# MedBillAnalyzer (remote · app.medbillanalyzer.com)

Compares a medical bill with the insurer's Explanation of Benefits and lists where they disagree.

- Trust score: 74/100 (medium)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `app.medbillanalyzer.com`: 74/100 (this document), [markdown](https://verifymcp.io/servers/com-medbillanalyzer-medbillanalyzer/mcp-apps-2.md), [page](https://verifymcp.io/servers/com-medbillanalyzer-medbillanalyzer/mcp-apps-2)

## Channel facts

- Endpoint: `https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.1.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 63/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (delete_case).
  - HTTPS is enforced; there's no plaintext access path.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 57/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1960 tokens (~280/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 80/100
  - Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 89/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 68% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the MedBillAnalyzer MCP server?

MedBillAnalyzer is a hosted endpoint at https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-medbillanalyzer-medbillanalyzer 'https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry'
```

### Cursor

```json
{
  "mcpServers": {
    "com-medbillanalyzer-medbillanalyzer": {
      "url": "https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-medbillanalyzer-medbillanalyzer": {
      "type": "http",
      "url": "https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-medbillanalyzer-medbillanalyzer]
url = "https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-medbillanalyzer-medbillanalyzer": {
      "type": "remote",
      "url": "https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-medbillanalyzer-medbillanalyzer --url 'https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-medbillanalyzer-medbillanalyzer:
    url: "https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry"
```

### Netclaw

```json
{
  "McpServers": {
    "com-medbillanalyzer-medbillanalyzer": {
      "Transport": "http",
      "Url": "https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-medbillanalyzer-medbillanalyzer -t streamable-http -u 'https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry'
```

### Other

```json
{
  "mcpServers": {
    "com-medbillanalyzer-medbillanalyzer": {
      "type": "http",
      "url": "https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 74, +1)

No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-03 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-11-01 (score 72, +1)

No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-29 (score 71, +1)

No change was recorded against any check on this day. Stability & Change Management went from 53 to 57. That category is still filling its 30-day observation window: 16 days of observed history at the previous scan, 17 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-27 (score 70, +1)

No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-25 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-23 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-10-21 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (7)

### `check_medical_bill` (~779 tokens)

Check a medical bill

Compare a medical bill against the Explanation of Benefits the patient’s insurer issued for the same care, and report where the two disagree. Use when someone shares a medical bill, hospital statement, doctor bill, lab bill or EOB and asks whether it is correct, what they actually owe, or how to dispute it. The bill is required; the EOB is strongly recommended and is what makes most of the checks possible. If you can see the documents but cannot attach their bytes, transcribe them into `bill` and `eobs` exactly as printed. Free: returns a summary and the title of every finding, but not the detail behind them.

Input parameters:

- `bill` (object): The bill already transcribed into structured form. Prefer `bill_document` when you can send the file itself or a link to it: the transcription is then done by a reader tuned for these forms and check…
- `bill_document` (object): The bill as a file, read for you. Use this when you have the document itself — a photo, a scan, or a PDF from the provider’s portal. Send it one of three ways: `data_base64` if you have the bytes; `u…
- `eob` (object): A single Explanation of Benefits, already transcribed.
- `eob_document` (object): The Explanation of Benefits as a file, read for you. It usually sits behind the insurer’s login, which is what `upload_id` is for. Send it one of three ways: `data_base64` if you have the bytes; `upl…
- `eobs` (array): Every Explanation of Benefits covering this bill, already transcribed. Use this rather than `eob` whenever there is more than one — a hospital statement usually spans several claims and each claim ha…
- `good_faith_estimate` (string): The total on the written Good Faith Estimate the provider gave the patient before the care, as printed — "$1,204.37". Needed for the self-pay check: under the No Surprises Act a self-pay bill that co…
- `label` (string): A short human label for this case.

### `get_case` (~40 tokens)

Read a case

Retrieve a case by id. Returns the same free summary, plus every finding in detail once the case has been unlocked.

Input parameters:

- `case_id` (string, required)

### `unlock_case` (~426 tokens)

Unlock a case

Pay to unlock the full findings, the dispute letter and the phone script. With a `shared_payment_token` (a Stripe Shared Payment Token granted to the `stripe_profile` in the case summary's `purchase`), it charges $10.00 for this bill and unlocks the case in the same call. Without one, it returns a checkout URL and charges nothing itself. A case with no findings is refused: there is nothing to buy, and the user pays nothing when nothing is found. So is a case with nothing to act on yet (`nothing_to_act_on`), such as a bill sent without its Explanation of Benefits whose only finding is that the EOB is missing.

