
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
Verified ICD-10-CM code lookup & validation for AI agents — official descriptions, not guesses.
Verified ICD-10-CM code lookup & validation for AI agents — official descriptions, not guesses.
Verified, trustworthy data tools for AI agents. "Qiniso" means "truth" in Zulu.
Ask an LLM what an ICD-10-CM code means and it will answer confidently — and often wrongly: the wrong laterality, the wrong severity, the wrong condition entirely, and it will happily invent a description for a code that doesn't exist. icdwise looks the code up in the official U.S. ICD-10-CM code set and returns the real description — or an honest "not found" instead of a guess.
Asked to describe real ICD-10-CM codes, a frontier model with no tools was wrong ~38% of the time — e.g. it called
H40.1131"severe stage, right eye" (it's mild, bilateral) andT63.011A"ingested mushrooms" (it's rattlesnake venom) — and it fabricated a description for a code that doesn't exist. icdwise: the official text, or "not found." Never a guess.
Settings → Connectors → Add custom connector, and paste — no login, no key:
https://icdwise.qinisolabs.workers.dev/mcp
Stateless, reads no user data, requires no secrets. Prefer to run it locally over stdio? Add { "command": "npx", "args": ["-y", "icdwise"] } under mcpServers in your client config.
npm i icdwise
import { lookupIcd10, validateIcd10, searchIcd10 } from "icdwise";
lookupIcd10("E11.9").description; // "Type 2 diabetes mellitus without complications"
lookupIcd10("H40.1131").description; // "Primary open-angle glaucoma, bilateral, mild stage"
validateIcd10("E11.99").valid; // false — well-formed but not a real code
searchIcd10("generalized anxiety"); // → [{ code: "F41.1", description: "Generalized anxiety disorder" }, ...]
Codes are accepted with or without the dot (E11.9 or E119). A well-formed code that isn't in the official set returns found: false with a clear note — it never invents a description.
| Tool | What it answers |
|---|---|
| lookup_icd10 | The official description of a code (+ canonical form and 3-char category) |
| validate_icd10 | Is this a real ICD-10-CM code? (well-formed and in the official set) |
| search_icd10 | Reverse lookup — find the code(s) for a condition by keywords |
ICD-10-CM is U.S. public-domain data (NCHS/CMS). The full code set (~74,000 codes) is bundled and generated from the official CMS release via npm run build-data <icd10cm-codes-YYYY.txt> (see scripts/build-data.mjs); every response reports the datasetVersion it used. Descriptions are the official text — the curated, versioned dataset kept current is the moat.
A single TypeScript package exposing one MCP server over two transports — stdio (local / npx) and a Cloudflare Worker (hosted edge endpoint) — both driven by the same core.ts tool definitions, which also power the importable library.
npm install
npm run build
npm test
Apache-2.0. ICD-10-CM data is U.S. public domain (NCHS/CMS); see NOTICE.
FAQs
Verified ICD-10-CM code lookup & validation for AI agents — official descriptions, not guesses.
The npm package icdwise receives a total of 75 weekly downloads. As such, icdwise popularity was classified as not popular.
We found that icdwise demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.