tebra-mcp-server 0.1.0 → 0.2.0

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 James Rosing / Allure MD
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 James Rosing, MD, FACS / Allure MD Plastic Surgery and Dermatology
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,14 +1,26 @@
-# @allure-md/tebra-mcp-server
+# tebra-mcp-server
 
-MCP server for Tebra (Kareo) practice management. Exposes patient data, encounters, authorizations, appointments, charges, eligibility, and procedure codes to Claude and other MCP-compatible clients.
+[![npm version](https://img.shields.io/npm/v/tebra-mcp-server.svg)](https://www.npmjs.com/package/tebra-mcp-server)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
+
+MCP server for [Tebra](https://www.tebra.com/) (formerly Kareo) practice management. Connects your existing Tebra account to Claude and other MCP-compatible AI agents, exposing **33 SOAP tools** and **12 FHIR clinical tools** for patients, encounters, appointments, billing, documents, insurance, and clinical data. No data is accessible without valid Tebra API credentials.
+
+## Quick Start
+
+```bash
+npx tebra-mcp-server
+```
 
 ## Prerequisites
 
 - Node.js 18+
 - Tebra SOAP API credentials (generated in Tebra PM admin under Settings > API)
+- (Optional) Tebra FHIR API credentials for clinical data access
 
 ## Environment Variables
 
+### SOAP API (required)
+
 | Variable | Required | Description |
 |---|---|---|
 | `TEBRA_SOAP_USER` | Yes | SOAP API user (email) |
@@ -16,35 +28,50 @@ MCP server for Tebra (Kareo) practice management. Exposes patient data, encounte
 | `TEBRA_CUSTOMER_KEY` | Yes | Customer key from Tebra PM admin |
 | `TEBRA_SOAP_ENDPOINT` | No | Override SOAP endpoint (for testing) |
 
-## Setup
+### FHIR API (optional -- enables 12 clinical data tools)
 
-```bash
-cd tebra-mcp-server
-npm install
-npm run build
-```
+| Variable | Required | Description |
+|---|---|---|
+| `TEBRA_FHIR_CLIENT_ID` | For FHIR | OAuth2 client ID from Tebra developer portal |
+| `TEBRA_FHIR_CLIENT_SECRET` | For FHIR | OAuth2 client secret |
+| `TEBRA_FHIR_BASE_URL` | No | FHIR R4 base URL (defaults to Tebra production) |
 
-## Usage
+FHIR credentials are obtained from the Tebra Developer Portal under API > FHIR Access. The server uses OAuth2 client credentials flow with automatic token caching and refresh.
 
-### Direct execution
+## Installation
 
-```bash
-TEBRA_SOAP_USER=user@practice.com \
-TEBRA_SOAP_PASSWORD=secret \
-TEBRA_CUSTOMER_KEY=abc123 \
-node dist/index.js
+### Claude Code
+
+Add to `.mcp.json` in your project root:
+
+```json
+{
+  "mcpServers": {
+    "tebra": {
+      "command": "npx",
+      "args": ["-y", "tebra-mcp-server"],
+      "env": {
+        "TEBRA_SOAP_USER": "user@practice.com",
+        "TEBRA_SOAP_PASSWORD": "your-password",
+        "TEBRA_CUSTOMER_KEY": "your-customer-key",
+        "TEBRA_FHIR_CLIENT_ID": "optional-fhir-client-id",
+        "TEBRA_FHIR_CLIENT_SECRET": "optional-fhir-client-secret"
+      }
+    }
+  }
+}
 ```
 
-### Claude Desktop configuration
+### Claude Desktop
 
-Add to your Claude Desktop config (`claude_desktop_config.json`):
+Add to your `claude_desktop_config.json`:
 
 ```json
 {
   "mcpServers": {
     "tebra": {
-      "command": "node",
-      "args": ["/path/to/tebra-mcp-server/dist/index.js"],
+      "command": "npx",
+      "args": ["-y", "tebra-mcp-server"],
       "env": {
         "TEBRA_SOAP_USER": "user@practice.com",
         "TEBRA_SOAP_PASSWORD": "your-password",
@@ -55,16 +82,16 @@ Add to your Claude Desktop config (`claude_desktop_config.json`):
 }
 ```
 
-### Claude Code configuration
+### Cursor / VS Code
 
-Add to `.mcp.json` in your project root:
+Add to your MCP settings:
 
