{ "data": { "a": { "slug": "aidbox", "name": "Aidbox", "vendor": "Health Samurai, Inc.", "vendorUrl": "https://www.health-samurai.io/aidbox", "kind": "http-api", "category": "health-data", "summary": "FHIR R4 and R5 server on PostgreSQL from Health Samurai, run from Docker images under a free development licence or a paid production licence. Agents use each instance's FHIR REST API or its alpha MCP server.", "url": "https://www.anchorterminal.com/tools/aidbox", "markdownUrl": "https://www.anchorterminal.com/tools/aidbox.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/aidbox.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/aidbox.json", "repo": "https://github.com/Aidbox", "license": "Proprietary. Aidbox runs from Health Samurai's Docker images under a free development licence (no PHI) or a paid production licence. Examples and the Python SDK on GitHub are MIT", "transports": [ "http", "streamable-http", "sse" ], "packages": [ { "registry": "oci", "name": "healthsamurai/aidboxone" } ], "auth": "oauth", "authNotes": "Each instance has its own OAuth 2.0 server. Agents use a Client resource with the client credentials grant and POST to /auth/token, and SMART on FHIR backend services with private key JWT are supported. AccessPolicy resources decide what each client, user or operation may do, and access token lifetime is set per Client. Basic auth with the client ID and secret is also documented. The MCP endpoints are closed until an AccessPolicy opens them.", "pricing": "freemium", "pricingNotes": "Aidbox Dev is $0 for development and testing with no PHI, Aidbox Base from $1,900 a month or $19,000 a year, Enterprise by contact (health-samurai.io/price, checked 2026-10-14). A production licence runs 14 days as a trial before Health Samurai extends it. A free hosted sandbox on Google Cloud comes with an aidbox.app account. Whether sign-up asks for a card was not established.", "priceSummary": "$1900 / mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or pricing page (checked 2026-10-14).", "endpoints": [] }, "toolCount": 9, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://www.health-samurai.io/docs/aidbox", "llmsTxt": "https://www.health-samurai.io/docs/aidbox/llms.txt", "capabilities": [ "health.fhir", "health.records", "health.consent" ], "tags": [ "self-hosted", "fhir", "mcp", "oauth", "smart-on-fhir", "docker", "postgresql", "llms-txt", "iso27001" ], "lastRelease": "2026-10-08", "graded": true, "anchor": { "graded": true, "score": 64.2, "grade": "B", "agentReady": false, "rank": 385, "ranked": true, "rankOf": 1076, "categoryRank": 3, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 79, "maintenance": 80, "payments": 25, "reliability": 59, "schema": 77, "security": 74, "transparency": 45 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": 0, "verdict": "Graded on the FHIR REST API of an Aidbox instance the owner runs. Monthly releases, two-year LTS lines, SMART on FHIR, AccessPolicy rules and AuditEvent logging are documented, and a free development licence needs no sales call. Aidbox has no rate limiting of its own, its MCP module is alpha, and no terms of service were found on the website.", "bestFor": "An organisation building its own clinical data repository, EHR or payer platform on FHIR, where an agent works against that store.", "strengths": [ "Monthly releases with dated notes, the latest 2609 on 8 October 2026, and LTS lines supported for two years", "SMART on FHIR backend services, client credentials and AccessPolicy rules per client, user or operation", "AuditEvent recording and an audit event topic that can forward to an external repository", "Free development licence and hosted sandbox, with Base pricing published from $1,900 a month", "Cosign-signed images, SBOMs per release and remediation deadlines from 7 days for critical vulnerabilities" ], "weaknesses": [ "No built-in rate limiting or brute-force protection, by the vendor's hardening page", "The MCP module is alpha, its tools take whole resources as free JSON, and no tool annotations are documented", "No terms of service or licence agreement was found on the website, and the privacy policy dates from 10 June 2021", "Closed source with no public CI and no OpenAPI document", "No public status page, security.txt or sub-processor list was found" ], "agentNotes": [ "Ask the operator for a Client with an AccessPolicy limited to the task. Don't rely on the public MCP policy, which the docs mark unsafe", "Use `If-None-Exist` on creates and conditional update on identifiers