration or class-action waiver" } ], "faq": [ { "answer": "Aidbox scores 64.2 (B) on agent readiness against Health Gorilla's 59.3 (C), and leads in 5 of 7 scored categories. Health Gorilla leads on transparency \u0026 trust.", "question": "Which is better for AI agents, Aidbox or Health Gorilla?" }, { "answer": "Both use an OAuth sign-in.", "question": "Do Aidbox and Health Gorilla need an API key?" }, { "answer": "No hosted endpoint is listed for Aidbox. No hosted endpoint is listed for Health Gorilla.", "question": "Can an agent call Aidbox and Health Gorilla without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Agent ergonomics, 79 against 72", "Security \u0026 auth, 74 against 66", "Payments \u0026 pricing, 25 against 5", "Maintenance \u0026 community, 80 against 63" ], "also": null, "goodFor": "An organisation building its own clinical data repository, EHR or payer platform on FHIR, where an agent works against that store.", "slug": "aidbox", "watchFor": "No built-in rate limiting or brute-force protection, by the vendor's hardening page" }, { "aheadOn": [ "Transparency \u0026 trust, 61 against 45" ], "also": null, "goodFor": "US providers, labs and digital health companies that need network record retrieval and lab ordering through one FHIR API with a QHIN behind it.", "slug": "health-gorilla", "watchFor": "No public prices. Fees are set case by case and the sandbox is requested by form" } ], "job": { "capability": "health.fhir", "name": "FHIR servers" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aidbox-vs-medblocks.json", "title": "Aidbox vs Medblocks", "url": "https://www.anchorterminal.com/compare/aidbox-vs-medblocks" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-medplum.json", "title": "Aidbox vs Medplum", "url": "https://www.anchorterminal.com/compare/aidbox-vs-medplum" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-metriport.json", "title": "Aidbox vs Metriport Medical API", "url": "https://www.anchorterminal.com/compare/aidbox-vs-metriport" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-particle-health.json", "title": "Aidbox vs Particle Health", "url": "https://www.anchorterminal.com/compare/aidbox-vs-particle-health" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-redox.json", "title": "Aidbox vs Redox", "url": "https://www.anchorterminal.com/compare/aidbox-vs-redox" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-rook.json", "title": "Aidbox vs ROOK", "url": "https://www.anchorterminal.com/compare/aidbox-vs-rook" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-terra.json", "title": "Aidbox vs Terra API", "url": "https://www.anchorterminal.com/compare/aidbox-vs-terra" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-zus-health.json", "title": "Aidbox vs Zus Health", "url": "https://www.anchorterminal.com/compare/aidbox-vs-zus-health" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-rook.json", "title": "Health Gorilla vs ROOK", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-rook" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-terra.json", "title": "Health Gorilla vs Terra API", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-terra" }, { "json": "https://www.anchorterminal.com/compare/1uphealth-vs-aidbox.json", "title": "1upHealth vs Aidbox", "url": "https://www.anchorterminal.com/compare/1uphealth-vs-aidbox" }, { "json": "https://www.anchorterminal.com/compare/1uphealth-vs-health-gorilla.json", "title": "1upHealth vs Health Gorilla", "url": "https://www.anchorterminal.com/compare/1uphealth-vs-health-gorilla" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-medblocks.json", "title": "Health Gorilla vs Medblocks", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-medblocks" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-medplum.json", "title": "Health Gorilla vs Medplum", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-medplum" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-metriport.json", "title": "Health Gorilla vs Metriport Medical API", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-metriport" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-particle-health.json", "title": "Health Gorilla vs Particle Health", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-particle-health" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-redox.json", "title": "Health Gorilla vs Redox", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-redox" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-zus-health.json", "title": "Health Gorilla vs Zus Health", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-zus-health" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-validic.json", "title": "Aidbox vs Validic Inform", "url": "https://www.anchorterminal.com/compare/aidbox-vs-validic" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-validic.json", "title": "Health Gorilla vs Validic Inform", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-validic" } ], "scores": [ { "aidbox": 59, "by": 1, "edge": "aidbox", "health-gorilla": 58, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "aidbox": 77, "by": 3, "edge": "health-gorilla", "health-gorilla": 80, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "aidbox": 79, "by": 7, "edge": "aidbox", "health-gorilla": 72, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "aidbox": 74, "by": 8, "edge": "aidbox", "health-gorilla": 66, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "aidbox": 25, "by": 20, "edge": "aidbox", "health-gorilla": 5, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "aidbox": 80, "by": 17, "edge": "aidbox", "health-gorilla": 63, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "aidbox": 45, "by": 16, "edge": "health-gorilla", "health-gorilla": 61, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Aidbox scores 64.2 (B) on agent readiness against Health Gorilla's 59.3 (C), and leads in 5 of 7 scored categories. Health Gorilla leads on transparency \u0026 trust. Both do fhir servers.", "verdicts": { "aidbox": "Graded on the FHIR REST API of an Aidbox instance the owner runs. Monthly releases, two-year LTS lines, SMART on FHIR, AccessPolicy rules and AuditEvent logging are documented, and a free development licence needs no sales call. Aidbox has no rate limiting of its own, its MCP module is alpha, and no terms of service were found on the website.", "health-gorilla": "A TEFCA QHIN with a FHIR R4 API, OpenAPI fragments on every reference page, idempotency keys on POST and dated weekly release notes. Access is sales-led, with case-by-case fees, a sandbox by request and no published rate limit numbers, and the API terms allow access to be cut at any time." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla", "json": "https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla.md", "slim": "https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla.min.md" }, "markdown": "Aidbox scores 64.2 (B) on agent readiness against Health Gorilla's 59.3 (C), and leads in 5 of 7 scored categories. Health Gorilla leads on transparency \u0026 trust. Both do fhir servers.\n\n- Aidbox: grade B, 64.2/100, rank #385 of 1076. Markdown https://www.anchorterminal.com/tools/aidbox.md · JSON https://www.anchorterminal.com/api/v1/tools/aidbox.json\n- Health Gorilla: grade C, 59.3/100, rank #583 of 1076. Markdown https://www.anchorterminal.com/tools/health-gorilla.md · JSON https://www.anchorterminal.com/api/v1/tools/health-gorilla.json\n- Best health record and wellness data APIs for AI agents: https://www.anchorterminal.com/best/health-data/index.md\n- All 63 health comparisons: https://www.anchorterminal.com/compare/health-data/index.md\n\n## Which one, for what\n\n### Aidbox (B)\n\nGood for: An organisation building its own clinical data repository, EHR or payer platform on FHIR, where an agent works against that store.\n\nAhead on:\n- Agent ergonomics, 79 against 72\n- Security \u0026 auth, 74 against 66\n- Payments \u0026 pricing, 25 against 5\n- Maintenance \u0026 community, 80 against 63\n\nWatch for: No built-in rate limiting or brute-force protection, by the vendor's hardening page\n\n### Health Gorilla (C)\n\nGood for: US providers, labs and digital health companies that need network record retrieval and lab ordering through one FHIR API with a QHIN behind it.\n\nAhead on:\n- Transparency \u0026 trust, 61 against 45\n\nWatch for: No public prices. Fees are set case by case and the sandbox is requested by form\n\n\n## Score by category\n\n| Category | Weight | Aidbox | Health Gorilla | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 59 | 58 | Aidbox +1 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 80 | Health Gorilla +3 |\n| Agent ergonomics | 13% (16.2 this run) | 79 | 72 | Aidbox +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 74 | 66 | Aidbox +8 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 5 | Aidbox +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 80 | 63 | Aidbox +17 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 45 | 61 | Health Gorilla +16 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **64.2 · B** | **59.3 · C** | |\n\n## Facts side by side\n\n| Fact | Aidbox | Health Gorilla |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Health Samurai, Inc. | Health Gorilla, Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP, Streamable HTTP, SSE (legacy) | HTTP |\n| Auth | OAuth | OAuth |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | Proprietary. Aidbox runs from Health Samurai's Docker images under a free development licence (no PHI) or a paid production licence. Examples and the Python SDK on GitHub are MIT | Proprietary service under Health Gorilla's API Terms of Use (updated 22 January 2026), with a signed licence agreement required before production |\n| Tools exposed | 9 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-08 | 2026-10-14 |\n| Terms last updated | no document linked | no date given |\n| Privacy policy last updated | 2021-06-10 | 2024-08-30 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | not found in the text |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | yes |\n| Arbitration or class-action waiver | | not found in the text |\n\n## Verdicts\n\n**Aidbox.