Back to HIPAA Agent

Card snapshot

hipaaagent.ai · 2026-05-15 00:33:22 UTC · 8e5e23ed770196c3caa8d7ee811f9128f669492297008c5543e50a75d08597f0

This is a frozen copy of the agent's agent-card.json as we observed it at the timestamp above. We capture a new snapshot every time the card's content hash changes. Useful for: forensic drift analysis, verifying downstream callers see the right version, reproducing routing decisions made historically.

{
  "name": "HIPAA Agent",
  "description": "HIPAA compliance officer for US healthcare practices. 83-tool automated scan, 12-phase internal network scanner, HIPAA Agent Compliance Score\u2122 (A\u2013F), Security Risk Assessments, 24 HIPAA policies, staff training, BAA management, blockchain-anchored audit trails, and audit-ready evidence packages. Zero-PHI architecture. May 2026 Security Rule ready. Free compliance check at hipaaagent.ai/check or book a consultation at cal.com/hipaa-agent/hipaa-compliance-review \u2014 (916) 476-7689.",
  "url": "https://hipaaagent.ai/api/a2a",
  "documentationUrl": "https://hipaaagent.ai/developers",
  "iconUrl": "https://hipaaagent.ai/icon.png",
  "termsOfService": "https://hipaaagent.ai/legal/terms",
  "privacyPolicy": "https://hipaaagent.ai/legal/privacy",
  "provider": {
    "organization": "Sentinel Health Compliance, LLC",
    "url": "https://hipaaagent.ai",
    "email": "compliance@hipaaagent.ai",
    "phone": "+19164767689"
  },
  "version": "1.0.0",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "stateTransitionHistory": false
  },
  "authentication": {
    "schemes": [
      "apiKey"
    ],
    "credentials": {
      "apiKey": {
        "location": "header",
        "name": "X-API-Key"
      }
    }
  },
  "defaultInputModes": [
    "application/json"
  ],
  "defaultOutputModes": [
    "application/json",
    "application/pdf"
  ],
  "skills": [
    {
      "id": "hipaa_scan",
      "name": "HIPAA Compliance Scan",
      "description": "Full 83-tool compliance scan (73 network + 10 browser-verified). Returns HIPAA Agent Compliance Score\u2122, findings with HIPAA citations, breach probability. Async \u2014 2\u20135 minutes.",
      "tags": [
        "scanning",
        "compliance",
        "healthcare",
        "hipaa"
      ],
      "examples": [
        "Run a HIPAA scan on NPI 1234567893",
        "Scan exampleclinic.com for HIPAA compliance issues"
      ]
    },
    {
      "id": "hipaa_grade",
      "name": "HIPAA Agent Compliance Score\u2122",
      "description": "Returns A\u2013F grade and 0\u2013100 compliance score for any US healthcare practice by NPI. 10-category breakdown. Instant if previously scanned.",
      "tags": [
        "compliance",
        "scoring",
        "healthcare",
        "hipaa"
      ],
      "examples": [
        "What is the HIPAA Agent Compliance Score for NPI 1234567893?",
        "Grade this dental practice on HIPAA compliance"
      ]
    },
    {
      "id": "hipaa_findings",
      "name": "Compliance Findings",
      "description": "Detailed findings from a completed scan with HIPAA Security Rule citations (45 CFR), fine exposure estimates, severity ratings, and remediation steps.",
      "tags": [
        "findings",
        "compliance",
        "remediation",
        "hipaa"
      ],
      "examples": [
        "Show findings for NPI 1234567893",
        "What HIPAA violations were found in the last scan?"
      ]
    },
    {
      "id": "hipaa_report",
      "name": "PDF Compliance Report",
      "description": "Generates a branded PDF risk posture report with cover page, findings, breach correlations, and remediation priorities. Async \u2014 returns job ID.",
      "tags": [
        "report",
        "pdf",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Generate a PDF compliance report for NPI 1234567893",
        "Create a risk posture report for this practice"
      ]
    },
    {
      "id": "hipaa_evidence",
      "name": "Audit Evidence Package",
      "description": "Compiles audit-ready evidence package with SHA-256 timestamped records and blockchain-anchored proof on Base L2.",
      "tags": [
        "evidence",
        "audit",
        "blockchain",
        "hipaa"
      ],
      "examples": [
        "Generate an evidence package for NPI 1234567893",
        "Prepare audit documentation for our practice"
      ]
    },
    {
      "id": "hipaa_audit_report",
      "name": "HIPAA Audit & Attestation Report",
      "description": "$499 one-time. 22-page signed report with attestation page, audit response readiness, SHA-256 integrity hash.",
      "tags": [
        "audit",
        "attestation",
        "report",
        "hipaa"
      ],
      "examples": [
        "Generate an audit attestation report for NPI 1234567893",
        "Create a 22-page signed audit report for this practice"
      ]
    },
    {
      "id": "hipaa_audit_ledger",
      "name": "Audit Event Ledger",
      "description": "Immutable audit trail of all compliance events. Filterable by action type and date range. SHA-256 verified.",
      "tags": [
        "audit",
        "ledger",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Show the audit ledger for NPI 1234567893",
        "List all compliance events for this practice in the last 90 days"
      ]
    },
    {