so retries don't duplicate records", "Use `_elements` and `_count` to keep responses small, and follow the Bundle's paging links", "Throttle yourself. Aidbox applies no rate limit, so a burst lands on the customer's database", "Don't load real patient data into an instance on a development licence" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 64.2 } ], "editorialScores": { "ergonomics": 79, "maintenance": 80, "payments": 25, "reliability": 59, "schema": 77, "security": 74, "transparency": 51 }, "provenanceScore": 39 }, "connect": { "install": "curl -JO https://aidbox.app/runme \u0026\u0026 docker compose up" }, "letme": { "capability": "https://letme.dev/health.fhir", "tool": "https://letme.dev/aidbox" }, "area": "domain-data", "unitPrices": [ { "item": "Aidbox Base licence", "unit": "month", "usd": 1900, "note": "From price, monthly billing. $19,000 a year on yearly billing" } ], "provenance": { "legalEntity": "Health Samurai, Inc.", "domain": "health-samurai.io", "domainRegistered": "", "endpointOnVendorDomain": false, "terms": "", "privacy": "https://www.health-samurai.io/legal/privacy-policy", "statusPage": "", "changelog": "https://www.health-samurai.io/docs/aidbox/overview/release-notes", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The site footer and privacy policy name Health Samurai, Inc. The privacy policy was last updated on 10 June 2021 and refers to Terms of Use that were not found.", "No terms of service or licence agreement was found at /legal or in the docs.", "www.health-samurai.io/.well-known/security.txt returns a 404 page. The supply chain page sends reports to security@health-samurai.io.", "Aidbox runs on the customer's infrastructure, so endpoints are on the customer's domain. The free sandbox runs on aidbox.app subdomains.", "No public status page was found. The domain registration date was not established." ], "score": 39 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/aidbox.json" }, "answer": "Aidbox scores 64.2 (B) on agent readiness against Metriport Medical API's 50.1 (D), and leads in 6 of 7 scored categories. Metriport Medical API leads on transparency \u0026 trust.", "b": { "slug": "metriport", "name": "Metriport Medical API", "vendor": "Metriport Inc.", "vendorUrl": "https://www.metriport.com", "kind": "http-api", "category": "health-data", "summary": "Metriport's Medical API retrieves a patient's records from US health information exchanges, pharmacies and labs, converts them to deduplicated FHIR, and returns them through a REST API with webhooks. Production use requires a covered entity with an NPI.", "url": "https://www.anchorterminal.com/tools/metriport", "markdownUrl": "https://www.anchorterminal.com/tools/metriport.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/metriport.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/metriport.json", "repo": "https://github.com/metriport/metriport", "license": "Proprietary hosted service under Metriport's terms of use. The source in metriport/metriport is AGPLv3, with an enterprise directory under its own licence, and the @metriport/api-sdk package on npm is MIT", "transports": [ "http" ], "packages": [ { "registry": "npm", "name": "@metriport/api-sdk" } ], "auth": "api-key", "authNotes": "Every request sends a key in the `x-api-key` header to https://api.metriport.com, or https://api.sandbox.metriport.com in sandbox mode. Keys are generated in the developer dashboard after Metriport approves the account, up to two at once for rotation, each revocable at once and each with full access including destructive operations. No scopes or read-only key were found. Production access needs a covered entity with an NPI and a treatment purpose of use, agreed on an intro call.", "pricing": "paid", "pricingNotes": "No public prices. metriport.com has no pricing page, the terms say some services carry a fee paid by card, wire or Stripe, and production access starts with an intro call booked from the dashboard. A sandbox with example patients opens once Metriport approves the access request, and its cost is not stated (checked 2026-10-14).", "priceSummary": "Paid", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the documentation, llms.txt, the repository README or the terms (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 793, "npmWeekly": 28168, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://docs.metriport.com/medical-api/getting-started/quickstart", "llmsTxt": "https://docs.metriport.com/llms.txt", "capabilities": [ "health.records", "health.fhir", "health.consent", "health.ehr" ], "tags": [ "hosted", "health-records", "fhir", "open-source", "agpl", "typescript", "llms-txt", "webhooks", "status-page", "sales-led", "hitrust", "soc2" ], "lastRelease": "2026-09-28", "graded": true, "anchor": { "graded": true, "score": 50.1, "grade": "D", "agentReady": false, "rank": 833, "ranked": true, "rankOf": 1076, "categoryRank": 10, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 74, "payments": 5, "reliability": 45, "schema": 65, "security": 41, "transparency": 56 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": 0, "verdict": "One network query pulls a patient's records from HIEs, pharmacies and labs and returns deduplicated FHIR, with per-operation rate limits, RFC 7807 errors and AGPLv3 source. Each API key has full access with no scopes, there are no public prices, and the sandbox opens only after Metriport approves the account.", "bestFor": "US care providers and digital health companies that need a patient's network records as FHIR with webhooks.", "strengths": [ "One asynchronous network query covers HIEs, pharmacies and labs, with a webhook as each source is merged", "Consolidated FHIR output is deduplicated and coded, with PDF or HTML record summaries", "Rate limits published per operation, and `count` up to 500 per page", "AGPLv3 source on GitHub and an MIT TypeScript SDK released on 28 September 2026" ], "weaknesses": [ "Every API key has full access, including destructive operations, with no scopes", "No public prices, and the sandbox needs Metriport's approval first", "The Fern definition covers only part of the API and no public changelog was found", "The status page renders only with JavaScript, so its history could not be read" ], "agentNotes": [ "Check the `errors` array after Start Network Query. It returns 2XX even when some sources fail", "Wait for `network-query.*` webhooks or poll Get Network Query Status before reading consolidated data, which is cached from the last query", "Send the resource's `eTag` in `If-Match` on updates to avoid overwriting newer data", "Keep patient creates under 15 a minute and network queries under 20 a minute per source", "In sandbox, create patients whose first name matches a pre-defined persona to get example records" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.1 } ], "editorialScores": { "ergonomics": 70, "maintenance": 74, "payments": 5, "reliability": 45, "schema": 65, "security": 41, "transparency": 43 }, "provenanceScore": 69 }, "connect": { "install": "npm install --save @metriport/api-sdk", "http": "POST https://api.sandbox.metriport.com/medical/v1/patient?facilityId=\u003cfacility-id\u003e\nx-api-key: \u003capi-key\u003e\nContent-Type: application/json" }, "letme": { "capability": "https://letme.dev/health.records", "tool": "https://letme.dev/metriport" }, "area": "domain-data", "provenance": { "legalEntity": "Metriport Inc.", "domain": "metriport.com", "domainRegistered": "2021-02-09", "endpointOnVendorDomain": true, "terms": "https://www.metriport.com/terms", "privacy": "https://www.metriport.com/privacy-policy", "statusPage": "https://status.metriport.com", "changelog": "", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The terms of use (last updated January 2024) give a registered office at 2261 Market Street #4818, San Francisco, CA 94114, forbid access 'through automated or non-human means' and the use of 'data mining, robots, or similar data gathering and extraction tools', and say the site is not built for HIPAA-regulated use. We read them as a fact and fetched only what robots.txt allows.", "The privacy policy (last updated 21 February 2023) covers website visitors and customer contacts, says data is stored in the US, and does not mention API data or PHI.", "www.metriport.com/.well-known/security.txt returns 404. SECURITY.md in the repository sends reports to GitHub's vulnerability reporting or support@metriport.com.", "No public changelog was found in the documentation or on the website.", "RDAP gives metriport.com a registration date of 2021-02-09." ], "score": 69 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/metriport.json", "live": { "slug": "metriport", "vendorStatus": { "page": "https://status.metriport.