← Back to search

IntakeQ MCP

oktopeak Scanned 31d ago

IntakeQ/PracticeQ MCP connector with HIPAA §164.312(b) audit logging on every PHI read/write

MCP Registry ↗
C
70.2 / 100

Versions

1.0.1latest
first seen Jul 2, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 22

set_api_key
annotations: none low

Store your IntakeQ API key and verify connectivity

api_key string
auth_status
annotations: none low

Check whether the connector is authenticated with IntakeQ

clear_api_key
annotations: none low

Clear the stored IntakeQ API key

list_appointments
annotations: none low

List appointments. At least one of clientId, startDate, or endDate must be provided.

page number status string endDate string clientId string startDate string practitionerEmail string
get_appointment
annotations: none low

Get a single appointment by ID

appointment_id string
create_appointment
annotations: none low

Create a new appointment in IntakeQ. All fields are required.

Status string ClientId number ServiceId string LocationId string UtcDateTime number ReminderType string PractitionerId string SendClientEmailNotification boolean
update_appointment
annotations: none low

Update an existing appointment via PUT. Id and UtcDateTime are required. Cannot change client or practitioner.

Id string Status string ServiceId string LocationId string UtcDateTime number ReminderType string SendClientEmailNotification boolean
list_practitioners
annotations: none low

List all practitioners in the IntakeQ account. Call this before create_appointment to find a valid PractitionerId.

list_services
annotations: none low

List services configured in the IntakeQ account. Call this before create_appointment to find a valid ServiceId.

practitionerEmail string
list_locations
annotations: none low

List locations configured in the IntakeQ account. Call this before create_appointment to find a valid LocationId.

list_invoices
annotations: none low

List invoices from the connected IntakeQ account

page number number number status string endDate string clientId number startDate string practitionerEmail string lastUpdatedEndDate string lastUpdatedStartDate string
get_invoice
annotations: none low

Get a single invoice by ID

invoice_id string
audit_export
annotations: none low

Export the local HIPAA §164.312(b) audit log. Every read and write of PHI is recorded here. Use date_from/date_to to filter by date range, client_id to filter by patient. Supports pagination via limit/offset.

limit number offset number date_to string client_id string date_from string
list_intake_forms
annotations: none low

List intake form submissions. PHI — every call is audit-logged.

all boolean page number client string endDate string clientId string startDate string updatedSince string
get_form
annotations: none low

Get a single intake form submission by ID. PHI — every call is audit-logged.

form_id string
list_questionnaire_templates
annotations: none low

List all questionnaire templates available in the IntakeQ account

send_intake_form
annotations: none low

Send an intake form to a client. Provide QuestionnaireId plus either ClientId or (ClientName and ClientEmail).

ClientId string ClientName string ClientEmail string QuestionnaireId string
list_files
annotations: none low

List file metadata for a client. Returns references only (Id, FileName, DateCreated, Size, ContentType, FolderId).

clientId string
list_notes
annotations: none low

List clinical notes. PHI — every call is audit-logged. Notes are read-only in IntakeQ.

page number client string status string endDate string clientId string startDate string updatedSince string
get_note
annotations: none low

Get a single clinical note by ID. PHI — every call is audit-logged.

note_id string
list_clients
annotations: none low

Search/list clients in the connected IntakeQ account. Returns up to 100 results per page.\n\nResponse field reference:\n BillingType: 0=Unknown, 1=SelfPay, 2=Insurance\n LinkedClientRelationshipType: 0=None, 1=Parent, 2=Child, 3=Spouse, 4=Sibling, 5=Other, 6=Partner

page number search string
get_client
annotations: none low

Get a single client by ID (includes full profile).\n\nResponse field reference:\n BillingType: 0=Unknown, 1=SelfPay, 2=Insurance\n LinkedClientRelationshipType: 0=None, 1=Parent, 2=Child, 3=Spouse, 4=Sibling, 5=Other, 6=Partner

client_id string

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 57

low
Tool 'set_api_key' has no annotations annotation_checker · 100%
low
Tool 'auth_status' has no annotations annotation_checker · 100%
low
Tool 'clear_api_key' has no annotations annotation_checker · 100%
low
Tool 'list_appointments' has no annotations annotation_checker · 100%
low
Tool 'get_appointment' has no annotations annotation_checker · 100%
low
Tool 'create_appointment' has no annotations annotation_checker · 100%
low
Tool 'update_appointment' has no annotations annotation_checker · 100%
low
Tool 'list_practitioners' has no annotations annotation_checker · 100%
low
Tool 'list_services' has no annotations annotation_checker · 100%
low
Tool 'list_locations' has no annotations annotation_checker · 100%
low
Tool 'list_invoices' has no annotations annotation_checker · 100%
low
Tool 'get_invoice' has no annotations annotation_checker · 100%
low
Tool 'audit_export' has no annotations annotation_checker · 100%
low
Tool 'list_intake_forms' has no annotations annotation_checker · 100%
low
Tool 'get_form' has no annotations annotation_checker · 100%
low
Tool 'list_questionnaire_templates' has no annotations annotation_checker · 100%
low
Tool 'send_intake_form' has no annotations annotation_checker · 100%
low
Tool 'list_files' has no annotations annotation_checker · 100%
low
Tool 'list_notes' has no annotations annotation_checker · 100%
low
Tool 'get_note' has no annotations annotation_checker · 100%
low
Tool 'list_clients' has no annotations annotation_checker · 100%
low
Tool 'get_client' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@4.1.7 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: set_api_key manifest_parser · 85%
info
Tool: auth_status manifest_parser · 85%
info
Tool: clear_api_key manifest_parser · 85%
info
Tool: list_appointments manifest_parser · 85%
info
Tool: get_appointment manifest_parser · 85%
info
Tool: create_appointment manifest_parser · 85%
info
Tool: update_appointment manifest_parser · 85%
info
Tool: list_practitioners manifest_parser · 85%
info
Tool: list_services manifest_parser · 85%
info
Tool: list_locations manifest_parser · 85%
info
Tool: list_invoices manifest_parser · 85%
info
Tool: get_invoice manifest_parser · 85%
info
Tool: audit_export manifest_parser · 85%
info
Tool: list_intake_forms manifest_parser · 85%
info
Tool: get_form manifest_parser · 85%
info
Tool: list_questionnaire_templates manifest_parser · 85%
info
Tool: send_intake_form manifest_parser · 85%
info
Tool: list_files manifest_parser · 85%
info
Tool: list_notes manifest_parser · 85%
info
Tool: get_note manifest_parser · 85%
info
Tool: list_clients manifest_parser · 85%
info
Tool: get_client manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'list_practitioners': Cross-tool sequencing directive poisoning · 85%
critical
Tool poisoning in 'list_services': Cross-tool sequencing directive poisoning · 85%
critical
Tool poisoning in 'list_locations': Cross-tool sequencing directive poisoning · 85%
info
SBOM generated: 212 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%