.codex-plugin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .codex-plugin (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center"> <h1>clinicaltrialsgov-mcp-server</h1> <p><b>Search ClinicalTrials.gov trials, retrieve study details and results, and match patients to eligible trials via MCP. STDIO or Streamable HTTP.</b> <div>7 Tools • 1 Resource • 1 Prompt</div> </p> </div>
<div align="center">
</div>
<div align="center">
</div>
<div align="center">
Public Hosted Server: https://clinicaltrials.caseyjhand.com/mcp
</div>
Seven tools for searching, discovering, analyzing, and matching clinical trials:
| Tool Name | Description |
|---|---|
clinicaltrials_search_studies | Search studies with full-text queries, filters, pagination, sorting, and field selection. |
clinicaltrials_get_study_record | Fetch a single study by NCT ID. Returns the full record: protocol, eligibility, outcomes, arms, interventions, contacts, and locations. |
clinicaltrials_get_study_count | Get total study count for a query without fetching data. Fast statistics and breakdowns. |
clinicaltrials_get_field_values | Discover valid values for API fields (status, phase, study type, etc.) with per-value counts. |
clinicaltrials_get_field_definitions | Browse the study data model field tree — piece names, types, nesting. Supports subtree navigation and keyword search. |
clinicaltrials_get_study_results | Extract outcomes, adverse events, participant flow, and baseline from completed studies. Optional summary mode reduces ~200KB payloads to ~5KB. |
clinicaltrials_find_eligible | Match patient demographics and conditions to eligible recruiting trials. Provide age, sex, conditions, and location to find studies with matching eligibility criteria, contacts, and recruiting locations. |
| Resource | Description |
|---|---|
clinicaltrials://{nctId} | Fetch a single clinical trial study by NCT ID. Full JSON. |
| Prompt | Description |
|---|---|
analyze_trial_landscape | Adaptable workflow for data-driven trial landscape analysis using count + search tools. |
clinicaltrials_search_studiesPrimary search tool with full ClinicalTrials.gov query capabilities.
clinicaltrials_get_study_resultsFetch posted results data for completed studies.
clinicaltrials_find_eligibleMatch a patient profile to eligible recruiting trials.
Built on @cyanheads/mcp-ts-core:
none, jwt, oauth) for HTTP transportClinicalTrials.gov-specific:
A public instance is available at https://clinicaltrials.caseyjhand.com/mcp — no installation required. Point any MCP client at it via Streamable HTTP:
{
"mcpServers": {
"clinicaltrialsgov-mcp-server": {
"type": "streamable-http",
"url": "https://clinicaltrials.caseyjhand.com/mcp"
}
}
}Add to your MCP client config (e.g., claude_desktop_config.json):
{
"mcpServers": {
"clinicaltrialsgov-mcp-server": {
"type": "stdio",
"command": "bunx",
"args": ["clinicaltrialsgov-mcp-server@latest"],
"env": {
"MCP_TRANSPORT_TYPE": "stdio"
}
}
}
}Or for Streamable HTTP:
MCP_TRANSPORT_TYPE=http
MCP_HTTP_PORT=3010 git clone https://github.com/cyanheads/clinicaltrialsgov-mcp-server.git cd clinicaltrialsgov-mcp-server bun installAll configuration is optional — the server works with defaults and no API keys.
| Variable | Description | Default |
|---|---|---|
CT_API_BASE_URL | ClinicalTrials.gov API base URL. | https://clinicaltrials.gov/api/v2 |
CT_REQUEST_TIMEOUT_MS | Per-request timeout in milliseconds. | 30000 |
CT_MAX_PAGE_SIZE | Maximum page size cap. | 200 |
MCP_TRANSPORT_TYPE | Transport: stdio or http. | stdio |
MCP_HTTP_PORT | Port for HTTP server. | 3010 |
MCP_AUTH_MODE | Auth mode: none, jwt, or oauth. | none |
MCP_LOG_LEVEL | Log level (RFC 5424). | info |
LOGS_DIR | Directory for log files (Node.js only). | <project-root>/logs |
OTEL_ENABLED | Enable OpenTelemetry tracing. | false |
bun run build
bun run start:http # or start:stdio bun run devcheck # Lints, formats, type-checks
bun run test # Runs test suitedocker build -t clinicaltrialsgov-mcp-server .
docker run -p 3010:3010 clinicaltrialsgov-mcp-server| Directory | Purpose |
|---|---|
src/mcp-server/tools/ | Tool definitions (*.tool.ts). |
src/mcp-server/resources/ | Resource definitions (*.resource.ts). |
src/mcp-server/prompts/ | Prompt definitions (*.prompt.ts). |
src/services/clinical-trials/ | ClinicalTrials.gov API client and types. |
src/config/ | Environment variable parsing and validation with Zod. |
tests/ | Unit and integration tests. |
See CLAUDE.md for development guidelines and architectural rules. The short version:
try/catch in tool logicctx.log for request-scoped logging, no console callsindex.ts barrel filesIssues and pull requests are welcome. Run checks before submitting:
bun run devcheck
bun run testApache-2.0 — see LICENSE for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.