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-14T08:53:23.949542071Z" }, "updatedAt": "2026-10-14T08:53:23.949542071Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Health Samurai, Inc.", "b": "Metriport Inc.", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP, SSE (legacy)", "b": "HTTP", "name": "Transports" }, { "a": "OAuth", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary. Aidbox runs from Health Samurai's Docker images under a free development licence (no PHI) or a paid production licence. Examples and the Python SDK on GitHub are MIT", "b": "Proprietary hosted service under Metriport's terms of use. The source in metriport/metriport is AGPLv3, with an enterprise directory under its own licence, and the @metriport/api-sdk package on npm is MIT", "name": "Licence" }, { "a": "9", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-08", "b": "2026-09-28", "name": "Last release" }, { "a": "no document linked", "b": "2024-01-01", "name": "Terms last updated" }, { "a": "2021-06-10", "b": "2023-02-21", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "yes", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "793 stars, 28k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Aidbox scores 64.2 (B) on agent readiness against Metriport Medical API's 50.1 (D), and leads in 6 of 7 scored categories. Metriport Medical API leads on transparency \u0026 trust.", "question": "Which is better for AI agents, Aidbox or Metriport Medical API?" }, { "answer": "Aidbox uses an OAuth sign-in. Metriport Medical API needs an API key.", "question": "Do Aidbox and Metriport Medical API need an API key?" }, { "answer": "No hosted endpoint is listed for Aidbox. No hosted endpoint is listed for Metriport Medical API.", "question": "Can an agent call Aidbox and Metriport Medical API without installing anything?" }, { "answer": "No open-source release is listed for Aidbox. Metriport Medical API is open source (Proprietary hosted service under Metriport's terms of use. The source in metriport/metriport is AGPLv3, with an enterprise directory under its own licence, and the @metriport/api-sdk package on npm is MIT).", "question": "Are Aidbox and Metriport Medical API open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 59 against 45", "Schema \u0026 documentation, 77 against 65", "Agent ergonomics, 79 against 70", "Security \u0026 auth, 74 against 41", "Payments \u0026 pricing, 25 against 5", "Maintenance \u0026 community, 80 against 74" ], "also": null, "goodFor": "An organisation building its own clinical data repository, EHR or payer platform on FHIR, where an agent works against that store.", "slug": "aidbox", "watchFor": "No built-in rate limiting or brute-force protection, by the vendor's hardening page" }, { "aheadOn": [ "Transparency \u0026 trust, 56 against 45" ], "also": [ "Open source" ], "goodFor": "US care providers and digital health companies that need a patient's network records as FHIR with webhooks.", "slug": "metriport", "watchFor": "Every API key has full access, including destructive operations, with no scopes" } ], "job": { "capability": "health.fhir", "name": "FHIR servers" }, "others": [ { "json": "https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla.json", "title": "Aidbox vs Health Gorilla", "url": "https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-medblocks.json", "title": "Aidbox vs Medblocks", "url": "https://www.anchorterminal.com/compare/aidbox-vs-medblocks" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-medplum.json", "title": "Aidbox vs Medplum", "url": "https://www.anchorterminal.com/compare/aidbox-vs-medplum" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-particle-health.json", "title": "Aidbox vs Particle Health", "url": "https://www.anchorterminal.com/compare/aidbox-vs-particle-health" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-redox.json", "title": "Aidbox vs Redox", "url": "https://www.anchorterminal.com/compare/aidbox-vs-redox" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-rook.json", "title": "Aidbox vs ROOK", "url": "https://www.anchorterminal.com/compare/aidbox-vs-rook" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-terra.json", "title": "Aidbox vs Terra API", "url": "https://www.anchorterminal.com/compare/aidbox-vs-terra" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-zus-health.json", "title": "Aidbox vs Zus Health", "url": "https://www.anchorterminal.com/compare/aidbox-vs-zus-health" }, { "json": "https://www.anchorterminal.com/compare/medplum-vs-metriport.json", "title": "Medplum vs Metriport Medical API", "url": "https://www.anchorterminal.com/compare/medplum-vs-metriport" }, { "json": "https://www.anchorterminal.com/compare/metriport-vs-rook.json", "title": "Metriport Medical API vs