# Healthex Export Redacted

> >

- **Type:** Skill
- **Install:** `agentstack add skill-aks129-healthclawguardrails-healthex-export-redacted`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [aks129](https://agentstack.voostack.com/s/aks129)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [aks129](https://github.com/aks129)
- **Source:** https://github.com/aks129/HealthClawGuardrails/tree/main/skills/healthex-export-redacted
- **Website:** https://www.healthclaw.io

## Install

```sh
agentstack add skill-aks129-healthclawguardrails-healthex-export-redacted
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# HealthEx Export (MCP, Redacted)

`scripts/export_healthex_mcp.py` is the current HealthEx pull path. It:

1. Opens a Streamable HTTP MCP session to `https://api.healthex.io/mcp`
2. Optionally calls `update_records` + `check_records_status` to refresh
3. Invokes each clinical tool (`get_health_summary`, `get_conditions`,
   `get_medications`, `get_allergies`, `get_immunizations`, `get_vitals`,
   `get_labs`, `get_procedures`, `get_visits`, `search_clinical_notes`)
4. **Redacts PHI in-process before anything touches disk** — via
   `scripts/healthclaw_redact.py`, which mirrors the HealthClaw guardrail
   proxy's redaction rules
5. Writes the result as JSON (default) or NDJSON (one resource per line)

The raw MCP response is never written. Only the redacted payload goes to disk.

## Quick Start

```bash
# Set the HealthEx token (use macOS Keychain on the Mac mini)
export HEALTHEX_AUTH_TOKEN="$(security find-generic-password -s healthex -w)"

# Default — all tools, local redaction, single JSON file
python scripts/export_healthex_mcp.py \
    --tenant-id my-tenant \
    --output exports/healthex-$(date +%Y-%m-%d).json

# NDJSON (one line per FHIR resource — easier to diff / grep)
python scripts/export_healthex_mcp.py \
    --tenant-id my-tenant \
    --output exports/healthex-$(date +%Y-%m-%d).ndjson

# Only the tools you need
python scripts/export_healthex_mcp.py \
    --tenant-id my-tenant \
    --output exports/labs-only.json \
    --tools get_labs get_conditions

# Proxy mode — redact via a running HealthClaw guardrail server instead
python scripts/export_healthex_mcp.py \
    --tenant-id my-tenant \
    --output exports/snap.json \
    --redact-mode proxy \
    --healthclaw-url https://healthclaw.io

# Synthetic-only escape hatch (keeps PHI in output — NEVER use on real data)
python scripts/export_healthex_mcp.py \
    --tenant-id desktop-demo \
    --output exports/demo-raw.json \
    --no-redact
```

## Redaction Rules (identical to the HealthClaw proxy)

| Field                                          | Rule                                        |
| ---------------------------------------------- | ------------------------------------------- |
| `HumanName.given` / `family` / `text`          | Collapsed to initials (`"E. V."`)           |
| `Address.line` / `city` / `postalCode`         | Dropped (state + country kept)              |
| `Identifier.value` (MRN, member, subscriber)   | SHA-256, optional `HEALTHCLAW_REDACT_SALT`  |
| `birthDate`                                    | Truncated to `YYYY`                         |
| `telecom[].value` (phone / email / fax / sms)  | Replaced with `"***"`                       |
| `Patient.photo`                                | Removed entirely                            |
| `text.div` narrative                           | Emptied                                     |
| `note[]` (Condition / Observation / …)         | Emptied                                     |
| Generic flat-dict PHI keys (ssn, dob, …)       | Wiped at any nesting depth                  |
| `code.coding`, `valueQuantity`, dates          | **Preserved** — clinical signal intact      |

`_meta.redaction_stats` in the output counts every redaction performed.

## Telegram / OpenClaw Integration

Bots call this via the `/export` slash command registered in
`scripts/bot_commands.py` → `cmd_export()`. The bot resolves
`HEALTHEX_AUTH_TOKEN` from (1) environment, (2) macOS Keychain service
`healthex`. Output lands in `~/.healthclaw/exports/healthex-.json`.

Typical end-to-end flow over Telegram:

1. `/export`     — pulls HealthEx, redacts, writes bundle
2. `/import ` — ingests into local HealthClaw
3. `/conditions` / `/labs` / `/summary` — agent reads from local store

## Smoke Test

`tests/test_healthclaw_redact.py` exercises both the redaction rules and the
end-to-end export flow against a mocked MCP session. Part of the CI suite:

```bash
uv run python -m pytest tests/test_healthclaw_redact.py -v
```

For a one-off CLI check without pytest, `scripts/smoke_test.py` runs the same
assertions and prints a redaction summary.

## Relationship to `healthex-export` (legacy)

The older `healthex-export` skill and `scripts/export_healthex_legacy.py`
pull from the **local HealthClaw FHIR store** via direct REST. Keep for
tenant-to-tenant copies. Use **this skill** when the source of truth is
HealthEx itself and you want the MCP SDK + in-process redaction.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [aks129](https://github.com/aks129)
- **Source:** [aks129/HealthClawGuardrails](https://github.com/aks129/HealthClawGuardrails)
- **License:** MIT
- **Homepage:** https://www.healthclaw.io

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-aks129-healthclawguardrails-healthex-export-redacted
- Seller: https://agentstack.voostack.com/s/aks129
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.