DoctoFam Medical Clinic
REMOTE · MCP.DOCTOFAM.COM
See your clinic's free slots, doctors, rooms, service prices and how busy each day is.
Available components
Last scanned (13 minutes ago)
Scores higher than 98% of remote servers
Reachable. Last reached 17 Oct 2026.
Category Health and Science
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security92
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
- The authorisation server supports Client ID Metadata Documents, the current MCP client-registration mechanism. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability83
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2002 tokens (~143/item across 14 items; 10 tools + 4 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management73
- Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 10 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 12 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 67 to 70. That category is still filling its 30-day observation window: 20 days of observed history at the previous scan, 21 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 60 to 63. That category is still filling its 30-day observation window: 18 days of observed history at the previous scan, 19 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 50 to 57. That category is still filling its 30-day observation window: 15 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.
- 10 Oct 26 +2
No change was recorded against any check on this day. Stability & Change Management went from 40 to 50. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.
- 7 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 30 to 40. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Oct 2026 · Probed https://mcp.doctofam.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=doctofam.com | CN=Amazon RSA 2048 M01,O=Amazon,C=US | 1 Aug 2026 | 14 Feb 2027 | RSA 2048 | SHA256-RSA | bc22e7a572af71e41c3b9d16c2d90b2 |
| SANs: doctofam.com, *.migration.doctofam.com, *.doctofam.com | ||||||
| CN=Amazon RSA 2048 M01,O=Amazon,C=US (CA) | CN=Amazon Root CA 1,O=Amazon,C=US | 23 Aug 2022 | 23 Aug 2030 | RSA 2048 | SHA256-RSA | 77312380b9d6688a33b1ed9bf9ccda68e0e0f |
| CN=Amazon Root CA 1,O=Amazon,C=US (CA) | CN=Starfield Services Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US | 25 May 2015 | 31 Dec 2037 | RSA 2048 | SHA256-RSA | 67f944a2a27cdf3fac2ae2b01f908eeb9c4c6 |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.doctofam.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| doctofam.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Enforced and verified
The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.
| Result | Enforced and verified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
WWW-Authenticate challenge Bearer realm="doctofam", resource_metadata="https://mcp.doctofam.com/.well-known/oauth-protected-resource", scope="doctofam:read", error="invalid_token", error_description="missing Bearer token"
Bearer realm="doctofam", resource_metadata="https://mcp.doctofam.com/.well-known/oauth-protected-resource", scope="doctofam:read", error="invalid_token", error_description="missing Bearer token"Protected resource metadata
| Document | https://mcp.doctofam.com/.well-known/oauth-protected-resource |
|---|---|
| Retrieved | Yes |
| Resource | https://mcp.doctofam.com |
| Authorisation server | https://api.authrice.com |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.doctofam.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.doctofam.com/mcp | HTTPS enforced |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_clinic Get medical practice details ~69
Use this when someone asks about one medical practice's setup, such as its currency, language or timezone. Returns the practice's name, currency, default language, timezone and last edit time. Not for free consultation times.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | yes | Practice id: 24 lowercase hexadecimal characters |
| Name | Type | Req | Description |
|---|---|---|---|
| clinic | – | yes | Administrative practice metadata only; opening hours, staff, patient and appointment data are not included. Null when not found. |
| status | string | yes | – |
No examples provided.
get_clinic_availability Find free consultation times ~88
Use this when someone asks when their doctor's practice has free appointment or consultation times. Returns each open online-booking slot's start and end, grouped by day, for the next days with openings: up to 7 days and 100 slots (no patient or doctor details). Not for booking a visit.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | yes | Practice id: 24 lowercase hexadecimal characters |
| Name | Type | Req | Description |
|---|---|---|---|
| days | array | yes | One row per day with open online-booking slots, in date order, holding at most 100 slots in total. Slot times only; patients, doctors, services and clinical data are never included. |
No examples provided.
