README

From the reviewed commit 09f3af2 ↗; it updates when the author re-pins.

Hermes Plugin: healthcare

Portable Agent Plugins v1 package bundling the healthCare MCP engine (healthcare-mcp, PyPI healthCare) — local-first personal health records with an encrypted on-device Vault — together with the healthcare workflow skill (English authoritative + SKILL.zh-CN.md translation variant).

mcp.json launches the server via uvx --from healthCare==0.2.0 healthcare-hermes — pinned to an immutable PyPI release; the pin is the only update path. Needs Python 3.11+ and macOS (agent pairing uses the macOS Keychain).
Zero-config first run: healthcare-hermes creates the encrypted Vault (random passphrase in a 0600 file), starts the local unix-socket daemon, pairs a local agent (token in Keychain only), then serves stdio MCP — all state under ${PLUGIN_DATA} (HEALTHCARE_HOME).
24 scoped tools: vitals, medications, activities, emotions, sleep, encounters, diagnosis mentions, medication plans, reminders, trends, timelines, visit summaries, source evidence.
Some tool line names exceed 64 chars (e.g. mcp__agent_plugin_healthcare_<hash8>__hc__health_profile_observation_series) and are hash-truncated by the host; functionality is unaffected (same mechanism as other catalog plugins).

Privacy summary

Health data never leaves the device: AES-GCM encrypted Vault, local unix-socket IPC, agent tokens in the macOS Keychain, tamper-evident audit chain, approval-gated deletion. Zero network by default — the only optional network path is a user-configured LLM endpoint for assisted report import (HEALTHCARE_LLM_API_KEY/HEALTHCARE_LLM_ENDPOINT), off unless explicitly set. The engine repository is a personal-data-free extract of a private monorepo: src/ and tests/ carried over unchanged and verified free of personal identifiers across the full git history.

More by harrylabsj

All 7 plugins by harrylabsj →

eatwise❖ Community

Eatwise (外卖营养教练) — local-first Chinese dietary coach: deterministic meal nutrition reviews, personal daily energy/nutrient targets, and consented on-device profile and meal history through 9 MCP tools over a bundled open food database (TFND + USDA FNDDS). No network, no accounts, no payments; profile schema rejects name/phone/ID/medical fields by design. Engine pinned to an immutable git commit (cbc08f6) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 22.5+ on PATH. Disclosure — the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first.

Tools

freight-reconciliation❖ Community

Payer-side freight reconciliation: import carrier bills and trip ledgers into a deterministic local core (SQLite, WAL, no cloud), re-calculate against contracted rates and produce evidence-linked difference lists for human review — 14 MCP tools over uvx stdio (engine pinned to the immutable commit e8cd259c, release v0.4.1), with 3 bilingual workflow skills bundled. Portable Agent Plugins v1 package (mcp.json + skills/); needs uv on PATH. Never approves payments, sends messages or writes back to ERP/TMS; final confirmations route through a local admin page the model cannot reach. Disclosure — the optional freight-admin page listens on 127.0.0.1 and is where a human confirms mappings, rules, matches and exports; nothing leaves the machine.

Tools

good-student❖ Community

Wrong-question diagnosis and study-action loop for parents and students — deterministic local core (SQLite, no cloud), host-model recognition gated by parent confirmation. Portable Agent Plugins v1 package (mcp.json + skills/); good-student MCP server pinned to immutable commit 2469cbb over uvx, with the good-student workflow skill bundled. Needs Python 3.10+ via uv. No credentials required; all data stays on-device and nothing is uploaded.

Tools

kiwi❖ Community★ 0

Source suppliers and negotiate purchases through the Kiwi Buyer MCP server — an open-source A2A commerce runtime (pinned @harrylabsj/kiwi@0.11.0 over npx stdio), with the kiwi-buyer sourcing workflow skill bundled. Sourcing is dual-source: Kiwi Network results come from kiwi_search, and internet e-commerce listings are reported through the host's own web tools when the session has them (a host capability, not a plugin guarantee). Portable Agent Plugins v1 package (mcp.json + skills/); needs Node.js/npm on PATH. No credentials required; Kiwi never handles payments.

Tools

reading-buddy❖ Community

Local-first WeRead (微信读书) reading companion: syncs bookshelf, reading stats and notes to the local machine and turns them into private reading cards and weekly/monthly reviews through 8 MCP tools, with a built-in fictional demo mode for previews. Engine pinned to an immutable git commit (e5f6673) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 20+ on PATH. All data stays in PLUGIN_DATA; never posts to WeRead — cards and reviews are local files saved only after user confirmation. Disclosure — live mode sends your WEREAD_API_KEY as a Bearer token plus book ids and paging cursors to i.weread.qq.com (Tencent's WeRead agent gateway) and nothing else; the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first; the engine's npm dependencies resolve as caret ranges at first launch.

Tools

wechat-social-assistant❖ Community

Local-first WeChat relationship memory assistant for macOS: captures only what is visible in the WeChat window via system OCR/Accessibility, stores everything in a local SQLite database (0600/0700 permissions, no cloud), and serves contact briefs, follow-up planning, outreach drafts and weekly relationship reports through 32 MCP tools. Engine pinned to the immutable PyPI release wechat-social-assistant==1.5.1 over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs uv on PATH. All data confined to PLUGIN_DATA via WSA_ALLOWED_ROOT + path enforcement. Never reads WeChat databases, never injects into WeChat, never sends messages — outreach is drafts for human review only. Disclosure — reads WeChat only by screenshotting/OCR-ing and walking the macOS Accessibility tree of the frontmost window (not WeChat's databases or a bot API), compiles bundled Swift helpers with swiftc into ~/Library/Caches/wechat-social-assistant/bin on first use, and needs Screen Recording (optionally Accessibility) permission for the host terminal; no network egress, never sends messages.

Tools

← Back to the catalog · catalog built Sep 26, 2026