 ```json
 {
   "mcpServers": {
     "tebra": {
-      "command": "node",
-      "args": ["./tebra-mcp-server/dist/index.js"],
+      "command": "npx",
+      "args": ["-y", "tebra-mcp-server"],
       "env": {
         "TEBRA_SOAP_USER": "user@practice.com",
         "TEBRA_SOAP_PASSWORD": "your-password",
@@ -75,29 +102,234 @@ Add to `.mcp.json` in your project root:
 }
 ```
 
-## Available Tools
+## Available Tools (45 total)
+
+### Patient Management
+
+| Tool | Description |
+|---|---|
+| `tebra_search_patients` | Search patients by name, DOB, MRN, or external ID (20+ filters) |
+| `tebra_get_patient` | Get full patient record with insurance, cases, and authorizations |
+| `tebra_create_patient` | Register a new patient with demographics and insurance |
+| `tebra_update_patient` | Update patient demographics, contact info, or insurance |
+| `tebra_get_all_patients` | Bulk patient retrieval with pagination (for sync operations) |
+
+### Appointments
+
+| Tool | Description |
+|---|---|
+| `tebra_get_appointments` | Search appointments by date range, provider, or patient |
+| `tebra_get_appointment_detail` | Get full appointment detail including reason, notes, and history |
+| `tebra_create_appointment` | Create an appointment (requires provider, location, reason IDs) |
+| `tebra_update_appointment` | Update, reschedule, or cancel an existing appointment |
+| `tebra_delete_appointment` | Permanently delete an appointment |
+| `tebra_get_appointment_reasons` | List configured appointment types/reasons for the practice |
+| `tebra_create_appointment_reason` | Create a new appointment type/reason |
+
+### Encounters & Billing
+
+| Tool | Description |
+|---|---|
+| `tebra_get_encounter` | Get encounter details with linked charges, diagnoses, and procedures |
+| `tebra_create_encounter` | Create an encounter (superbill) with diagnoses and procedures |
+| `tebra_update_encounter_status` | Workflow transitions: Draft -> Review -> Approved or Rejected |
+| `tebra_get_charges` | Search charges with 20+ filters (date, patient, provider, status) |
+| `tebra_get_payments` | Search payment records with date and patient filters |
+| `tebra_create_payment` | Post a payment to a patient account |
+
+### Insurance & Authorizations
+
+| Tool | Description |
+|---|---|
+| `tebra_get_patient_authorizations` | Get all authorizations with status, remaining visits, and CPT codes |
+| `tebra_check_insurance_eligibility` | Check eligibility from on-file insurance data |
+
+### Practice Configuration
+
+| Tool | Description |
+|---|---|
+| `tebra_get_providers` | List all providers with IDs, specialties, and NPI numbers |
+| `tebra_get_service_locations` | List practice locations with addresses and contact info |
+| `tebra_get_practices` | Get practice metadata (name, tax ID, billing info) |
+| `tebra_get_procedure_codes` | Get procedure code catalog with descriptions and default fees |
+
+### Documents
+
+| Tool | Description |
+|---|---|
+| `tebra_create_document` | Upload a document (PDF, image) to a patient's chart |
+| `tebra_delete_document` | Remove a document from a patient's chart |
+
+### Financial Analysis
+
+| Tool | Description |
+|---|---|
+| `tebra_get_transactions` | Get granular transaction data for financial reporting |
+
+### External Vendor & System
+
+| Tool | Description |
+|---|---|
+| `tebra_validate_connection` | Health check -- verifies SOAP credentials and connectivity |
+| `tebra_get_throttles` | Get current API rate limit status and remaining quota |