ROOK", "url": "https://www.anchorterminal.com/compare/metriport-vs-rook" }, { "json": "https://www.anchorterminal.com/compare/metriport-vs-terra.json", "title": "Metriport Medical API vs Terra API", "url": "https://www.anchorterminal.com/compare/metriport-vs-terra" }, { "json": "https://www.anchorterminal.com/compare/1uphealth-vs-aidbox.json", "title": "1upHealth vs Aidbox", "url": "https://www.anchorterminal.com/compare/1uphealth-vs-aidbox" }, { "json": "https://www.anchorterminal.com/compare/1uphealth-vs-metriport.json", "title": "1upHealth vs Metriport Medical API", "url": "https://www.anchorterminal.com/compare/1uphealth-vs-metriport" }, { "json": "https://www.anchorterminal.com/compare/health-gorilla-vs-metriport.json", "title": "Health Gorilla vs Metriport Medical API", "url": "https://www.anchorterminal.com/compare/health-gorilla-vs-metriport" }, { "json": "https://www.anchorterminal.com/compare/medblocks-vs-metriport.json", "title": "Medblocks vs Metriport Medical API", "url": "https://www.anchorterminal.com/compare/medblocks-vs-metriport" }, { "json": "https://www.anchorterminal.com/compare/metriport-vs-particle-health.json", "title": "Metriport Medical API vs Particle Health", "url": "https://www.anchorterminal.com/compare/metriport-vs-particle-health" }, { "json": "https://www.anchorterminal.com/compare/metriport-vs-redox.json", "title": "Metriport Medical API vs Redox", "url": "https://www.anchorterminal.com/compare/metriport-vs-redox" }, { "json": "https://www.anchorterminal.com/compare/metriport-vs-zus-health.json", "title": "Metriport Medical API vs Zus Health", "url": "https://www.anchorterminal.com/compare/metriport-vs-zus-health" }, { "json": "https://www.anchorterminal.com/compare/aidbox-vs-validic.json", "title": "Aidbox vs Validic Inform", "url": "https://www.anchorterminal.com/compare/aidbox-vs-validic" }, { "json": "https://www.anchorterminal.com/compare/metriport-vs-validic.json", "title": "Metriport Medical API vs Validic Inform", "url": "https://www.anchorterminal.com/compare/metriport-vs-validic" } ], "scores": [ { "aidbox": 59, "by": 14, "edge": "aidbox", "key": "reliability", "metriport": 45, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "aidbox": 77, "by": 12, "edge": "aidbox", "key": "schema", "metriport": 65, "name": "Schema \u0026 documentation", "weight": 13 }, { "aidbox": 79, "by": 9, "edge": "aidbox", "key": "ergonomics", "metriport": 70, "name": "Agent ergonomics", "weight": 13 }, { "aidbox": 74, "by": 33, "edge": "aidbox", "key": "security", "metriport": 41, "name": "Security \u0026 auth", "weight": 14 }, { "aidbox": 25, "by": 20, "edge": "aidbox", "key": "payments", "metriport": 5, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "aidbox": 80, "by": 6, "edge": "aidbox", "key": "maintenance", "metriport": 74, "name": "Maintenance \u0026 community", "weight": 7 }, { "aidbox": 45, "by": 11, "edge": "metriport", "key": "transparency", "metriport": 56, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Aidbox scores 64.2 (B) on agent readiness against Metriport Medical API's 50.1 (D), and leads in 6 of 7 scored categories. Metriport Medical API leads on transparency \u0026 trust. Both do fhir servers.", "verdicts": { "aidbox": "Graded on the FHIR REST API of an Aidbox instance the owner runs. Monthly releases, two-year LTS lines, SMART on FHIR, AccessPolicy rules and AuditEvent logging are documented, and a free development licence needs no sales call. Aidbox has no rate limiting of its own, its MCP module is alpha, and no terms of service were found on the website.", "metriport": "One network query pulls a patient's records from HIEs, pharmacies and labs and returns deduplicated FHIR, with per-operation rate limits, RFC 7807 errors and AGPLv3 source. Each API key has full access with no scopes, there are no public prices, and the sandbox opens only after Metriport approves the account." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/aidbox-vs-metriport", "json": "https://www.anchorterminal.com/compare/aidbox-vs-metriport.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/aidbox-vs-metriport.md", "slim": "https://www.anchorterminal.com/compare/aidbox-vs-metriport.min.md" }, "markdown": "Aidbox scores 64.2 (B) on agent readiness against Metriport Medical API's 50.1 (D), and leads in 6 of 7 scored categories. Metriport Medical API leads on transparency \u0026 trust. Both do fhir servers.