Repository navigation
Connectors Directory readiness. No wire-format changes.
- feat(annotations): every tool carries a
titleand MCP annotations (readOnlyHint,destructiveHint,idempotentHint,openWorldHint) derived from its verb, pinned bytool-annotations.test.ts. - feat(redact): PHI and credentials are scrubbed from the SOAP debug log, and patient identifiers from the request are scrubbed out of thrown error messages (SOAP faults, FHIR errors, and
tebra_get_patientargument errors). Tested against synthetic records so no identifier survives. - feat(fields): record-returning tools accept
fieldsfor minimum-necessary selection (dotted paths through arrays).tebra_get_all_patientsdefaults to a roster projection;tebra_get_patientomits insurance policy and group numbers unless named. - refactor(fhir): handlers take a
FhirConfigresolved once at startup, and the OAuth token cache is keyed per client. - feat(mcpb):
manifest.json(MCPB 0.2) with sensitiveuser_configfor every credential,PRIVACY.md,npm run pack:mcpb, and a CI workflow that packs the bundle on version tags. - fix(fhir): startup no longer exits when the FHIR key path is unreadable, and unexpanded Claude Desktop
${user_config.*}placeholders count as unset (verified live 2026-09-19: both took the desktop extension down as "Server disconnected" with no visible cause). - docs: independence from Tebra and the BAA requirement stated in the README, package descriptions, and skill;
server.jsonnow marksTEBRA_SOAP_USERsecret.