No local install required. Generate a universal token in the dashboard and configure your IDE to call the MCP host.
Policy
- Agents edit Sandbox only: Live is read-only (coming soon)
- Call
get_account_status:canPromoteToLivemust be true for promotion tools (coming soon) - Pro plan:
create_promotionopens a PR-style sync with AI-generated title and changelog (coming soon) - Pro plan:
confirm_action→approve_promotionwithhumanIntentMessage(coming soon)
Compatible clients
Cursor
One-click Install in Cursor deeplink, or copy ~/.cursor/mcp.json config.
Claude
Claude Desktop and Claude Code: copy CLI or manual config with Bearer PAT.
Codex
OpenAI Codex CLI loads the hosted Hebrah MCP server.
OpenCode
Configure the hosted Hebrah MCP URL in OpenCode settings.
Windsurf
Copy serverUrl JSON for mcp_config.json.
Google Antigravity
Copy serverUrl JSON for mcp_config.json.
Zed
Zed MCP extensions with Bearer PAT auth.
VS Code
One-click vscode.dev MCP install redirect with Bearer PAT.
Any MCP host
Streamable HTTP hosted MCP with no local install required.
Tools
| Tool | Description |
|---|---|
| set_active_connection | Set the sandbox connection context for subsequent tools |
| get_account_status | Org status and connections summary |
| list_connections | List dashboard connections |
| get_connection_mapping | Get HL7→FHIR mappings (sandbox only) |
| update_connection_mapping | Update mappings on sandbox connection only |
| list_config_versions | List sandbox config versions |
| create_config_version | Snapshot current sandbox config as a new version |
| create_promotion | Pro plan: open a promotion (PR) to sync sandbox version to Live |
| get_promotion | Pro plan: promotion detail and diff summary |
| confirm_action | Pro plan: issue a confirmation token before approve_promotion |
| approve_promotion | Pro plan: approve & sync to Live (requires confirm_action token) |
| reject_promotion | Pro plan: reject an open promotion |
| get_live_deployment | Read-only: what version is deployed on Live |
| get_sandbox_catalog | Hebrah API sandbox catalog (optional connection_id) |
| trigger_test_webhook | Trigger mock webhook; supports event, scenario_id, connection_id |
| list_sandbox_domains | List sandbox domain definitions (clinical, documents, prior_auth, etc.) |
| get_sandbox_domain | Get one sandbox domain with events, resources, and scenarios |
| get_synthetic_resource | Fetch synthetic FHIR resource by type and id |
| run_sandbox_scenario | Run multi-step sandbox workflow scenario |
| get_payer_rules | Synthetic prior-auth payer rules stub |
| list_sandbox_events | List webhook events grouped by sandbox domain |
| list_hl7_templates | List injectable HL7 sandbox templates |
| inject_hl7 | Inject synthetic HL7 message or template; fires mapped webhook |
| sidecar_writeback | POST synthetic EHR write-back action to local sidecar URL |
| run_hl7_flight_check | Run orchestrator HL7 ACK probe for a provisioned VM |
| list_webhook_deliveries | List outbound webhook deliveries with retry status |
| replay_webhook_delivery | Replay a stored webhook envelope by delivery id |
| configure_webhook_reliability | Set sandbox webhook reliability/chaos profile |
| run_webhook_reliability_scenario | Configure profile and run webhook reliability scenario |
| register_smart_client | Register SMART OAuth client (client_id, redirect_uris) for sandbox launch |
| start_smart_launch | Create SMART launch context for a sandbox patient (returns launch token + authorize URL) |
| run_mpi_match | Run synthetic MPI patient match (returns Parameters + duplicate pair) |
| run_mpi_scenario | Run MPI sandbox scenario (e.g. mpi_duplicate_resolution) |
| get_practitioner_credentialing | Fetch Practitioner + role + VerificationResult fixture bundle |
| run_credentialing_scenario | Run credentialing sandbox scenario (e.g. credentialing_verify_practitioner) |
| run_aggregator_query | Submit synthetic aggregator/HIE query; returns consolidated Bundle |
| run_aggregator_scenario | Run aggregator sandbox scenario (e.g. aggregator_query_bundle) |