+| `tebra_register_external_vendor` | Register an external vendor for ID linking |
+| `tebra_get_external_vendors` | List registered external vendors |
+| `tebra_update_patient_external_id` | Link an external system ID to a Tebra patient |
+| `tebra_update_patient_case` | Update a patient's case details |
+
+### FHIR Clinical Data (requires FHIR credentials)
+
+These tools access clinical data via the Tebra FHIR R4 API. They require separate FHIR credentials (see Environment Variables above). If FHIR credentials are not configured, these tools will not be registered.
 
 | Tool | Description |
 |---|---|
-| `tebra_search_patients` | Search patients by name, DOB, MRN, or external ID |
-| `tebra_get_patient` | Get full patient record with insurance and authorizations |
-| `tebra_get_patient_authorizations` | Get all authorizations across cases with status and remaining visits |
-| `tebra_get_encounter` | Get encounter details with linked charges and procedures |
-| `tebra_create_encounter` | Create a new encounter (superbill) with diagnoses and procedures |
-| `tebra_get_appointments` | Get appointments within a date range, optionally by provider |
-| `tebra_check_insurance_eligibility` | Check insurance eligibility based on on-file data |
-| `tebra_get_charges` | Get charges with payment status, filterable by date and patient |
-| `tebra_get_procedure_codes` | Get practice procedure codes with fees |
+| `tebra_fhir_get_allergies` | Patient allergy and intolerance list |
+| `tebra_fhir_get_medications` | Active and historical medication list |
+| `tebra_fhir_get_conditions` | Problem list / active conditions |
+| `tebra_fhir_get_vitals` | Recent vital signs (BP, HR, temp, weight, BMI) |
+| `tebra_fhir_get_lab_results` | Lab results and observation values |
+| `tebra_fhir_get_immunizations` | Vaccination records |
+| `tebra_fhir_get_procedures` | Procedures performed |
+| `tebra_fhir_get_care_plans` | Active care plans |
+| `tebra_fhir_get_care_team` | Care team members and roles |
+| `tebra_fhir_get_diagnostic_reports` | Diagnostic reports (radiology, pathology) |
+| `tebra_fhir_get_documents` | Clinical documents (CDA, notes) |
+| `tebra_fhir_get_devices` | Implantable devices (UDI data) |
+
+## Rate Limits
+
+The Tebra SOAP API enforces per-endpoint rate limits. The server handles rate limiting with automatic retry and exponential backoff.
+
+| Endpoint Category | Limit | Window |
+|---|---|---|
+| Patient read operations | 200 requests | per minute |
+| Patient write operations | 50 requests | per minute |
+| Appointment operations | 200 requests | per minute |
+| Encounter operations | 100 requests | per minute |
+| Financial operations | 100 requests | per minute |
+| Document operations | 50 requests | per minute |
+| FHIR operations | 100 requests | per minute |
+
+Use `tebra_get_throttles` to check current rate limit status in real time.
+
+## Example Workflows
+
+### Scheduling Flow
+
+```
+1. tebra_get_providers          -- Get provider IDs
+2. tebra_get_service_locations  -- Get location IDs
+3. tebra_get_appointment_reasons -- Get reason/type IDs
+4. tebra_create_appointment     -- Create with provider, location, reason IDs
+5. tebra_get_appointment_detail -- Verify creation
+```
+
+### Encounter Approval Flow
+
+```
+1. tebra_create_encounter            -- Create superbill (status: Draft)
+2. tebra_update_encounter_status     -- Move to Review
+3. tebra_update_encounter_status     -- Move to Approved (triggers billing)
