Azure Health Data Services FHIR (Fast Healthcare Interoperability Resources)에 대한 모델 콘텍스 프로토콜 (MCP) 서버 구현. 이 서비스는 Azure FHIR 서버와 상호 작용하는 표준화된 인터페이스를 제공하며 MCP 도구를 통해 의료 데이터 운영을 가능하게 합니다.

설정 361️

설치 ☸

Python 3.13 이상 및 uv를 요구합니다.

uv를 먼저 설치하십시오.

윤곽 ܧ️

mcp.json에 FastMCP 지도를 참조하십시오: https://gofastmcp.com/integrations/mcp-json-configuration

클라이언트 Credentials 교류 (과태):

• service-to-service 인증 사용
• [T3] USE_FAST_MCP_OAUTH_PROXY=false]를 남겨 주세요.
• HTTP_TRANSPORT=false] 스트로디 수송을 사용
• Azure AD 클라이언트 자격 흐름 사용

# # # # OAuth On-Behalf-Of 흐름:

Azure 앱 등록

OAuth on-behalf-of 흐름은 MCP 서버를 나타내는 기밀 Azure AD 응용 프로그램을 요구합니다.

1. Azure 포털에서 Microsoft Entra ID 의 앱 등록 의 새로운 등록. FHIR-MCP-Server], set Supported account type to Single tenant, redirect URI unset for now.
2. 명세.

Azure AHDS FHIR MCP Server 🚀

A Model Context Protocol (MCP) server implementation for Azure Health Data Services FHIR (Fast Healthcare Interoperability Resources). This service provides a standardized interface for interacting with Azure FHIR servers, enabling healthcare data operations through MCP tools.

Setup 🛠️

Installation 📦

Requires Python 3.13 or higher and uv.

Install uv first.

Configuration ⚙️

See the FastMCP guidance on mcp.json here: https://gofastmcp.com/integrations/mcp-json-configuration

Client Credentials Flow (default):

• Used for service-to-service authentication
• Leave USE_FAST_MCP_OAUTH_PROXY=false
• Keep HTTP_TRANSPORT=false to use stdio transport
• Uses Azure AD client credentials flow

{
    "mcpServers": {
        "fhir": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "azure-fhir-mcp-server"
            ],
            "env": {
                "fhirUrl": "https://your-fhir-server.azurehealthcareapis.com/fhir",
                "clientId": "your-client-id",
                "clientSecret": "your-client-secret",
                "tenantId": "your-tenant-id"
            }
        }
    }
}

OAuth On-Behalf-Of Flow:

Create the Azure App Registration

The OAuth on-behalf-of flow requires a confidential Azure AD application that represents the MCP server.

1. In the Azure portal, go to Microsoft Entra ID ➜ App registrations ➜ New registration. Give it a descriptive name such as FHIR-MCP-Server, set Supported account types to Single tenant, and leave the redirect URI unset for now.
2. After the app is created, capture the generated Application (client) ID and Directory (tenant) ID for later use.
3. Under Expose an API, select Set for the Application ID URI and accept the suggested value api://{appId}. Add a scope named user_impersonation with admin consent display/description also set to user_impersonation.
4. Under Certificates & secrets, create a New client secret (for example FHIR-MCP-Secret-New). Copy the secret value immediately; it is required for the MCP server clientSecret setting.
5. Under Authentication, add the following Web redirect URIs to support the FastMCP OAuth proxy:
   • http://localhost:9002/auth/callback Ensure Default client type remains No so the app stays confidential.