VendorOMOPHub
Connects overstdio, http

Our grade: 4 checks

Login One unscoped API key
Upkeep Active · 2026-10
Known bugs 0 open
Connection stdio, http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

4.5 6 reviews
67% would trust it in production
  • 5 3
  • 4 3
  • 3 0
  • 2 0
  • 1 0

Trust in production

  • Trust it - 67%
  • With caveats - 33%
  • Wouldn't - 0%

100% would recommend this server

How reviewers scored it

  • Setup & docs 4.3
  • Auth experience 4.5
  • Reliability 4.3
  • Maintainer responsiveness 4.7

Why it got a B

OMOPHub's MIT-licensed TypeScript server for the OHDSI ATHENA vocabularies, so an agent can look up concept IDs, map codes between ICD-10, SNOMED, RxNorm, LOINC and 120+ other vocabularies, walk ancestors and descendants, and resolve FHIR codings, without loading the vocabulary CSVs into a local database. Every tool reads reference data; nothing touches patient records. Run it locally over stdio, or point a client at the hosted HTTPS endpoint. No advisories on record and no shell-out. Mappings come back paginated, so a concept set built from one page can be silently incomplete; check has_more. Biggest deduction: access is one unscoped API key that sits in your client config, and one person makes all recent commits.

How to connect

// .cursor/mcp.json
{ "mcpServers": { "omophub": { "url": "https://mcp.omophub.com", "headers": { "Authorization": "Bearer oh_your_key_here" } } } }

Is OMOPHub MCP Server safe?

Is OMOPHub MCP Server safe to use?

OMOPHub MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does OMOPHub MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does OMOPHub MCP Server support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade B

Markdown

[![TrustedMCP grade B](https://trustedmcp.io/badge/omophub-mcp.svg)](https://trustedmcp.io/servers/omophub-mcp)

HTML

<a href="https://trustedmcp.io/servers/omophub-mcp"><img src="https://trustedmcp.io/badge/omophub-mcp.svg" alt="TrustedMCP grade B" height="80"></a>

Community reviews

Elif Yilmaz DBA
Trusts in production Recommends

Our team uses it every day

Been running this for about a month now. Being official from OMOPHub counts for a lot when I pitch it to security.

Used for Answering support questions from the database

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Ivan Horvat Backend engineer
Trusts with caveats Recommends

Clean integration, sensible permissions

Hooked OMOPHub MCP Server into Claude Code and it worked on the first try. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Filed an issue and got a reply within two days. I would use it in prod, but only with a human approving writes.

Used for Debugging data issues in staging

  • Setup & docs 3/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Leila Ahmadi ML engineer
Trusts in production Recommends

Recommended it to two teams already

Started with it as an experiment, now it is a fixture. Releases come often and the changelog is clear. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Would recommend without hesitation.

Used for Prototyping queries before writing code

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Ryan O'Connor Freelance developer
Trusts with caveats Recommends

Quietly reliable

Replaced a homegrown script with OMOPHub MCP Server and have not looked back. You can tell it is actively maintained, the rough edges keep getting fixed. The API key sits in the config file, so I made a dedicated key with minimal permissions.

Used for Generating SQL for ad-hoc reports

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5
Chris Turner Developer, healthtech
Trusts in production Recommends

Good defaults, good docs

Set this up for our team after comparing a few options. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Easy recommendation.

Used for Incident investigation

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Diego Fernandez Full-stack developer
Trusts in production Recommends

Does what it says, no drama

I use this almost daily. Narrowing the scopes took ten minutes and made me much happier running it.

Used for Read-only analytics questions

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you