healthcare

Local-first personal health records: encrypted on-device Vault (AES-GCM) for vitals, medications, activities, emotions, sleep, encounters, diagnosis mentions, medication plans and reminders, served through a Keychain-paired local daemon with 24 scoped MCP tools. Zero-config first run: the plugin bootstraps Vault + daemon + agent pairing automatically under PLUGIN_DATA. Engine pinned to an immutable PyPI release (healthcare-mcp==0.2.1) over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), macOS only, Python 3.11+. Zero network by default; the optional LLM report-import endpoint stays off unless the user configures it. Approval-gated deletes, tamper-evident audit chain. Disclosure — personal health record-keeping, not medical advice (the skill forbids diagnoses and dosage changes); first run has uvx fetch healthcare-mcp==0.2.1 from PyPI; the optional report-import path posts report images to Alibaba DashScope (qwen-vl-max) unless HEALTHCARE_LLM_ENDPOINT points elsewhere, and only when HEALTHCARE_LLM_API_KEY is set.

harrylabsjToolsv0.2.0Updated 1 month ago

About

Hermes Plugin: healthcare

Portable Agent Plugins v1 package bundling the healthCare MCP engine
(healthcare-mcp, PyPI healthCare)
— local-first personal health records with an encrypted on-device Vault — together
with the healthcare workflow skill (English authoritative + SKILL.zh-CN.md
translation variant).

mcp.json launches the server via
uvx --from healthCare==0.2.0 healthcare-hermes — pinned to an immutable PyPI
release; the pin is the only update path. Needs Python 3.11+ and macOS (agent
pairing uses the macOS Keychain).
Zero-config first run: healthcare-hermes creates the encrypted Vault
(random passphrase in a 0600 file), starts the local unix-socket daemon, pairs a
local agent (token in Keychain only), then serves stdio MCP — all state under
${PLUGIN_DATA} (HEALTHCARE_HOME).
24 scoped tools: vitals, medications, activities, emotions, sleep, encounters,
diagnosis mentions, medication plans, reminders, trends, timelines, visit
summaries, source evidence.
Some tool line names exceed 64 chars (e.g.
mcp__agent_plugin_healthcare_<hash8>__hc__health_profile_observation_series) and
are hash-truncated by the host; functionality is unaffected (same mechanism as
other catalog plugins).

Privacy summary

Health data never leaves the device: AES-GCM encrypted Vault, local unix-socket IPC,
agent tokens in the macOS Keychain, tamper-evident audit chain, approval-gated
deletion. Zero network by default — the only optional network path is a
user-configured LLM endpoint for assisted report import
(HEALTHCARE_LLM_API_KEY/HEALTHCARE_LLM_ENDPOINT), off unless explicitly set.
The engine repository is a personal-data-free extract of a private monorepo:
src/ and tests/ carried over unchanged and verified free of personal
identifiers across the full git history.

README from the reviewed commit 09f3af2; it updates when the author re-pins.

More by harrylabsj

7 plugins by harrylabsj in the catalog.

harrylabsjreading-buddyLocal-first WeRead (微信读书) reading companion: syncs bookshelf, reading stats and notes to the local machine and turns them into private reading cards and weekly/monthly reviews through 8 MCP tools, with a built-in fictional demo mode for previews. Engine pinned to an immutable git commit (e5f6673) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 20+ on PATH. All data stays in PLUGIN_DATA; never posts to WeRead — cards and reviews are local files saved only after user confirmation. Disclosure — live mode sends your WEREAD_API_KEY as a Bearer token plus book ids and paging cursors to i.weread.qq.com (Tencent's WeRead agent gateway) and nothing else; the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first; the engine's npm dependencies resolve as caret ranges at first launch.Communitytools1 harrylabsjwechat-social-assistantLocal-first WeChat relationship memory assistant for macOS: captures only what is visible in the WeChat window via system OCR/Accessibility, stores everything in a local SQLite database (0600/0700 permissions, no cloud), and serves contact briefs, follow-up planning, outreach drafts and weekly relationship reports through 32 MCP tools. Engine pinned to the immutable PyPI release wechat-social-assistant==1.5.1 over uvx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs uv on PATH. All data confined to PLUGIN_DATA via WSA_ALLOWED_ROOT + path enforcement. Never reads WeChat databases, never injects into WeChat, never sends messages — outreach is drafts for human review only. Disclosure — reads WeChat only by screenshotting/OCR-ing and walking the macOS Accessibility tree of the frontmost window (not WeChat's databases or a bot API), compiles bundled Swift helpers with swiftc into ~/Library/Caches/wechat-social-assistant/bin on first use, and needs Screen Recording (optionally Accessibility) permission for the host terminal; no network egress, never sends messages.Communitytools1 harrylabsjeatwiseEatwise (外卖营养教练) — local-first Chinese dietary coach: deterministic meal nutrition reviews, personal daily energy/nutrient targets, and consented on-device profile and meal history through 9 MCP tools over a bundled open food database (TFND + USDA FNDDS). No network, no accounts, no payments; profile schema rejects name/phone/ID/medical fields by design. Engine pinned to an immutable git commit (cbc08f6) over npx stdio; Portable Agent Plugins v1 package (mcp.json + skills/), needs Node.js 22.5+ on PATH. Disclosure — the engine's MCP tool descriptions and error messages are Chinese-only while the skills are English-first.Communitytools harrylabsjfreight-reconciliationPayer-side freight reconciliation: import carrier bills and trip ledgers into a deterministic local core (SQLite, WAL, no cloud), re-calculate against contracted rates and produce evidence-linked difference lists for human review — 14 MCP tools over uvx stdio (engine pinned to the immutable commit e8cd259c, release v0.4.1), with 3 bilingual workflow skills bundled. Portable Agent Plugins v1 package (mcp.json + skills/); needs uv on PATH. Never approves payments, sends messages or writes back to ERP/TMS; final confirmations route through a local admin page the model cannot reach. Disclosure — the optional freight-admin page listens on 127.0.0.1 and is where a human confirms mappings, rules, matches and exports; nothing leaves the machine.Communitytools

All 7 by harrylabsj