\n\n- Aidbox: grade B, 64.2/100, rank #385 of 1076. Markdown https://www.anchorterminal.com/tools/aidbox.md · JSON https://www.anchorterminal.com/api/v1/tools/aidbox.json\n- Metriport Medical API: grade D, 50.1/100, rank #833 of 1076. Markdown https://www.anchorterminal.com/tools/metriport.md · JSON https://www.anchorterminal.com/api/v1/tools/metriport.json\n- Best health record and wellness data APIs for AI agents: https://www.anchorterminal.com/best/health-data/index.md\n- All 63 health comparisons: https://www.anchorterminal.com/compare/health-data/index.md\n\n## Which one, for what\n\n### Aidbox (B)\n\nGood for: An organisation building its own clinical data repository, EHR or payer platform on FHIR, where an agent works against that store.\n\nAhead on:\n- Reliability, 59 against 45\n- Schema \u0026 documentation, 77 against 65\n- Agent ergonomics, 79 against 70\n- Security \u0026 auth, 74 against 41\n- Payments \u0026 pricing, 25 against 5\n- Maintenance \u0026 community, 80 against 74\n\nWatch for: No built-in rate limiting or brute-force protection, by the vendor's hardening page\n\n### Metriport Medical API (D)\n\nGood for: US care providers and digital health companies that need a patient's network records as FHIR with webhooks.\n\nAhead on:\n- Transparency \u0026 trust, 56 against 45\n\nAlso in its favour:\n- Open source\n\nWatch for: Every API key has full access, including destructive operations, with no scopes\n\n\n## Score by category\n\n| Category | Weight | Aidbox | Metriport Medical API | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 59 | 45 | Aidbox +14 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 77 | 65 | Aidbox +12 |\n| Agent ergonomics | 13% (16.2 this run) | 79 | 70 | Aidbox +9 |\n| Security \u0026 auth | 14% (17.5 this run) | 74 | 41 | Aidbox +33 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 25 | 5 | Aidbox +20 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 80 | 74 | Aidbox +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 45 | 56 | Metriport Medical API +11 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **64.2 · B** | **50.1 · D** | |\n\n## Facts side by side\n\n| Fact | Aidbox | Metriport Medical API |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Health Samurai, Inc. | Metriport Inc. |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP, Streamable HTTP, SSE (legacy) | HTTP |\n| Auth | OAuth | API key |\n| Pricing | Freemium | Paid |\n| x402 | no | no |\n| Licence | Proprietary. Aidbox runs from Health Samurai's Docker images under a free development licence (no PHI) or a paid production licence. Examples and the Python SDK on GitHub are MIT | Proprietary hosted service under Metriport's terms of use. The source in metriport/metriport is AGPLv3, with an enterprise directory under its own licence, and the @metriport/api-sdk package on npm is MIT |\n| Tools exposed | 9 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-08 | 2026-09-28 |\n| Terms last updated | no document linked | 2024-01-01 |\n| Privacy policy last updated | 2021-06-10 | 2023-02-21 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | yes |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | yes |\n| Arbitration or class-action waiver | | yes |\n| Popularity | none | 793 stars, 28k npm/wk |\n\n## Verdicts\n\n**Aidbox.** Graded on the FHIR REST API of an Aidbox instance the owner runs. Monthly releases, two-year LTS lines, SMART on FHIR, AccessPolicy rules and AuditEvent logging are documented, and a free development licence needs no sales call. Aidbox has no rate limiting of its own, its MCP module is alpha, and no terms of service were found on the website.\n\n**Metriport Medical API.** One network query pulls a patient's records from HIEs, pharmacies and labs and returns deduplicated FHIR, with per-operation rate limits, RFC 7807 errors and AGPLv3 source. Each API key has full access with no scopes, there are no public prices, and the sandbox opens only after Metriport approves the account.\n\n## Before you call either\n\n### Aidbox\n\n1. Ask the operator for a Client with an AccessPolicy limited to the task. Don't rely on the public MCP policy, which the docs mark unsafe\n2. Use `If-None-Exist` on creates and conditional update on identifiers so retries don't duplicate records\n3. Use `_elements` and `_count` to keep responses small, and follow the Bundle's paging links\n4. Throttle yourself. Aidbox applies no rate limit, so a burst lands on the customer's database\n5. Don't load real patient data into an instance on a development licence\n\n### Metriport Medical API\n\n1. Check the `errors` array after Start Network Query. It returns 2XX even when some sources fail\n2. Wait for `network-query.