+   OR
+3. tebra_update_encounter_status     -- Reject back to Draft with reason
+```
+
+### Payment Posting Flow
+
+```
+1. tebra_search_patients    -- Find patient
+2. tebra_get_charges        -- Find outstanding charges
+3. tebra_create_payment     -- Post payment to patient account
+4. tebra_get_payments       -- Verify payment posted
+```
+
+### Patient Onboarding (allure-md.com)
+
+```
+1. tebra_search_patients              -- Check for existing patient
+2. tebra_create_patient               -- Create if not found
+3. tebra_update_patient_external_id   -- Link Supabase client ID
+4. tebra_create_appointment           -- Schedule first visit
+```
+
+### Clinical Context for Note Creation (EPIC Notes)
+
+```
+1. tebra_get_appointments             -- Get today's schedule
+2. tebra_get_appointment_detail       -- Get appointment context
+3. tebra_get_patient                  -- Full patient demographics
+4. tebra_get_patient_authorizations   -- Check auth status
+5. tebra_fhir_get_allergies           -- Allergies
+6. tebra_fhir_get_medications         -- Current medications
+7. tebra_fhir_get_conditions          -- Problem list
+8. tebra_fhir_get_vitals              -- Recent vitals
+```
+
+## Tool Dependency Chains
+
+Some tools require IDs obtained from other tools. Key dependencies:
+
+```
+tebra_create_appointment
+  requires: providerId   (from tebra_get_providers)
+  requires: locationId   (from tebra_get_service_locations)
+  requires: reasonId     (from tebra_get_appointment_reasons)
+  optional: patientId    (from tebra_search_patients or tebra_create_patient)
+
+tebra_create_encounter
+  requires: patientId    (from tebra_search_patients)
+  requires: providerId   (from tebra_get_providers)
+  optional: authId       (from tebra_get_patient_authorizations)
+
+tebra_create_payment
+  requires: patientId    (from tebra_search_patients)
+
+tebra_update_encounter_status
+  requires: encounterId  (from tebra_create_encounter or tebra_get_encounter)
+
+tebra_create_document
+  requires: patientId    (from tebra_search_patients)
+
+tebra_update_patient_external_id
+  requires: patientId    (from tebra_search_patients or tebra_create_patient)
+
+All FHIR tools
+  require: patientId     (from tebra_search_patients)
+```
+
+## Integration Services
+
+Pre-built integration modules are available in `src/integrations/` for two projects:
+
+- **`epic-notes-integration.ts`** -- Schedule pre-seeding, appointment context for note creation, signed note push-back to Tebra. Copy to your EPIC Notes project at `src/lib/services/tebra-integration.ts`.
+
+- **`fal-integration.ts`** -- Patient sync from allure-md.com registration, Stripe payment posting, Supabase-to-Tebra ID linking. Copy to your FAL project at `src/lib/services/tebra-integration.ts`.
+
+Both modules define an `McpToolCaller` interface and work with any MCP client implementation.
 
 ## API Reference
 
-The server wraps the Tebra/Kareo SOAP API v2.1:
+The server wraps two Tebra APIs:
+
+**SOAP API v2.1** (33 tools)
 - Endpoint: `https://webservice.kareo.com/services/soap/2.1/KareoServices.svc`
 - Auth: RequestHeader with User, Password, CustomerKey
-- All requests include retry with exponential backoff (3 attempts)
+- All requests include retry with exponential backoff (3 attempts at 1s, 2s, 4s)
+
+**FHIR R4 API** (12 tools)
+- Endpoint: `https://fhir.kareo.com/r4` (configurable)
+- Auth: OAuth2 client credentials flow
+- Token caching with automatic refresh before expiry
 
 ## Development
 
