fhir-upstream-proxy

Proxy AI requests to FHIR servers with guardrails and PHI redaction.

27|9|Updated Mar 31, 2025

Search Tags:#audit #healthcare #guardrails #proxy #redaction #fhir #upstream

Ready to run

npx skills add https://github.com/aks129/HealthClawGuardrails --skill fhir-upstream-proxy

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fhir-upstream-proxy
Source: https://github.com/aks129/HealthClawGuardrails/tree/main/skills/fhir-upstream-proxy
Command: npx skills add https://github.com/aks129/HealthClawGuardrails --skill fhir-upstream-proxy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Connect AI agents to real FHIR servers while maintaining MCP guardrails and PHI redaction.

Core Features & Use Cases

Proxying requests to real FHIR servers (HAPI FHIR, SMART Health IT, Epic sandbox) with full guardrails.
Automatic PHI redaction and immutable audit trails on upstream data.
URL rewriting to ensure upstream server details never leak to clients.

Quick Start

Set the FHIR_UPSTREAM_URL environment variable to a real FHIR server and run the main.py script to start the proxy.

Frequently Asked Questions about fhir-upstream-proxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I proxy AI agent requests to a real FHIR server without exposing the upstream URL?▼

Proxy AI requests to real FHIR servers using a guardrail-backed proxy that performs URL rewriting, ensuring upstream server details never leak to clients while maintaining MCP guardrails.

How does PHI redaction work when connecting to EHR systems?▼

PHI redaction is automatically applied to upstream data retrieved from EHR systems, ensuring sensitive health information is scrubbed before responses reach the client.

Can I connect my AI agent to HAPI FHIR or Epic sandbox servers?▼

Yes, you can connect to HAPI FHIR, SMART Health IT, or Epic sandbox servers by setting the FHIR_UPSTREAM_URL environment variable to your target server.

Does proxying requests to production EHRs support audit trails and step-up authentication?▼

Yes, proxying requests to production EHRs supports generating immutable audit trails and enforcing step-up authentication to meet healthcare data compliance requirements.

What is the best way to add guardrails to FHIR API requests in healthcare workflows?▼

Deploying a dedicated FHIR upstream proxy is the best way to enforce guardrails, providing automatic PHI redaction and audit trails for healthcare workflows.