
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
molecare-mcp
Advanced tools
MCP server bridging the MoleCare API to any MCP client: educational dermatology knowledge (lesion terminology, ABCDE criteria, SNOMED CT to ICD-10 mapping) and mole tracking data. Runs with no credentials. Not a medical device.
Model Context Protocol (MCP) server that gives Claude and other MCP clients access to:
molecare-ops-mcp (mock-first)Not a medical device. Outputs are educational and operational aids only. Do not use for diagnosis or treatment decisions.
Product site: molecare.co.uk · App: iOS · Android
One command, no API key, no database. Real output from the published package.
MoleCare helps people track moles over time and prepare for clinician visits. This MCP server lets developers and operators:
No credentials, no database, no cloud account. Add this to your MCP client config and restart it:
{
"mcpServers": {
"molecare": {
"command": "npx",
"args": ["-y", "molecare-mcp"]
}
}
}
For Claude Desktop on macOS that file is
~/Library/Application Support/Claude/claude_desktop_config.json.
The dermatology knowledge tools work immediately — they read from a knowledge base bundled in the package. Everything that talks to a backend returns clearly-labelled mock data until you configure it, so you can explore the whole tool surface before deciding whether you want any of it.
To try it without a client at all:
npx -y molecare-mcp
It starts and waits on stdio. No output means it is working.
Only needed if you are running a MoleCare-compatible API:
{
"mcpServers": {
"molecare": {
"command": "npx",
"args": ["-y", "molecare-mcp"],
"env": {
"MOLECARE_API_URL": "http://localhost:8080/api",
"MOLECARE_API_KEY": "your-local-api-key"
}
}
}
}
Use localhost (or your own deployment). Do not paste production keys into config files that sync to cloud drives.
All optional unless you want live backends.
| Variable | Purpose | Example |
|---|---|---|
MOLECARE_API_URL | MoleCare HTTP API | http://localhost:8080/api |
MOLECARE_API_KEY | API bearer / key | local-dev-key |
ONTOLOGY_API_URL | Ontology service | http://localhost:8081 |
MLFLOW_TRACKING_URI | MLflow | http://localhost:5000 |
FEAST_REPO_PATH / feature store URL | Feast | — |
AWS_REGION | EC2 / CloudWatch clients | us-east-1 |
GITHUB_TOKEN | CI/CD tools | — |
MCP_HEALTH_PORT | Bind an HTTP /health endpoint. Unset by default — stdio clients do not need it | 3000 |
PORT | Same, for container health probes | 3000 |
See .env.example.
These are the reason most people install this. They answer from a bundled knowledge base and need no API, no key, and no network.
| Tool | Description |
|---|---|
search_medical_info | Search the dermatology knowledge base |
lookup_medical_concept | Look up a SNOMED CT concept |
search_medical_concepts | Search conditions by name or description |
map_snomed_to_icd10 | Map a SNOMED CT code to ICD-10 |
classify_lesion_features | ABCDE-style feature descriptors for a lesion |
assess_risk_from_factors | Named educational risk factors (no score) |
get_condition_risk_factors | Known risk factors for a condition |
get_condition_progression | Typical progression stages for a condition |
get_malignant_conditions | Malignant skin conditions with codes |
Resources: molecare://knowledge/* — ABCDE criteria, Fitzpatrick skin types,
prevention, when to see a dermatologist. molecare://ontology/* — SNOMED CT and
ICD-10 reference lists with provenance metadata.
Bundled SNOMED CT / ICD-10 helpers are an educational subset, not a licensed
terminology distribution. Named sources live in
src/resources/terminology-provenance.ts
and are returned on map_snomed_to_icd10 and the ontology resources:
| System | What this package reflects |
|---|---|
| SNOMED CT | International Edition concept IDs / FSNs checked against the SNOMED International browser (last checked 2026-09-03) |
| ICD-10 | WHO ICD-10 three-character category codes (e.g. C43, D22), not ICD-10-CM site-specific codes |
| SNOMED → ICD-10 | Approximate category-level mappings — not certified one-to-one map rows |
Mock concept and mapping rows live in src/api/ontology-client.ts. Educational
prose without clinical codes lives in src/resources/medical-kb.ts.