Input parameters:

- `case_id` (string, required)
- `membership_token` (string): An existing membership. If the user already subscribed, pass the token they were given and this bill unlocks immediately with nothing charged — a membership covers up to 25 bills a calendar month, in…
- `plan` (string): "one_bill" is $10 for this bill, charged once. "subscription" is the monthly membership, which unlocks up to 25 bills a calendar month for anyone in a household. It is sold only while the case summar…
- `shared_payment_token` (string): A Stripe Shared Payment Token (`spt_…`) granted to the `stripe_profile` in the case summary's `purchase`, for at least $10.00 USD. When present, this call charges it once and unlocks the case; no che…

### `get_case_outputs` (~203 tokens)

Get the dispute letter and phone script

Get the dispute letter and the phone script for an unlocked case. The letter is a template the patient sends in their own name.

Input parameters:

- `account_number` (string)
- `case_id` (string, required)
- `include_pdf` (boolean): Also return the letter as a print-ready PDF (base64). One page where it fits, addressed for a #10 window envelope, with fold marks.
- `letter_date` (string): The date to print on the letter, as MM/DD/YYYY. Send the USER's local date: the server runs in UTC, so without this a patient in a western timezone can be handed a letter dated tomorrow, and it is th…
- `patient_name` (string, required): As it should appear on the letter.
- `provider_address_lines` (array)
- `reply_to_lines` (array): Where the provider should write back.

### `delete_case` (~143 tokens)

Delete a case

Delete everything held about a case, immediately and permanently. The record is removed, not flagged, and it cannot be recovered afterwards — not by us either. This is the promise the privacy policy makes, and it needs no account. It does need the delete token issued when the case was created: reading a case and destroying it are deliberately different capabilities.

Input parameters:

- `case_id` (string, required)
- `delete_token` (string, required): The one-time token returned by check_medical_bill. Deleting is a separate capability from reading on purpose: a case link can end up in a browser history or a forwarded message, and whoever finds it…

### `report_outcome` (~206 tokens)

Report what happened after the letter

Record what happened after the patient sent the dispute letter: corrected, reduced, refused, ignored, still waiting, or not sent. Free. Every answer counts equally, and it is kept only as an aggregate count — nothing about it is stored against the case. This product can tell that two documents disagreed; only these reports show whether saying so to a billing office changes anything.

Input parameters:

- `amount_written_off` (string): What the provider actually took off the bill, as printed — "$412.30". The one number that says whether any of this works. Omit if nothing came off or it is not known yet.
- `case_id` (string, required)
- `outcome` (string, required): `corrected` the charge was removed in full; `reduced` some of it came off; `refused` they said no; `ignored` no reply at all; `waiting` sent but nothing back yet; `not_sent` the patient decided not t…

### `export_case` (~67 tokens)

Export a case

Everything stored about a case, as JSON, in one response. This is the portable copy the privacy policy offers. It is deliberately the whole record rather than a summary, so that what is returned here can be compared against what the policy says is kept.

Input parameters:

- `case_id` (string, required)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-medbillanalyzer-medbillanalyzer/mcp-apps-2#diagnostics

## Score history

- 2026-11-05: 74
- 2026-11-04: 73
- 2026-11-03: 73
- 2026-11-02: 72
- 2026-11-01: 72
- 2026-10-31: 71
- 2026-10-30: 71
- 2026-10-29: 71
- 2026-10-28: 70
- 2026-10-27: 70
- 2026-10-26: 69
- 2026-10-25: 69
- 2026-10-24: 68
- 2026-10-23: 68
- 2026-10-22: 67
- 2026-10-21: 67
- 2026-10-20: 66
- 2026-10-19: 66
- 2026-10-18: 65
- 2026-10-17: 65
- 2026-10-16: 64
- 2026-10-15: 64
- 2026-10-14: 64
- 2026-10-13: 63
- 2026-10-12: 63

## Common questions

### What is the MedBillAnalyzer MCP server?

MedBillAnalyzer is an MCP server listed in the public MCP registry as com.medbillanalyzer/medbillanalyzer. Compares a medical bill with the insurer's Explanation of Benefits and lists where they disagree. This page covers its hosted endpoint (https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry).

### Is the MedBillAnalyzer MCP server safe to use?

MedBillAnalyzer scores 74 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the MedBillAnalyzer MCP server expose?

MedBillAnalyzer exposes 7 tools: check_medical_bill, get_case, unlock_case, get_case_outputs, delete_case, and 2 more. Their descriptions and schemas cost roughly 1,864 tokens of context every time the server is loaded.

### Does the MedBillAnalyzer MCP server require authentication?

No. We connected to MedBillAnalyzer without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the MedBillAnalyzer MCP server still maintained?

MedBillAnalyzer is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://app.medbillanalyzer.com/mcp/apps?via=mcp_registry
- Website: https://medbillanalyzer.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-medbillanalyzer-medbillanalyzer/mcp-apps-2.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-medbillanalyzer-medbillanalyzer/mcp-apps-2.json
- HTML version of this page: https://verifymcp.io/servers/com-medbillanalyzer-medbillanalyzer/mcp-apps-2