fhir-upstream-proxy

Proxy AI requests to FHIR servers with guardrails and PHI redaction.

27|9|Updated Mar 31, 2025
One-click install
npx skills add https://github.com/aks129/HealthClawGuardrails --skill fhir-upstream-proxy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fhir-upstream-proxy
Source: https://github.com/aks129/HealthClawGuardrails/tree/main/skills/fhir-upstream-proxy
Command: npx skills add https://github.com/aks129/HealthClawGuardrails --skill fhir-upstream-proxy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Connect AI agents to real FHIR servers while maintaining MCP guardrails and PHI redaction.

Core Features & Use Cases

  • Proxying requests to real FHIR servers (HAPI FHIR, SMART Health IT, Epic sandbox) with full guardrails.
  • Automatic PHI redaction and immutable audit trails on upstream data.
  • URL rewriting to ensure upstream server details never leak to clients.

Quick Start

Set the FHIR_UPSTREAM_URL environment variable to a real FHIR server and run the main.py script to start the proxy.

Frequently Asked Questions about fhir-upstream-proxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I proxy AI agent requests to a real FHIR server without exposing the upstream URL?▼

Proxy AI requests to real FHIR servers using a guardrail-backed proxy that performs URL rewriting, ensuring upstream server details never leak to clients while maintaining MCP guardrails.

How does PHI redaction work when connecting to EHR systems?▼

PHI redaction is automatically applied to upstream data retrieved from EHR systems, ensuring sensitive health information is scrubbed before responses reach the client.

Can I connect my AI agent to HAPI FHIR or Epic sandbox servers?▼

Yes, you can connect to HAPI FHIR, SMART Health IT, or Epic sandbox servers by setting the FHIR_UPSTREAM_URL environment variable to your target server.

Does proxying requests to production EHRs support audit trails and step-up authentication?▼

Yes, proxying requests to production EHRs supports generating immutable audit trails and enforcing step-up authentication to meet healthcare data compliance requirements.

What is the best way to add guardrails to FHIR API requests in healthcare workflows?▼

Deploying a dedicated FHIR upstream proxy is the best way to enforce guardrails, providing automatic PHI redaction and audit trails for healthcare workflows.