MCP server for Backwork: Medicare and payer medical policy, prior authorization, claim risk, and medical codes. Hosted OAuth remote or local stdio.
Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
BACKWORK_API_KEYAPI keyrequiredBackwork API key (bwk_live_...). The hosted remote uses OAuth instead and needs no key.
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
coverage_lookupNo description publishedThis tool published no description. Forge does not invent one.
policy_researchResearch coverage policies and criteria.
Use this for policy search, fetching one policy by ID, searching extracted criteria, reviewing policy changes, mapping state to MAC jurisdiction, or comparing how Medicare contractors (MACs) cover the same procedure codes side by side. This replaces several…Research coverage policies and criteria. Use this for policy search, fetching one policy by ID, searching extracted criteria, reviewing policy changes, mapping state to MAC jurisdiction, or comparing how Medicare contractors (MACs) cover the same procedure codes side by side. This replaces several…
No input schema was published for this tool.
claim_validationValidate claim coverage, documentation requirements, denial risk, and optional policy-specific criteria in one workflow.Validate claim coverage, documentation requirements, denial risk, and optional policy-specific criteria in one workflow.
No input schema was published for this tool.
prior_auth_researchCheck, start, or poll payer prior-authorization research without exposing separate task-management tools.Check, start, or poll payer prior-authorization research without exposing separate task-management tools.
No input schema was published for this tool.
drug_formulary_researchSearch commercial pharmacy-benefit evidence from CVS Caremark, Express Scripts, and UnitedHealthcare / Optum Rx.Search commercial pharmacy-benefit evidence from CVS Caremark, Express Scripts, and UnitedHealthcare / Optum Rx.
No input schema was published for this tool.
compliance_reviewReview compliance dashboard state, list unreviewed policy changes, or acknowledge changes when explicitly requested.Review compliance dashboard state, list unreviewed policy changes, or acknowledge changes when explicitly requested.
No input schema was published for this tool.
webhook_managementList, create, update, delete, or test webhook endpoints. Use only when the user is explicitly managing webhook configuration. Backwork delivers one event type, compliance.acknowledged; policy-change webhooks are not sent.List, create, update, delete, or test webhook endpoints. Use only when the user is explicitly managing webhook configuration. Backwork delivers one event type, compliance.acknowledged; policy-change webhooks are not sent.
No input schema was published for this tool.
system_healthCheck Backwork API health and dependency status. Use for diagnostics, not for coverage research.Check Backwork API health and dependency status. Use for diagnostics, not for coverage research.
No input schema was published for this tool.
7 of 8 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
MCP server for Backwork: Medicare and payer medical policy, prior authorization, claim risk, and medical codes. Hosted OAuth remote or local stdio.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the depth-4 limit. Anything below that level was never resolved.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
54 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+42 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.