 ```bash
+git clone https://github.com/jamesrosing/tebra-mcp-server.git
+cd tebra-mcp-server
+npm install
 npm run dev  # Uses tsx for direct TypeScript execution
 ```
+
+## License
+
+MIT

package/dist/config.d.ts

@@ -1,6 +1,18 @@
 /**
  * Configuration loader for the Tebra MCP server.
  * Validates required environment variables at startup.
+ *
+ * Required environment variables (SOAP API):
+ *   TEBRA_SOAP_USER      — SOAP API user (email)
+ *   TEBRA_SOAP_PASSWORD   — SOAP API password
+ *   TEBRA_CUSTOMER_KEY    — Customer key from Tebra PM admin
+ *   TEBRA_SOAP_ENDPOINT   — (optional) Override SOAP endpoint URL
+ *
+ * Optional environment variables (FHIR R4 API — enables clinical data tools):
+ *   TEBRA_FHIR_CLIENT_ID     — OAuth2 client ID from Tebra FHIR registration
+ *   TEBRA_FHIR_CLIENT_SECRET — OAuth2 client secret
+ *   TEBRA_FHIR_BASE_URL      — (optional) FHIR API base URL (default: Tebra production)
+ *   TEBRA_FHIR_TOKEN_URL     — (optional) OAuth2 token endpoint (default: Tebra production)
  */
 export interface TebraConfig {
     user: string;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD;;;GAGG;AACH,wBAAgB,SAAS,IAAI,WAAW,CAuBvC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD;;;GAGG;AACH,wBAAgB,SAAS,IAAI,WAAW,CAuBvC"}

package/dist/config.js

@@ -2,6 +2,18 @@
 /**
  * Configuration loader for the Tebra MCP server.
  * Validates required environment variables at startup.
+ *
+ * Required environment variables (SOAP API):
+ *   TEBRA_SOAP_USER      — SOAP API user (email)
+ *   TEBRA_SOAP_PASSWORD   — SOAP API password
+ *   TEBRA_CUSTOMER_KEY    — Customer key from Tebra PM admin
+ *   TEBRA_SOAP_ENDPOINT   — (optional) Override SOAP endpoint URL
+ *
+ * Optional environment variables (FHIR R4 API — enables clinical data tools):
+ *   TEBRA_FHIR_CLIENT_ID     — OAuth2 client ID from Tebra FHIR registration
+ *   TEBRA_FHIR_CLIENT_SECRET — OAuth2 client secret
+ *   TEBRA_FHIR_BASE_URL      — (optional) FHIR API base URL (default: Tebra production)
+ *   TEBRA_FHIR_TOKEN_URL     — (optional) OAuth2 token endpoint (default: Tebra production)
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getConfig = getConfig;

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAgBH,8BAuBC;AA9BD,MAAM,mBAAmB,GACvB,kEAAkE,CAAC;AAErE;;;GAGG;AACH,SAAgB,SAAS;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAEnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAErD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAClE,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAK,CAAC,IAAI,EAAE;QAClB,QAAQ,EAAE,QAAS,CAAC,IAAI,EAAE;QAC1B,WAAW,EAAE,WAAY,CAAC,IAAI,EAAE;QAChC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,mBAAmB;KACzE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;AAgBH,8BAuBC;AA9BD,MAAM,mBAAmB,GACvB,kEAAkE,CAAC;AAErE;;;GAGG;AACH,SAAgB,SAAS;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IACjD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAEnD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAErD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAClE,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAK,CAAC,IAAI,EAAE;QAClB,QAAQ,EAAE,QAAS,CAAC,IAAI,EAAE;QAC1B,WAAW,EAAE,WAAY,CAAC,IAAI,EAAE;QAChC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,mBAAmB;KACzE,CAAC;AACJ,CAAC"}

package/dist/fhir-client.d.ts

@@ -0,0 +1,22 @@
+/**
+ * FHIR R4 client for the Tebra MCP server.
+ *
+ * Handles OAuth2 client_credentials flow for Tebra's FHIR API.
+ * Token caching with automatic refresh. Clean module with no side effects on import.
+ *
+ * Environment variables (all optional — FHIR tools only register when configured):
+ *   TEBRA_FHIR_CLIENT_ID     — OAuth2 client ID from Tebra FHIR registration
+ *   TEBRA_FHIR_CLIENT_SECRET — OAuth2 client secret
+ *   TEBRA_FHIR_BASE_URL      — FHIR API base URL (default: Tebra production)
+ *   TEBRA_FHIR_TOKEN_URL     — OAuth2 token endpoint (default: Tebra production)
+ */
+export interface FhirConfig {
+    clientId: string;
+    clientSecret: string;
+    baseUrl: string;
+    tokenUrl: string;
+}
+export declare function fhirRequest(config: FhirConfig, resource: string, params?: Record<string, string>): Promise<unknown>;
+export declare function isFhirConfigured(): boolean;
+export declare function getFhirConfig(): FhirConfig;
+//# sourceMappingURL=fhir-client.d.ts.map

package/dist/fhir-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fhir-client.d.ts","sourceRoot":"","sources":["../src/fhir-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAqCD,wBAAsB,WAAW,CAC/B,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,OAAO,CAAC,OAAO,CAAC,CA2BlB;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAE1C;AAED,wBAAgB,aAAa,IAAI,UAAU,CAc1C"}

package/dist/fhir-client.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * FHIR R4 client for the Tebra MCP server.
+ *
+ * Handles OAuth2 client_credentials flow for Tebra's FHIR API.