Returns labelled mock data until MOLECARE_API_URL is set.
| Tool | Description |
|---|---|
get_user_moles | List moles for a user id |
get_mole_analysis | Analysis payload for a mole |
get_mole_changes | Change history for a mole |
get_user_risk_factors | A user's risk profile |
compare_moles | Compare two moles |
molecare-ops-mcp binary)These exist because MoleCare operates this stack from an assistant. They are of little use outside that context, and all of them return mock data unless the matching backend is configured.
They are not part of the molecare-mcp tool list. Loading 39 infrastructure
tools that nobody outside MoleCare can use made it measurably harder for a model
to pick the right dermatology tool, so they live in their own server:
{
"mcpServers": {
"molecare-ops": {
"command": "npx",
"args": ["-y", "-p", "molecare-mcp", "molecare-ops-mcp"]
}
}
}
| Area | Tools |
|---|---|
| Health | get_system_health, check_server_health, get_service_health, clear_cache |
| MLflow | get_mlflow_experiments, get_mlflow_runs, get_registered_models, get_model_version, compare_model_runs, get_training_runs |
| Feature store | get_feature_views, get_feature_view_details, get_feature_freshness, get_online_features, get_feature_store_stats |
| CI/CD | get_pipeline_runs, get_pipeline_summary, get_deployments, get_deployment_status, get_releases |
| AWS | get_ec2_instances, get_ec2_instance, get_ec2_health, get_ec2_metrics |
| Apps | get_app_status, get_web_app_status, get_mobile_api_status, get_all_apps_status, get_app_metrics, get_app_errors, get_app_versions, get_app_store_status |
| Database | get_database_status, get_database_metrics, get_slow_queries, get_table_stats, get_backup_history, get_connection_pools |
| Kubernetes | get_kubernetes_status |
The AWS tools need @aws-sdk/client-ec2 and @aws-sdk/client-cloudwatch, which are
optional peer dependencies — they are not installed by default, because they add
33 MB that nobody wanting the dermatology tools should have to download. Install them
yourself if you want live AWS data:
npm i @aws-sdk/client-ec2 @aws-sdk/client-cloudwatch
Claude / Cursor / MCP client
│ stdio (JSON-RPC)
▼
molecare-mcp molecare-ops-mcp
├─ medical KB (local) ├─ MLflow / Feast clients
├─ MoleCare API client ├─ AWS / CI / K8s clients
└─ ontology client └─ database / app clients
│ (14 tools) │ (39 tools, internal)
│ │
└───────────┬───────────────────┘
└─ optional HTTP GET /health (Docker / ECS)
docker build -t molecare-mcp .
docker run --rm -p 3000:3000 molecare-mcp
curl http://localhost:3000/health
.env files or API keys — see SECURITY.md to report a vulnerabilityuserId can return PHI only if you point them at a real backend with real auth — treat that as productionMoleCare MCP provides educational information and developer tooling. It does not diagnose melanoma or any disease. Always consult a qualified clinician for medical concerns.
git clone https://github.com/MoleCare/molecare-mcp.git
cd molecare-mcp
npm install
npm run build
npm run dev # auto-reload
npm run inspect # browse tools in MCP Inspector
Contributions are welcome. Read CONTRIBUTING.md first — it covers the mock-first rule,
the clinical-safety boundary for anything touching medical content, and how to pick up a good first issue.
Please keep secrets out of examples and prefer localhost defaults.
Environment variables:
.env.exampleis the authoritative list (all 27 variables read by the source). Regenerate the ground truth withgrep -rhoE "process\.env\.[A-Z_0-9]+" src/.ONTOLOGY_API_URLandFEAST_REPO_PATHare not read by any source file.
Thank you to everyone who has helped molecare-mcp.
The list is filled by Contributors from GitHub commits, bots omitted — never hand-maintained, because a stale list is worse than none. Contributor graph · good first issue
Apache-2.0 © MoleCare LTD
FAQs
MCP server bridging the MoleCare API to any MCP client: educational dermatology knowledge (lesion terminology, ABCDE criteria, SNOMED CT to ICD-10 mapping) and mole tracking data. Runs with no credentials. Not a medical device.
The npm package molecare-mcp receives a total of 0 weekly downloads. As such, molecare-mcp popularity was classified as not popular.
We found that molecare-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.