** Graded on the FHIR REST API of an Aidbox instance the owner runs. Monthly releases, two-year LTS lines, SMART on FHIR, AccessPolicy rules and AuditEvent logging are documented, and a free development licence needs no sales call. Aidbox has no rate limiting of its own, its MCP module is alpha, and no terms of service were found on the website.\n\n**Health Gorilla.** A TEFCA QHIN with a FHIR R4 API, OpenAPI fragments on every reference page, idempotency keys on POST and dated weekly release notes. Access is sales-led, with case-by-case fees, a sandbox by request and no published rate limit numbers, and the API terms allow access to be cut at any time.\n\n## Before you call either\n\n### Aidbox\n\n1. Ask the operator for a Client with an AccessPolicy limited to the task. Don't rely on the public MCP policy, which the docs mark unsafe\n2. Use `If-None-Exist` on creates and conditional update on identifiers so retries don't duplicate records\n3. Use `_elements` and `_count` to keep responses small, and follow the Bundle's paging links\n4. Throttle yourself. Aidbox applies no rate limit, so a burst lands on the customer's database\n5. Don't load real patient data into an instance on a development licence\n\n### Health Gorilla\n\n1. Send a fresh UUID in `HG-Idempotency-Key` on every POST and reuse it only when retrying the same payload\n2. Poll async operations no sooner than the `Retry-After` value and treat 454 as an expired result\n3. Follow `link.relation=next` in Bundles rather than building offsets yourself\n4. Expect mocked Patient360 data in sandbox unless network connectivity is enabled for the tenant\n5. Log `X-HG-Request-Id` from each response for support cases\n\n## Questions\n\n### Which is better for AI agents, Aidbox or Health Gorilla?\n\nAidbox scores 64.2 (B) on agent readiness against Health Gorilla's 59.3 (C), and leads in 5 of 7 scored categories. Health Gorilla leads on transparency \u0026 trust.\n\n### Do Aidbox and Health Gorilla need an API key?\n\nBoth use an OAuth sign-in.\n\n### Can an agent call Aidbox and Health Gorilla without installing anything?\n\nNo hosted endpoint is listed for Aidbox. No hosted endpoint is listed for Health Gorilla.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla.json, and with the fewest tokens: https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"aidbox\", \"b\": \"health-gorilla\"}`. From a terminal: `anchor compare aidbox health-gorilla`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/aidbox.json and https://www.anchorterminal.com/api/v1/tools/health-gorilla.json\n\n## Other comparisons with Aidbox or Health Gorilla\n\n- [Aidbox vs Medblocks](https://www.anchorterminal.com/compare/aidbox-vs-medblocks.md)\n- [Aidbox vs Medplum](https://www.anchorterminal.com/compare/aidbox-vs-medplum.md)\n- [Aidbox vs Metriport Medical API](https://www.anchorterminal.com/compare/aidbox-vs-metriport.md)\n- [Aidbox vs Particle Health](https://www.anchorterminal.com/compare/aidbox-vs-particle-health.md)\n- [Aidbox vs Redox](https://www.anchorterminal.com/compare/aidbox-vs-redox.md)\n- [Aidbox vs ROOK](https://www.anchorterminal.com/compare/aidbox-vs-rook.md)\n- [Aidbox vs Terra API](https://www.anchorterminal.com/compare/aidbox-vs-terra.md)\n- [Aidbox vs Zus Health](https://www.anchorterminal.com/compare/aidbox-vs-zus-health.md)\n- [Health Gorilla vs ROOK](https://www.anchorterminal.com/compare/health-gorilla-vs-rook.md)\n- [Health Gorilla vs Terra API](https://www.anchorterminal.com/compare/health-gorilla-vs-terra.md)\n- [1upHealth vs Aidbox](https://www.anchorterminal.com/compare/1uphealth-vs-aidbox.md)\n- [1upHealth vs Health Gorilla](https://www.anchorterminal.com/compare/1uphealth-vs-health-gorilla.md)\n- [Health Gorilla vs Medblocks](https://www.anchorterminal.com/compare/health-gorilla-vs-medblocks.md)\n- [Health Gorilla vs Medplum](https://www.anchorterminal.com/compare/health-gorilla-vs-medplum.md)\n- [Health Gorilla vs Metriport Medical API](https://www.anchorterminal.com/compare/health-gorilla-vs-metriport.md)\n- [Health Gorilla vs Particle Health](https://www.anchorterminal.com/compare/health-gorilla-vs-particle-health.md)\n- [Health Gorilla vs Redox](https://www.anchorterminal.com/compare/health-gorilla-vs-redox.md)\n- [Health Gorilla vs Zus Health](https://www.anchorterminal.com/compare/health-gorilla-vs-zus-health.md)\n- [Aidbox vs Validic Inform](https://www.anchorterminal.com/compare/aidbox-vs-validic.md)\n- [Health Gorilla vs Validic Inform](https://www.anchorterminal.com/compare/health-gorilla-vs-validic.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Aidbox vs Health Gorilla", "url": "" } ], "description": "Aidbox scores 64.2 (B) to Health Gorilla's 59.3 (C) for fhir servers. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Aidbox B 64.2", "Health Gorilla C 59.3", "scores" ], "h1": "Aidbox vs Health Gorilla", "image": "https://www.anchorterminal.com/assets/og/compare-aidbox-vs-health-gorilla.png", "path": "/compare/aidbox-vs-health-gorilla", "published": "2026-10-01", "section": "tools", "title": "Aidbox vs Health Gorilla for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-14", "url": "https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla" }, "tokens": { "markdown": 2250, "slim": 680 }, "version": 1 }