https://mcp.hi-doctor.ai/mcp or the patient REST API at https://api.hi-doctor.ai. Both act only with the patient’s own sign-in and approved permissions, and an EU-licensed doctor makes every medical decision. Start with the agent quickstart, then follow the ten safety rules on this page.
Last reviewed: 2026-11-04
What is Hi Doctor?
Hi Doctor is an online medical consultation service. Hi Doctor operates across the whole European Union: residents of all 27 EU member states can use the service, and every consultation is reviewed by an EU-licensed doctor. The full country list is on countries. Some treatments are limited to specific countries by local rules. Every consultation is reviewed in full by an EU-licensed doctor, who decides on medical grounds only. The full statement is on safety. If the doctor prescribes, the patient receives a prescription they can use at a pharmacy: an electronic prescription where the pharmacy’s country supports it, otherwise a signed prescription document. How it works describes the whole path.Which interface should an agent use?
MCP OAuth tokens and REST JWTs are different credentials: never send one to the other interface. If you are new to MCP, read what MCP is. To compare the two for a product, read integration options.
How does an agent start?
- Read the public connection instructions and complete the patient’s sign-in and consent.
- List the tools the connection offers. The catalog depends on the approved scopes.
- Make the smallest read that answers the patient’s request, for example the profile.
Where must a person act?
Some steps belong to the patient or the doctor and can never be done by an agent.
A submitted questionnaire or a checkout link does not mean treatment has been approved.
Safety rules
- Never invent, assume or infer a medical answer. “I don’t know” is a real answer: ask the patient to pick the closest option rather than guessing for them.
- Never give medical advice and never suggest a medication or a dose. An EU-licensed doctor decides those.
- If a questionnaire returns
ineligible, say so plainly. Do not retry with altered answers. - Before anything that costs money or cancels a plan, state exactly what will happen and get an explicit yes.
- Cancellation takes effect at the end of the paid period, not immediately. Say so.
- An early order is irreversible: it creates the renewal consultation immediately and uses up the period’s one early order. Explain that and get an explicit yes.
- Prescription and invoice links are medical documents. A
signed_redirectlink opens without signing in: give it only to the patient, never repeat it anywhere shared. - Send option
values, not the labels shown to the patient. Labels are translated, values are stable. - Never ask for card details. Payment happens on Stripe’s hosted checkout via a link.
- On severe or sudden symptoms (chest pain, difficulty breathing, severe allergic reaction, suicidal thoughts), stop and direct the patient to their local emergency number.
Key terms
How should an agent recover and handle sensitive data?
If a write times out, its outcome is uncertain. On the endpoints that document it, resend the sameIdempotency-Key or look the key up before doing anything else; the write then runs at most once. Elsewhere, read the current state with a documented safe operation, or ask support before repeating it. See the error and retry guide.
Authorised responses can contain health records or document links that the integrator and its model provider can see. Use only the data needed for the task, and keep it out of shared logs and unrelated prompts. OAuth consent alone does not meet every requirement for processing health data. Read MCP security and data and consent.
Machine-readable resources
- Task index: small entry point with links to the main guides.
- Integration context: selected English integration guidance, without the health library or blog.
- Capability skill: prerequisites, workflow and safety instructions. It grants no permissions.
- Public OpenAPI specification: request and response details.
- API changelog and MCP changelog: changes to each interface.
Frequently asked questions
Can an AI agent prescribe medicine through Hi Doctor?
No. Every consultation is reviewed in full by an EU-licensed doctor, who decides on medical grounds only. No algorithm, assistant or API call approves a consultation, issues a prescription or changes a dose.Which countries can patients use Hi Doctor from?
Hi Doctor operates across the whole European Union: residents of all 27 EU member states can use the service, and every consultation is reviewed by an EU-licensed doctor.What is the difference between the product MCP and the docs search MCP?
The product MCP acts on one patient’s account after that patient signs in and approves permissions. The docs search MCP only searches public documentation and cannot read or change any account.Does installing the Hi Doctor skill give an agent access to an account?
No. The skill is a set of instructions. Access comes only from the patient’s own sign-in and the permissions they approve.Can an agent submit a questionnaire or cancel a plan on its own?
No. Consequential tools return an approval link first. The patient signs in on Hi Doctor and approves the exact action, and only then can the agent commit it.What should an agent do when a questionnaire returns ineligible?
Tell the patient plainly and explain the message the tool returned. Do not change the answers and submit again.Can an agent pay for a consultation?
No. The patient opens a payment link and pays on Stripe’s hosted page. An agent never asks for or handles card details.Should an agent use MCP or the REST API?
Use the product MCP when an AI assistant acts for a patient in a chat. Use the REST API when you build your own application with its own screens and token handling.Next steps
- Agent quickstart: connect, list tools, read the profile and guide a questionnaire.
- What is MCP?: the protocol behind the Hi Doctor connector, in plain terms.
- Workflows: patient tasks step by step, including approval links.
- Approval links: how a patient approves an action before it runs.