@chrischall/myatriumhealth-mcp 1.2.0 → 1.2.2

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Angi — find home-service pros by trade and city, read ratings, reviews and pro profiles. Angi serves its pages only to a real browser, so requests route through the user's own angi.com tab via the fetchproxy browser extension, reusing their existing session. The trade/city taxonomy is read from Angi's public sitemaps directly.",
-    "version": "1.2.0"
+    "version": "1.2.2"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "MyAtriumHealth",
       "source": "./",
       "description": "Read MyAtriumHealth (Epic MyChart) records — test results, medications, allergies, immunizations, health issues, visits — by relaying requests through the user's signed-in browser tab via the fetchproxy bridge.",
-      "version": "1.2.0",
+      "version": "1.2.2",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "myatriumhealth-mcp",
   "displayName": "MyAtriumHealth",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "MyAtriumHealth (Epic MyChart) access for Claude — test results, medications, allergies, immunizations, visits",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -135,7 +135,7 @@ stated rather than inferred.
 | `mah_get_health_summary` | Health-summary header and action plans |
 | `mah_list_message_folders` | Message Center folders with unread counts |
 | `mah_list_messages` | Message Center conversations for a folder, each with the `conversationId` to reply to |
-| `mah_reply_message` | Reply to a conversation as the active patient — previews unless `confirm: true` *(irreversible)* |
+| `mah_reply_message` | Reply to a conversation as the active patient — previews unless `confirm: true` with the preview's `confirmationToken` *(irreversible)* |
 | `mah_list_insurance` | Insurance coverages on file |
 | `mah_list_care_team` | Care team providers, internal and external |
 | `mah_list_billing_accounts` | Billing accounts and balances (parsed from HTML) |
@@ -147,7 +147,7 @@ stated rather than inferred.
 | `mah_verify_code` | Submit the code the user received *(needs credentials)* |
 | `mah_list_patients` | The patients this login can open — the account holder and any proxy subjects |
 | `mah_get_patient_context` | Which patient the readers are serving, confirmed with the portal |
-| `mah_set_active_patient` | Point every reader at one of those patients; survives restarts |
+| `mah_set_active_patient` | Point every reader at one of those patients; survives restarts. Through the browser bridge this switches your own tab too, and a read refuses rather than switching it back if you change patients there |
 
 Every reading tool takes `view`: `compact` (the default) or `full`. The raw envelopes
 are large — test results ~33 KB, medications ~30 KB — so `compact` is what you want for
@@ -196,6 +196,12 @@ local organization returns HTTP 500. The client assembles this from
 
 - **It previews by default.** Without `confirm: true` it returns the thread, recipients
   and body and sends nothing. The send itself is irreversible and provider-visible.
+- **A send must follow its own preview.** The preview returns a `confirmationToken`
+  bound to the patient, thread, body and attachments it showed; `confirm: true` is
+  refused without it, with one for anything else, after 10 minutes, or once it has been
+  used for a send — each preview authorizes one send, so a retry after an uncertain send
+  needs a fresh preview. So message text the model has read cannot talk it into a
+  one-call send the user never saw.
 - **`MAH_READ_ONLY=true` refuses every send.** The tool stays registered — a hosted
   connector publishes the tool list of a child with no env of its own, so a tool that
   registered only when writes were allowed would disappear for everyone.