# @mymedi-ai/mcp-server

MCP server for DME billing and medical coding: HCPCS, ICD-10 and CPT lookup, DMEPOS fee schedules, Medicare prior-auth and F2F checks, denial codes, claim checks. 32 tools, 6 free. PHI-free.

- **Type:** MCP server
- **Trust:** 85/100 (A), scored on the package rubric
- **Verification:** verified (build provenance)
- **Version:** 1.7.7
- **Author:** io.github.MyMedi-AI
- **License:** MIT
- **npm:** @mymedi-ai/mcp-server
- **Endpoints:** streamable-http https://mymedi-ai.com/mcp-stream
- **Source:** https://github.com/MyMedi-AI/mymedi-ai-mcp-server
- **Endpoint health:** reachable (last checked 2026-10-17T15:29:14.726Z, 1 sample) — uptime is not a security property and is not part of the trust score
- **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport)

## Trust

85/100 (A), scored on the package rubric
- Publisher verified: no
- Build provenance: verified attestation
- npm trusted publishing (OIDC): yes
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 2 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-10-21T07:32:34.032Z
- **Version scanned:** 1.7.8
- **CVEs:** none found by OSV at scan time

## Tools

37 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `decode-denial` — Explain a CARC denial code and build an action plan to fix, resubmit, or appeal the claim.
- `order-readiness` — Assemble the blank pre-delivery paperwork checklist for a HCPCS code: SWO elements, F2F/WOPD, and prior authorization.
- `scrub-claim` — Check a draft DME claim's codes and date of service with claims_validate, check prior-authorization and F2F/WOPD list requirements with the free tools, and turn
- `draft-appeal` — Decode a denial code and structure a redetermination/appeal letter outline with the supporting documentation to attach.
- `estimate-reimbursement` — Pull the DMEPOS fee schedule for a code and state and explain the rental-vs-purchase and rural-vs-non-rural options.
- `pa_required_check` — Check whether a HCPCS code is on the current CMS Required Prior Authorization List (42 CFR 414.234) on a date of service (default today). Returns paRequired fla
- `denial_code_info` — Explain a DME claim denial code (CARC). Returns title, meaning, common DME causes, fixes, appealability, and related codes. Free, no API key required.
- `code_lookup_basic` — Look up basic metadata for a medical code: code, codeType, description, category, isActive. Basic metadata only — the paid code_lookup adds full metadata. Free,
- `reimbursement_basic` — Look up Medicare payment for a code. Returns the national facility and non-facility payment under the current Medicare PFS (CMS RVU × conversion factor) for pro
- `order_readiness_checklist`
- `modifier_advisor` — Editorial guidance on DMEPOS billing modifiers: the KX/GA/GY/GZ medical-necessity and liability family, RR/NU/UE rental-vs-purchase, capped-rental month markers
- `code_lookup` — Look up a medical code (ICD-10, CPT, HCPCS). Returns description, category, active status, and related codes. For DMEPOS (HCPCS) codes it also returns a labeled
- `code_lookup_batch` — Look up a list of medical codes (ICD-10, CPT, HCPCS) in one call. Per-item results mirror code_lookup (description, category, active status, related codes, DMEP
- `code_suggest`
- `code_validate` — Check that an ICD-10-CM, CPT or HCPCS Level II code exists and is valid on a date of service: termination and effective dates are applied, so a code deleted aft
- `code_validate_batch` — Validate up to 25 medical codes in one call, each judged as code_validate judges one: exists, and is valid on the date of service (dateOfService, YYYY-MM-DD, ap
- `pa_predict`
- `pa_status` — Check the status of a prior authorization request tracked in your MyMedi-AI web workspace (by its MyMedi-AI PA id). Returns current status, dates, and expiratio
- `pa_exposure_report`
- `ner_extract`
- `claims_validate`
- `compliance_audit`
- `drug_lookup` — Look up drug information including label data, adverse events, and related diagnosis codes. Source: openFDA (FDA drug labels and adverse-event reports); related
- `drug_interactions`
- `code_reimbursement` — Look up Medicare reimbursement rates for a medical code. Returns RVU values and estimated payment amounts using the PFS conversion factor. Source: the current M
- `fee_schedule_lookup` — Look up the CMS DMEPOS fee schedule for a DME/orthotic/prosthetic HCPCS code: rental (RR) vs purchase (NU new / UE used), non-rural vs rural, per state. Give a 
- `trials_search` — Search active clinical trials by condition, ICD-10 code, or intervention. Returns trial details including NCT ID, phase, enrollment, and eligibility. Source: Cl
- `code_crossref`
- `drug_rxnorm` — Normalize a drug name with NIH RxNorm: returns the matching RxNorm concepts (RxCUI, name, synonym, term type) and the primary RxCUI. It does not check interacti
- `provider_payments` — Look up pharmaceutical and device company payments to a physician (Sunshine Act data). Returns total payments, breakdown by type, and top paying companies. Sour
- `disease_surveillance` — Look up disease surveillance data including case counts and trends by condition and geography. Source: CDC National Notifiable Diseases Surveillance System (NND
- `provider_search` — Search the NPI provider directory. Find healthcare providers by name, specialty, or location.
- `provider_enrich` — Look up a provider by NPI in the CMS NPPES registry (name, credential, primary and other taxonomies, practice address, enumeration date) and add an LLM-generate
- `drug_enrich`
- `market_analysis` — Specialty snapshot for a US state: how many providers one CMS NPPES registry query matches for the specialty (the query returns at most 200 records, so the figu
- `account_status` — Check your MyMedi-AI account: current credit balance, USD equivalent, transaction count, recent transactions, and last activity. Free — never bills credits. Use
- `buy_credits`

## Install

**Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"mcp-server\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"@mymedi-ai/mcp-server\"\n      ],\n      \"env\": {\n        \"MCP_API_KEY\": \"<YOUR_MCP_API_KEY>\"\n      }\n    }\n  }\n}"
```
**Credentials it will ask for** (names only — Forge never holds a value):
- `MCP_API_KEY` — Mcp API Key (optional)
Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each <YOUR_NAME> in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one.
- This entry needs 1 credential (0 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset.

## Blast radius

Moderate blast radius — runs locally and hosted; holds an api key.
- Floor 27, ceiling 27 (tier: moderate)
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/%40mymedi-ai%2Fmcp-server
- Install plan: https://forgeregistry.com/api/v1/packages/%40mymedi-ai%2Fmcp-server/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/%40mymedi-ai%2Fmcp-server
- HTML page: https://forgeregistry.com/registry/%40mymedi-ai%2Fmcp-server
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.