+ * Token caching with automatic refresh. Clean module with no side effects on import.
+ *
+ * Environment variables (all optional — FHIR tools only register when configured):
+ *   TEBRA_FHIR_CLIENT_ID     — OAuth2 client ID from Tebra FHIR registration
+ *   TEBRA_FHIR_CLIENT_SECRET — OAuth2 client secret
+ *   TEBRA_FHIR_BASE_URL      — FHIR API base URL (default: Tebra production)
+ *   TEBRA_FHIR_TOKEN_URL     — OAuth2 token endpoint (default: Tebra production)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fhirRequest = fhirRequest;
+exports.isFhirConfigured = isFhirConfigured;
+exports.getFhirConfig = getFhirConfig;
+// Token cache
+let cachedToken = null;
+async function getAccessToken(config) {
+    // Check cache (with 60s buffer before expiry)
+    if (cachedToken && Date.now() < cachedToken.expiresAt - 60_000) {
+        return cachedToken.accessToken;
+    }
+    const response = await fetch(config.tokenUrl, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            grant_type: 'client_credentials',
+            client_id: config.clientId,
+            client_secret: config.clientSecret,
+            scope: 'system/*.read',
+        }),
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`FHIR token request failed (${response.status}): ${text}`);
+    }
+    const data = await response.json();
+    cachedToken = {
+        accessToken: data.access_token,
+        expiresAt: Date.now() + data.expires_in * 1000,
+    };
+    return cachedToken.accessToken;
+}
+async function fhirRequest(config, resource, params) {
+    const token = await getAccessToken(config);
+    const url = new URL(`${config.baseUrl}/${resource}`);
+    if (params) {
+        for (const [k, v] of Object.entries(params)) {
+            url.searchParams.set(k, v);
+        }
+    }
+    const response = await fetch(url.toString(), {
+        headers: {
+            Authorization: `Bearer ${token}`,
+            Accept: 'application/fhir+json',
+        },
+    });
+    if (response.status === 401) {
+        cachedToken = null;
+        throw new Error('FHIR authentication expired — token cleared, retry will re-authenticate');
+    }
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`FHIR ${resource} request failed (${response.status}): ${text}`);
+    }
+    return response.json();
+}
+function isFhirConfigured() {
+    return !!(process.env.TEBRA_FHIR_CLIENT_ID && process.env.TEBRA_FHIR_CLIENT_SECRET);
+}
+function getFhirConfig() {
+    const clientId = process.env.TEBRA_FHIR_CLIENT_ID;
+    const clientSecret = process.env.TEBRA_FHIR_CLIENT_SECRET;
+    if (!clientId || !clientSecret) {
+        throw new Error('FHIR credentials not configured. Set TEBRA_FHIR_CLIENT_ID and TEBRA_FHIR_CLIENT_SECRET.');
+    }
+    return {
+        clientId,
+        clientSecret,
+        baseUrl: process.env.TEBRA_FHIR_BASE_URL?.trim() ?? 'https://fhir.prd.cloud.tebra.com/fhir/request',
+        tokenUrl: process.env.TEBRA_FHIR_TOKEN_URL?.trim() ?? 'https://fhir.prd.cloud.tebra.com/smartauth/oauth/token',
+    };
+}
+//# sourceMappingURL=fhir-client.js.map

package/dist/fhir-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fhir-client.js","sourceRoot":"","sources":["../src/fhir-client.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AA4CH,kCA+BC;AAED,4CAEC;AAED,sCAcC;AAtFD,cAAc;AACd,IAAI,WAAW,GAAsD,IAAI,CAAC;AAE1E,KAAK,UAAU,cAAc,CAAC,MAAkB;IAC9C,8CAA8C;IAC9C,IAAI,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;QAC/D,OAAO,WAAW,CAAC,WAAW,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,KAAK,EAAE,eAAe;SACvB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAkD,CAAC;IACnF,WAAW,GAAG;QACZ,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;KAC/C,CAAC;IACF,OAAO,WAAW,CAAC,WAAW,CAAC;AACjC,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,MAAkB,EAClB,QAAgB,EAChB,MAA+B;IAE/B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QAC3C,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,MAAM,EAAE,uBAAuB;SAChC;KACF,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,WAAW,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,oBAAoB,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AACtF,CAAC;AAED,SAAgB,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAE1D,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;IAED,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,+CAA+C;QACnG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,IAAI,wDAAwD;KAC/G,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -10,6 +10,10 @@
  *   TEBRA_SOAP_PASSWORD   — SOAP API password
  *   TEBRA_CUSTOMER_KEY    — Customer key from Tebra PM admin
  *
+ * Optional FHIR (clinical data):
+ *   TEBRA_FHIR_CLIENT_ID     — FHIR OAuth2 client ID
+ *   TEBRA_FHIR_CLIENT_SECRET — FHIR OAuth2 client secret
+ *
  * Usage:
  *   npx @allure-md/tebra-mcp-server
  *   TEBRA_SOAP_USER=... TEBRA_SOAP_PASSWORD=... TEBRA_CUSTOMER_KEY=... node dist/index.js

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;GAkBG"}