get_clinic_schedule_summary Count patient visits per day ~156
Use this when someone asks how busy their medical practice is or how many patient visits are booked each day. Returns appointment counts per UTC day for one practice, whatever their status, for the next 7 days by default and at most 31 days; counting stops at 100. Not for counting cancellations or seeing which patients are booked.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | yes | Practice id: 24 lowercase hexadecimal characters |
| endTime | – | – | End of the range as an ISO 8601 date-time, after startTime and at most 31 days later; defaults to 7 days after the start |
| startTime | string | – | Start of the range as an ISO 8601 date-time; defaults to now |
| Name | Type | Req | Description |
|---|---|---|---|
| appointmentCount | integer | yes | – |
| appointmentCountIsLowerBound | boolean | yes | True when more than 100 appointments fall in the range |
| days | array | yes | One row per UTC day that has appointments, canceled ones included. Aggregate counts only: appointment identifiers and times, patient information, services, diagnoses and notes are never returned. |
| range | object | yes | – |
No examples provided.
get_subscription_status Check DoctoFam plan and limits ~88
Use this when someone asks which DoctoFam plan a practice is on, whether it is active, or how many appointments, patients, rooms or users it allows. Returns the plan name, status, billing frequency and plan caps, or the default Free plan when none is active. Not for invoices or amounts billed.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | yes | Practice id: 24 lowercase hexadecimal characters |
| Name | Type | Req | Description |
|---|---|---|---|
| subscription | object | yes | The practice's active or past-due plan, or the default Free plan (isDefaultFreePlan) when neither exists. Seats are rooms; caps are limits, not usage. Billing identifiers, payment-provider data, amou… |
No examples provided.
list_calendar_events List closures, holidays and blocked time ~175
Use this when someone asks when their medical practice is closed, or when a doctor or room is blocked for holidays, sick leave, courses, meetings or maintenance. Returns each block or extra opening with start, end, all-day flag, scope and type (no titles or notes). Not for patient appointments.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | – | Only this practice (24 lowercase hexadecimal characters); every practice when absent |
| cursor | string | – | The nextCursor of the previous page with the same filters; absent for the first page |
| endTime | – | – | Only blocks ending before this ISO 8601 date-time |
| limit | integer | – | Blocks per page, from 1 to 100; defaults to 20 |
| startTime | string | – | Only blocks starting at or after this ISO 8601 date-time |
| Name | Type | Req | Description |
|---|---|---|---|
| calendarEvents | array | yes | Non-appointment calendar blocks, earliest first. Event identifiers, staff and room references, titles, notes and patient links are never returned. |
| nextCursor | – | yes | Cursor for the next page; null on the last page |
No examples provided.
list_clinics List your medical practices ~112
Use this when someone asks which medical practices or doctor's offices they run in DoctoFam, or a practice's id is needed. Returns each practice's id, name, currency, default language and timezone, 20 per page by default. Not for finding a patient or a visit.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | string | – | The nextCursor of the previous page of this listing; absent for the first page |
| limit | integer | – | Practices per page, from 1 to 100; defaults to 20 |
| Name | Type | Req | Description |
|---|---|---|---|
| clinics | array | yes | Medical practices in the signed-in organization, administrative metadata only. Patient, appointment and clinical records are never returned. |
| nextCursor | – | yes | Cursor for the next page; null on the last page |
No examples provided.
list_procedures Look up consultation and service prices ~132
Use this when someone asks what their medical practice charges for a consultation, check-up, vaccination or other service. Returns catalog service names with price and last edit time, alphabetically, 50 per page by default. Not for a patient's medical history or the care they received.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | – | Only this practice (24 lowercase hexadecimal characters); every practice when absent |
| cursor | string | – | The nextCursor of the previous page with the same filters; absent for the first page |
| limit | integer | – | Services per page, from 1 to 100; defaults to 50 |
| Name | Type | Req | Description |
|---|---|---|---|
| nextCursor | – | yes | Cursor for the next page; null on the last page |
| procedures | array | yes | Service catalog entries in name order. Patient-linked treatments, diagnoses, prescriptions and record identifiers are never returned. |
No examples provided.