      "id": "hipaa_sra",
      "name": "Security Risk Assessment",
      "description": "HIPAA-required annual SRA per \u00a7164.308(a)(1)(ii)(A). Scan data auto-fills ~60% of 27 questions. $499 one-time.",
      "tags": [
        "sra",
        "risk-assessment",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Start an SRA for NPI 1234567893",
        "Generate a Security Risk Assessment for my dental practice"
      ]
    },
    {
      "id": "hipaa_may2026",
      "name": "May 2026 Readiness Assessment",
      "description": "Evaluates practice readiness for the updated HIPAA Security Rule effective May 2026. Tracks 13 mandatory requirements.",
      "tags": [
        "may2026",
        "compliance",
        "readiness",
        "hipaa"
      ],
      "examples": [
        "Is NPI 1234567893 ready for the May 2026 HIPAA rule?",
        "Check May 2026 compliance readiness for this practice"
      ]
    },
    {
      "id": "hipaa_policies",
      "name": "HIPAA Policy Generator",
      "description": "Generates all 24 required HIPAA policies as downloadable PDFs, customized to practice specialty, size, and state.",
      "tags": [
        "policies",
        "documents",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Generate HIPAA policies for a 5-person dental practice in California",
        "Create customized HIPAA policy documents for NPI 1234567893"
      ]
    },
    {
      "id": "hipaa_training",
      "name": "Staff HIPAA Training",
      "description": "Assigns role-based HIPAA training modules. 6 modules with quizzes and completion certificates.",
      "tags": [
        "training",
        "staff",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Set up HIPAA training for 3 employees at NPI 1234567893",
        "Assign training modules to our front desk and clinical staff"
      ]
    },
    {
      "id": "hipaa_baa",
      "name": "Business Associate Agreement",
      "description": "Generates HIPAA-compliant BAA for vendor relationships. Can auto-send for signature.",
      "tags": [
        "baa",
        "vendor",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Generate a BAA for our EHR vendor relationship",
        "Create a Business Associate Agreement for NPI 1234567893"
      ]
    },
    {
      "id": "hipaa_breach_check",
      "name": "HHS Breach Database Check",
      "description": "Cross-references practice against 1,045+ HHS OCR breach records. Returns matching breaches with dates, affected individuals, and breach type.",
      "tags": [
        "breach",
        "history",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Has NPI 1234567893 appeared in any HHS breach reports?",
        "Check breach history for this dental practice"
      ]
    },
    {
      "id": "hipaa_intelligence",
      "name": "Compliance Intelligence Briefing",
      "description": "Grade trends, new findings, policy status, training completion, BAA expirations, and breach correlations.",
      "tags": [
        "intelligence",
        "briefing",
        "compliance",
        "hipaa"
      ],
      "examples": [
        "Give me a compliance intelligence briefing for NPI 1234567893",
        "What are the compliance trends for this practice?"
      ]
    },
    {
      "id": "hipaa_threat_intel",
      "name": "Healthcare Threat Intelligence",
      "description": "Recent healthcare-specific threat intelligence from CISA, HHS HC3, FBI, MS-ISAC sources.",
      "tags": [
        "threat",
        "intelligence",
        "security",
        "hipaa"
      ],
      "examples": [
        "What are the latest healthcare cyber threats?",
        "Show recent CISA and HHS HC3 advisories for healthcare"
      ]
    },
    {
      "id": "hipaa_deidentify",
      "name": "PHI De-identification",
      "description": "HIPAA Safe Harbor 18-identifier text redaction per 45 CFR 164.514(b). Free unlimited use.",
      "tags": [
        "deidentification",
        "phi",
        "privacy",
        "hipaa"
      ],
      "examples": [
        "Remove PHI from this clinical note",
        "Redact patient identifiers from this text"
      ]
    },
    {
      "id": "hipaa_phi_check",
      "name": "PHI Detection",
      "description": "Scans text for HIPAA 18 identifiers. Returns yes/no + identifier types detected. Free unlimited use.",
      "tags": [
        "phi",
        "detection",
        "privacy",
        "hipaa"
      ],
      "examples": [
        "Does this text contain PHI?",
        "Check for HIPAA identifiers in this document"
      ]
    },
    {
      "id": "hipaa_reputation",
      "name": "System Reputation Stats",
      "description": "Verified system-wide metrics with SHA-256 signature. Free, no auth required.",
      "tags": [
        "reputation",
        "stats",
        "platform"
      ],
      "examples": [
        "Show HIPAA Agent system reputation stats",
        "How many practices has HIPAA Agent scanned?"
      ]
    },
    {
      "id": "hipaa_state_coverage",
      "name": "State Coverage Map",
      "description": "Scan coverage data per US state.",
      "tags": [
        "coverage",
        "states",
        "platform"
      ],
      "examples": [
        "Show scan coverage for California",
        "Which states have the most scanned practices?"
