# Medblocks (slim)

> Medblocks Platform lets an app or agent connect a patient's hospital, clinic and insurer records through SMART on FHIR and read them back as FHIR R4, through a REST API, a TypeScript SDK or a remote MCP server.

- Full: https://www.anchorterminal.com/tools/medblocks.md (~7,150 tokens) · this version ~1,730 tokens · JSON https://www.anchorterminal.com/tools/medblocks.json · canonical https://www.anchorterminal.com/tools/medblocks
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-14

**D · 52.7/100 · rank #773 of 1076 · #9 in Health records & wellness data · not agent-ready · confidence medium**


Assessment: Patient-authorised record retrieval with a ten-tool remote MCP server, OAuth with per-capability consent, an audit entry for every call and a free plan for 1,000 active patients. No status page, no published rate limits and no idempotency keys were found, and the OpenAPI file behind the reference is not published.

## Facts

- Kind: HTTP API · vendor: Medblocks Inc. · category: Health records & wellness data · legal entity: Medblocks Inc. · provenance 70/100
- Endpoint: `https://app.medblocks.com/mcp` (HTTP, Streamable HTTP)
- Auth: OAuth or key · pricing: Freemium · x402: no · licence: Proprietary service under Medblocks' terms. The medblocks TypeScript SDK on npm carries a proprietary licence that forbids redistribution and reverse engineering. The agent skills repository has no licence file
- Probe metrics: not measured yet (probes haven't run)
- Surfaces: REST API at https://app.medblocks.com (patients, patient sessions, connections, records, webhooks, launch context), TypeScript SDK `medblocks`, remote MCP server at https://app.medblocks.com/mcp, agent skills in medblocks/skills
- MCP tools: get_workspace_overview, list_workspaces, list_people, search_health_systems, choose_health_systems, connect_health_system, check_connection_status, get_health_records, disconnect_health_system, delete_person
- Credentials: Workspace API keys with `mb_sk_sbx_` and `mb_sk_live_` prefixes, created and revoked by owners and admins. OAuth 2 at https://app.medblocks.com/api/auth with dynamic client registration, authorisation code, client credentials and refresh grants, introspection and revocation, and scopes patients:read, patients:write, patient_sessions:read, patient_sessions:write, connections:read and fhir:read
- Record sources: Patient access through SMART on FHIR to Epic, Oracle Health (Cerner), athenahealth, eClinicalWorks, MEDITECH, CMS Blue Button, Aetna and UnitedHealthcare. Clinician launch, backend services and CommonWell network access are documented, the backend guides as a work in progress
- Paging and errors: Cursor paging with `limit` from 1 to 100 (default 10) and `starting_after`. Error envelope with `type`, `code`, `message`, `param`, `request_id` and `doc_url`. The SDK retries 429, 502, 503 and 504 up to three times and honours `Retry-After`
- Webhooks: Signed with a `Medblocks-Signature` header, retried with backoff on non-2xx, endpoints auto-disabled after retries run out, manual redelivery limited to once a minute per event
- Compliance: The security page says public materials list HIPAA, SOC 2 Type II, ISO 27001 and GDPR, and that commercial plans include BAA support. Reports come in a security packet on request
- Prices: Enterprise plan, uncapped patients $5000 per month (plan)

- Scores: Reliability 28, Performance pending, Schema & documentation 62, Agent ergonomics 72, Security & auth 67, Payments & pricing 25, Task success pending, Maintenance & community 69, Transparency & trust 51 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines and scored on the Platform API and MCP server. · Schema & documentation, The reference pages say they are generated from `openapi/medblocks.json`, but that file is not published and the usual paths on app.medblock… · Agent ergonomics, Ten MCP tools, short and task-shaped, and API list responses sized by `limit`. · Security & auth, OAuth from Medblocks' own server with dynamic client registration, PKCE, introspection, revocation and six resource scopes, and workspace AP… · Payments & pricing, Read with the hosted rubric. · Maintenance & community, npm shows 1.2.0-dev.5 on 10 August, dev.6 on 7 September and dev.7 on 14 September 2026, and the skills repository was last pushed on 2 Octo… · Transparency & trust, Closed service.
- Sources: 24, open questions: 6, both in the full twin
- Capabilities: health.records, health.consent, health.ehr, health.fhir, agent.tools
- JSON: https://www.anchorterminal.com/api/v1/tools/medblocks.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/medblocks.svg` or a link to https://www.anchorterminal.com/tools/medblocks from a page on medblocks.com or one of its subdomains, or the README of github.com/medblocks/skills, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Connect with `claude mcp add --transport http medblocks https://app.medblocks.com/mcp` and sign in, or send a workspace API key as a Bearer token from a backend
2. Ask the person before calling `disconnect_health_system` or `delete_person`. Both are permanent
3. Wait for the connection webhook or check connection status before reading records. Pulls run in the background after the patient approves
4. Branch on `error.code`, not the message, and wait the `Retry-After` seconds on a 429
5. Use a Sandbox workspace and the Synthetic Hospital (password `demopass`) for tests. Sandbox keys cannot reach production sources

## Connect

```bash
npm install medblocks
```

```bash
curl https://app.medblocks.com/patients -H "Authorization: Bearer $MEDBLOCKS_API_KEY" -H "Content-Type: application/json"
```

```bash
claude mcp add --transport http medblocks https://app.medblocks.com/mcp
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/medblocks

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Zus Health | C | 56.6 | health.records, health.fhir, health.ehr, health.consent | https://www.anchorterminal.com/tools/zus-health.min.md |
| Metriport Medical API | D | 50.1 | health.records, health.fhir, health.consent, health.ehr | https://www.anchorterminal.com/tools/metriport.min.md |
| Aidbox | B | 64.2 | health.fhir, health.records, health.consent | https://www.anchorterminal.com/tools/aidbox.min.md |
| Health Gorilla | C | 59.3 | health.records, health.fhir, health.consent | https://www.anchorterminal.com/tools/health-gorilla.min.md |
| Redox | C | 58.3 | health.ehr, health.fhir, health.records | https://www.anchorterminal.com/tools/redox.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)