list_providers List doctors and staff who take bookings ~69
Use this when someone asks which doctors, nurses or assistants patients can book at their practice. Returns up to 100 staff display names for one practice (no contact details or roles). Not for staff holidays or sick days.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | yes | Practice id: 24 lowercase hexadecimal characters |
| Name | Type | Req | Description |
|---|---|---|---|
| providers | array | yes | Display names of staff with a doctor, nurse or assistant role. Staff identifiers, contact details, role records and clinical data are never returned. |
No examples provided.
list_rooms List consultation rooms ~117
Use this when someone asks which consultation or exam rooms their medical practice has. Returns room names with last edit time for one practice, alphabetically, 50 per page by default. Not for room schedules or which patient uses a room.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | yes | Practice id: 24 lowercase hexadecimal characters |
| cursor | string | – | The nextCursor of the previous page with the same filters; absent for the first page |
| limit | integer | – | Rooms per page, from 1 to 100; defaults to 50 |
| Name | Type | Req | Description |
|---|---|---|---|
| nextCursor | – | yes | Cursor for the next page; null on the last page |
| rooms | array | yes | Rooms in name order. Record identifiers, appointment links, patient information and clinical content are never returned. |
No examples provided.
show_clinic_overview Show medical practice overview ~97
Use this when someone wants a quick overview or dashboard of one medical practice. Returns an overview card with the practice's details, appointment counts for the next 7 days, staff and room counts, open online-booking slots, up to 12 service prices and the current plan (no patient or clinical data). Not for a single patient or visit.
| Name | Type | Req | Description |
|---|---|---|---|
| clinicId | string | yes | Practice id: 24 lowercase hexadecimal characters |
| Name | Type | Req | Description |
|---|---|---|---|
| appointmentCount | integer | yes | – |
| appointmentCountIsLowerBound | boolean | yes | – |
| availabilityDays | array | yes | – |
| availableDayCount | integer | yes | – |
| availableSlotCount | integer | yes | – |
| clinic | – | yes | Administrative practice metadata; null when the practice was not found. The overview never includes individual appointment records, patient information, diagnoses, treatment details, notes or other c… |
| procedureCount | integer | yes | – |
| procedureCountIsLowerBound | boolean | yes | – |
| procedures | array | yes | – |
| providerCount | integer | yes | – |
| providerCountIsLowerBound | boolean | yes | – |
| roomCount | integer | yes | – |
| roomCountIsLowerBound | boolean | yes | – |
| scheduleDays | array | yes | – |
| scheduleRange | object | yes | – |
| subscription | – | yes | – |
No examples provided.
How do I install the DoctoFam Medical Clinic MCP server?
DoctoFam Medical Clinic is a hosted endpoint at https://mcp.doctofam.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.doctofam.com
claude mcp add --transport http com-doctofam-doctofam 'https://mcp.doctofam.com/mcp'
What is the DoctoFam Medical Clinic MCP server?
DoctoFam Medical Clinic is an MCP server listed in the public MCP registry as com.doctofam/doctofam. See your clinic's free slots, doctors, rooms, service prices and how busy each day is. This page covers its hosted endpoint (https://mcp.doctofam.com/mcp).
Is the DoctoFam Medical Clinic MCP server safe to use?
DoctoFam Medical Clinic scores 90 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the DoctoFam Medical Clinic MCP server expose?
DoctoFam Medical Clinic exposes 10 tools: list_clinics, get_clinic, get_clinic_schedule_summary, list_procedures, list_rooms, and 5 more. Their descriptions and schemas cost roughly 1,103 tokens of context every time the server is loaded.
Does the DoctoFam Medical Clinic MCP server require authentication?
Yes. DoctoFam Medical Clinic asked us for credentials when we connected, so you will need to authorise it in your MCP client before it can do anything.
Is the DoctoFam Medical Clinic MCP server still maintained?
DoctoFam Medical Clinic is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.