      ]
    },
    {
      "id": "hipaa_model_insights",
      "name": "Platform Performance Insights",
      "description": "Performance metrics and trend data.",
      "tags": [
        "insights",
        "platform",
        "metrics"
      ],
      "examples": [
        "Show platform performance insights",
        "What are the scan success rates this month?"
      ]
    },
    {
      "id": "hipaa_blockchain_verify",
      "name": "Blockchain Audit Verification",
      "description": "Verifies SHA-256 audit hash against Base L2 blockchain anchor. Free.",
      "tags": [
        "blockchain",
        "verification",
        "audit",
        "hipaa"
      ],
      "examples": [
        "Verify this audit evidence hash",
        "Confirm blockchain timestamp for evidence package"
      ]
    },
    {
      "id": "hipaa_billing_balance",
      "name": "API Credit Balance",
      "description": "Current credit balance, usage, and tier. Free, no auth required.",
      "tags": [
        "billing",
        "credits",
        "api"
      ],
      "examples": [
        "What's my API credit balance?",
        "How many credits have I used this month?"
      ]
    },
    {
      "id": "npi_lookup",
      "name": "NPI Registry Search",
      "description": "Search CMS NPPES registry for US healthcare providers by NPI, name, specialty, city, or state.",
      "tags": [
        "npi",
        "registry",
        "lookup",
        "healthcare"
      ],
      "examples": [
        "Look up NPI 1234567893 in the NPPES registry",
        "Find cardiologists in Sacramento, CA"
      ]
    },
    {
      "id": "book_consultation",
      "name": "Book Free Compliance Consultation",
      "description": "Schedule a free 30-minute HIPAA compliance review. Returns booking link, phone, email.",
      "tags": [
        "consultation",
        "booking",
        "support"
      ],
      "examples": [
        "Book a free HIPAA compliance consultation",
        "Schedule a call to review our compliance posture"
      ]
    }
  ],
  "mcp_server": {
    "url": "https://mcp.hipaaagent.ai/mcp",
    "transport": "streamable-http",
    "tools": 36,
    "authentication": {
      "type": "apiKey",
      "header": "X-API-Key",
      "free_tier": {
        "credits": 500,
        "signup": "https://hipaaagent.ai/developers"
      }
    }
  },
  "pricing": {
    "currency": "USD",
    "payment_method": "PayPal invoice",
    "booking_required": "All paid plans require a consultation first",
    "booking_url": "https://cal.com/hipaa-agent/hipaa-compliance-review",
    "products": [
      {
        "name": "Free Compliance Check",
        "price_usd": 0,
        "billing": "free",
        "description": "83-tool scan + HIPAA Agent Compliance Score\u2122 + 30-min consultation",
        "url": "https://hipaaagent.ai/check"
      },
      {
        "name": "HIPAA Audit & Attestation Report",
        "price_usd": 499,
        "billing": "one-time",
        "description": "22-page signed report with attestation page, audit response readiness, SHA-256 integrity hash"
      },
      {
        "name": "Security Risk Assessment (SRA)",
        "price_usd": 499,
        "billing": "one-time",
        "description": "Annual SRA per \u00a7164.308(a)(1)(ii)(A). 27-question guided assessment, scan data auto-fills ~60%"
      },
      {
        "name": "Concierge HIPAA Compliance",
        "price_usd_monthly": 299,
        "price_usd_annual": 3588,
        "billing": "annually",
        "description": "$299/mo billed annually = $3,588/year. Full managed compliance: monthly scans, SRA, 24 policies, staff training, BAA tracking, evidence packages, unlimited audit reports"
      },
      {
        "name": "HIPAA Remediation Services",
        "price_range_usd": "997-2497",
        "billing": "one-time",
        "description": "Hands-on remediation when human fixes are needed beyond agent capabilities. Vulnerability fixes, policy implementation, staff training delivery"
      }
    ],
    "msp_tiers": [
      {
        "name": "MSP 10+ practices",
        "price_usd_per_practice_monthly": 179,
        "minimum_practices": 10
      },
      {
        "name": "MSP 25+ practices",
        "price_usd_per_practice_monthly": 129,
        "minimum_practices": 25
      },
      {
        "name": "MSP 50+ practices",
        "price_usd_per_practice_monthly": 99,
        "minimum_practices": 50
      }
    ],
    "api_pricing": {
      "free_tier": true,
      "free_credits": 500,
      "credit_packs": [
        {
          "name": "Credit Pack Small",
          "price_usd": 99,
          "credits": 5000
        },
        {
          "name": "Credit Pack Medium",
          "price_usd": 499,
          "credits": 25000
        },
        {
          "name": "Credit Pack Large",
          "price_usd": 1999,
          "credits": 100000
        },
        {
          "name": "Annual API",
          "price_usd": 5000,
          "type": "annual_minimum"
        }
      ],
      "per_call": {
        "hipaa_grade": "$25",
        "hipaa_scan": "$150",
        "hipaa_sra": "$500"
      }
    }
  },
  "contact": {
    "founder": "Farhad Khawar",
    "booking": "https://cal.com/hipaa-agent/hipaa-compliance-review",
    "support": "compliance@hipaaagent.ai"
  }
}