Install
$ agentstack add mcp-medvertical-claude-records ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Records for Claude Code
[](https://github.com/medvertical/claude-records/actions/workflows/plugin-ci.yml)
[](./LICENSE)
FHIR validation and data-quality workflow skills for Claude Code.
Records helps FHIR developers, IG authors, and AI agents validate FHIR JSON, explain validation issues, add CI checks, and run validate-patch-revalidate workflows without sending patient data to an external service by default.
Learn more at medvertical.com and medvertical.com/records.
Install
claude plugin marketplace add medvertical/claude-records
claude plugin install records@medvertical
Run local FHIR validation:
/records:validate ./examples
Quickstart
After installation, try the bundled non-PHI fixtures:
/records:validate plugins/records/fixtures/invalid-observation.json
/records:doctor plugins/records/fixtures/mini-ig
/records:explain-outcome plugins/records/fixtures/operationoutcome-required.json
The first command runs the end-to-end local validation orchestrator. The second detects a mini SUSHI/FSH IG project. The third explains a sample OperationOutcome without claiming that a new validation run happened.
Skills
/records:fhir-validation
Validate FHIR resources, explain issues, add CI checks, and guide safe repair loops.
Example prompts:
/records:validate patient.json
/records:fhir-validation { "resourceType": "Observation" }
/records:explain-outcome operationoutcome.json
/records:init-ci ./examples
/records:doctor this IG folder
Commands
The plugin includes focused commands that route into the fhir-validation workflow:
/records:doctor- diagnose FHIR/IG project structure, runtimes, and privacy boundaries./records:validate- run local validation with runtime planning, privacy gates, package diagnostics, and structural fallback./records:init-ci- generate or update Records FHIR validation CI./records:explain-outcome- explain FHIROperationOutcomeissues and safe fixability./records:derive-quality-rules- derive reviewable project quality rules from local evidence.
It also includes the read-only fhir-validation-reviewer agent for diagnosis without edits.
Feature Matrix
| Feature | What it does | | --- | --- | | Project detection | Detects FHIR resources, SUSHI/FSH, IG Publisher files, CI workflows, runtimes, and privacy warnings. | | Runtime planning | Selects local Records CLI when executable, blocks URL/server/API/terminology/package actions without consent, and falls back deterministically. | | Package doctor | Checks FHIR package cache, declared dependencies, profile canonicals, mixed FHIR versions, and setup-looking failures. | | Local structural validation | Validates common R4 resources, primitive formats, required choice[x] elements, contained references, and intra-Bundle references. | | OperationOutcome explanation | Maps issue codes such as required, code-invalid, profile-unknown, and slicing to fixability and setup guidance. | | Slicing analysis | Analyzes StructureDefinition snapshots and matches instances to named slices using value and pattern discriminators. | | FSH source mapping | Traces fsh-generated/resources/*.json issues back to likely input/fsh declarations. | | CI generation | Drafts Records validation GitHub Actions workflows for local or API-backed validation. | | Privacy redaction | Summarizes Patient-like resources, Bundles, identifiers, and references without printing full PHI. | | Quality rules | Derives reviewable project data-quality rules from local evidence. |
What It Does
The FHIR validation skill guides Claude through five validation paths:
- Records MCP tools, when available.
- Records API, when
RECORDS_API_URLis configured. - Records CLI, using
records validate-file. - Configured profile-aware validators, such as SUSHI, IG Publisher, Firely Terminal, Java validator, or HAPI when already available.
- Structural fallback, clearly labeled when no Records runtime is available.
The local CLI fallback uses Records' packaged FHIR R4 structural schema for resource types, required fields, unknown fields, cardinality, primitive types, choice fields, and simple backbone children. It does not replace profile, terminology, invariant, reference, metadata, advisor-rule, anomaly, or evidence-report validation.
Executable helper scripts support deterministic project detection (including FHIR package-cache and dependency resolution), runtime planning with privacy gates, package-cache diagnostics, local structural fallback validation (multi-resource schema, primitive datatype formats, required choices, and contained/intra-Bundle reference integrity), an end-to-end validation orchestrator, StructureDefinition snapshot/slicing analysis and instance-based slice matching, generated FSH source mapping, OperationOutcome explanation, PHI-minimizing summaries, quality-rule derivation, CI YAML generation, and FHIR expression to JSON Pointer mapping.
Repository Scope
This repository is plugin/skill-only. It contains the Claude Code marketplace entry, the records plugin, the fhir-validation skill, plugin commands, fixtures, and local plugin tests.
The Records Engine, CLI, API, and MCP server live in the Records main repository. This plugin can use those runtimes when they are already installed or configured, but this repository does not contain their implementation.
Requirements
- Claude Code is required to install and run the plugin.
- Node.js is required for local helper scripts and repository tests.
- Records CLI, Records MCP, Records API, SUSHI, IG Publisher, Firely Terminal, Java validator, and HAPI are optional. The plugin detects and uses them only when available or explicitly configured.
- Full profile, terminology, invariant, and reference validation requires a configured profile-aware runtime and the relevant FHIR/IG packages.
Why Records
- Local-first Node/TypeScript workflow, with no JVM required for local structural checks.
- Privacy-first instructions: do not send clinical or patient data externally unless explicitly configured or consented.
- Agent repair loop: validate, group issues, patch safe mechanical problems, revalidate.
- MCP-ready: direct agent tool calls when Records MCP is configured.
- Data-quality scope beyond base conformance: advisor rules, anomaly detection, evidence reports, run comparison, and dataset quality workflows through full Records runtimes.
Privacy
See [PRIVACY.md](./PRIVACY.md) for the data-handling policy.
Compatibility
See [plugins/records/docs/compatibility.md](./plugins/records/docs/compatibility.md) for how Records CLI/API/MCP, SUSHI, IG Publisher, Firely Terminal, HAPI, and fallback validation are detected and bounded.
Troubleshooting
- Installed plugin but commands are missing: restart Claude Code and check
/plugin. recordsnot found: the Records CLI is optional; the skill will use another configured runtime or structural fallback.claudenot found duringnpm run release:check: only the live plugin update check is skipped.- Generated JSON has validation errors: edit
input/fshwhen FSH sources exist, then rebuild with SUSHI. - Full profile validation is not running: confirm the validator has access to the required profiles, packages, terminology, and FHIR version.
Registry
Canonical installation is via medvertical/claude-records. The ClaudeRegistry submission is for discovery and review.
Release Notes
See [plugins/records/eval-results/v0.6.0.md](./plugins/records/eval-results/v0.6.0.md) for the current release checks and scope.
Development
Run plugin checks from this claude-records repository:
npx --yes @anthropic-ai/claude-code plugin validate .
npm test
npm run release:check
npm test runs the plugin smoke test and fixture eval harness. Prompt-level release checks live in [plugins/records/evals.md](./plugins/records/evals.md). Results are in [plugins/records/eval-results/](./plugins/records/eval-results/).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: medvertical
- Source: medvertical/claude-records
- License: MIT
- Homepage: https://github.com/medvertical/claude-records
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.