*` webhooks or poll Get Network Query Status before reading consolidated data, which is cached from the last query\n3. Send the resource's `eTag` in `If-Match` on updates to avoid overwriting newer data\n4. Keep patient creates under 15 a minute and network queries under 20 a minute per source\n5. In sandbox, create patients whose first name matches a pre-defined persona to get example records\n\n## Questions\n\n### Which is better for AI agents, Aidbox or Metriport Medical API?\n\nAidbox scores 64.2 (B) on agent readiness against Metriport Medical API's 50.1 (D), and leads in 6 of 7 scored categories. Metriport Medical API leads on transparency \u0026 trust.\n\n### Do Aidbox and Metriport Medical API need an API key?\n\nAidbox uses an OAuth sign-in. Metriport Medical API needs an API key.\n\n### Can an agent call Aidbox and Metriport Medical API without installing anything?\n\nNo hosted endpoint is listed for Aidbox. No hosted endpoint is listed for Metriport Medical API.\n\n### Are Aidbox and Metriport Medical API open source?\n\nNo open-source release is listed for Aidbox. Metriport Medical API is open source (Proprietary hosted service under Metriport's terms of use. The source in metriport/metriport is AGPLv3, with an enterprise directory under its own licence, and the @metriport/api-sdk package on npm is MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/aidbox-vs-metriport.json, and with the fewest tokens: https://www.anchorterminal.com/compare/aidbox-vs-metriport.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"aidbox\", \"b\": \"metriport\"}`. From a terminal: `anchor compare aidbox metriport`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/aidbox.json and https://www.anchorterminal.com/api/v1/tools/metriport.json\n\n## Other comparisons with Aidbox or Metriport Medical API\n\n- [Aidbox vs Health Gorilla](https://www.anchorterminal.com/compare/aidbox-vs-health-gorilla.md)\n- [Aidbox vs Medblocks](https://www.anchorterminal.com/compare/aidbox-vs-medblocks.md)\n- [Aidbox vs Medplum](https://www.anchorterminal.com/compare/aidbox-vs-medplum.md)\n- [Aidbox vs Particle Health](https://www.anchorterminal.com/compare/aidbox-vs-particle-health.md)\n- [Aidbox vs Redox](https://www.anchorterminal.com/compare/aidbox-vs-redox.md)\n- [Aidbox vs ROOK](https://www.anchorterminal.com/compare/aidbox-vs-rook.md)\n- [Aidbox vs Terra API](https://www.anchorterminal.com/compare/aidbox-vs-terra.md)\n- [Aidbox vs Zus Health](https://www.anchorterminal.com/compare/aidbox-vs-zus-health.md)\n- [Medplum vs Metriport Medical API](https://www.anchorterminal.com/compare/medplum-vs-metriport.md)\n- [Metriport Medical API vs ROOK](https://www.anchorterminal.com/compare/metriport-vs-rook.md)\n- [Metriport Medical API vs Terra API](https://www.anchorterminal.com/compare/metriport-vs-terra.md)\n- [1upHealth vs Aidbox](https://www.anchorterminal.com/compare/1uphealth-vs-aidbox.md)\n- [1upHealth vs Metriport Medical API](https://www.anchorterminal.com/compare/1uphealth-vs-metriport.md)\n- [Health Gorilla vs Metriport Medical API](https://www.anchorterminal.com/compare/health-gorilla-vs-metriport.md)\n- [Medblocks vs Metriport Medical API](https://www.anchorterminal.com/compare/medblocks-vs-metriport.md)\n- [Metriport Medical API vs Particle Health](https://www.anchorterminal.com/compare/metriport-vs-particle-health.md)\n- [Metriport Medical API vs Redox](https://www.anchorterminal.com/compare/metriport-vs-redox.md)\n- [Metriport Medical API vs Zus Health](https://www.anchorterminal.com/compare/metriport-vs-zus-health.md)\n- [Aidbox vs Validic Inform](https://www.anchorterminal.com/compare/aidbox-vs-validic.md)\n- [Metriport Medical API vs Validic Inform](https://www.anchorterminal.com/compare/metriport-vs-validic.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Aidbox vs Metriport Medical API", "url": "" } ], "description": "Aidbox scores 64.2 (B) to Metriport Medical's 50.1 (D) for fhir servers. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Aidbox B 64.2", "Metriport Medical API D 50.1", "scores" ], "h1": "Aidbox vs Metriport Medical API", "image": "https://www.anchorterminal.com/assets/og/compare-aidbox-vs-metriport.png", "path": "/compare/aidbox-vs-metriport", "published": "2026-10-01", "section": "tools", "title": "Aidbox vs Metriport Medical for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-14", "url": "https://www.anchorterminal.com/compare/aidbox-vs-metriport" }, "tokens": { "markdown": 2400, "slim": 730 }, "version": 1 }