---
name: hi-doctor-patient-integration
description: 'Connect a patient-authorised Hi Doctor workflow: choose product MCP
  or patient REST, discover permitted tools, guide confirmed questionnaires and recover
  safely.'
public: true
compatibility: An MCP client with Streamable HTTP and OAuth, or a secure application
  using the patient REST API.
metadata:
  author: Hi Doctor
  version: '2026-11-04'
---

# Hi Doctor patient integration

Use this skill only for supported patient tasks. It supplies instructions, not credentials or permissions. An EU-licensed doctor decides on treatment; the integration cannot approve a consultation, prescribe or change a dose.

## Service facts

- Hi Doctor operates across the whole European Union: residents of all 27 EU member states can use the service, and every consultation is reviewed by an EU-licensed doctor. Country list: [countries](https://docs.hi-doctor.ai/essentials/regions.md).
- Every consultation is reviewed in full by an EU-licensed doctor, who decides on medical grounds only. No algorithm, assistant or API call approves a consultation, issues a prescription or changes a dose.
- If the doctor prescribes, the patient receives a prescription they can use at a pharmacy: an electronic prescription where the pharmacy's country supports it, otherwise a signed prescription document. Hi Doctor does not sell, stock or ship medicine; the pharmacy dispenses it and charges its own price.
- The service is available in eight languages: English, Spanish, German, Dutch, Italian, French, Portuguese and Chinese.
- Hi Doctor covers twelve consultation categories.

## Prerequisites and interface

- Read the [agent guide](https://docs.hi-doctor.ai/ai/index.md) and obtain the patient's permission for the requested task. New to MCP: [what is MCP](https://docs.hi-doctor.ai/ai/what-is-mcp.md).
- Product MCP: `https://mcp.hi-doctor.ai/mcp`, with that account's OAuth grant. Discover resource and authorisation metadata, use the deployed registration mechanism and PKCE S256, let the patient sign in and consent, then `initialize` and `tools/list`.
- Docs search: `https://docs.hi-doctor.ai/mcp`, public-document search only; no patient records.
- REST: `https://api.hi-doctor.ai`, with a patient JWT and `X-Brand-Slug: hi-doctor`. Register, let the patient verify their email, then obtain tokens through a secure application. Never collect credentials or verification codes in chat. Do not interchange REST and MCP tokens.
- Account permission does not replace the integrator's legal basis and safeguards for health-data processing. Keep health records and document links out of shared logs.

## Task sequence and human stops

1. Use the account-specific tool list and schemas and make the minimum permitted read for the patient's request. A profile read is `hidoctor_profile_get` with `{}`.
2. For a questionnaire, list categories, ask the patient to choose, then start or resume. Ask each returned question and send the patient's answer using stable option values.
3. Review the answers with the patient. Correct only at their request; obtain confirmation before submitting. `hidoctor_questionnaire_submit` and other consequential tools return an [approval link](https://docs.hi-doctor.ai/mcp/approvals.md): the patient signs in and approves the exact action, then poll `hidoctor_operation_get` and commit with the same arguments. A committed submission is `submitted`, `ineligible` or `covered_by_active_plan`. An `ineligible` result ends the attempt; never adjust answers to bypass it.
4. Follow the [workflows](https://docs.hi-doctor.ai/mcp/workflows.md) for plan coverage or a hosted checkout. Obtain explicit confirmation for charge or plan changes. The patient completes payment on Stripe. A link is not a receipt.
5. Hand off to the doctor, who reviews the consultation after submission. Account verification, identity steps, taking photographs, recovery and permission approval remain human steps; uploads go through the connector's protected upload where the client supports it, otherwise the website. Any prescribed medicine is obtained from a pharmacy and paid for separately.

Follow the [agent quickstart](https://docs.hi-doctor.ai/ai/quickstart.md). Do not infer a universal submission and payment order.

## Recovery

For 401, renew authentication through the client once; for 403, stop and resolve permissions. Correct invalid inputs without guessing clinical answers. Honour valid Retry-After or wait_seconds hints; retry safe reads only within a bounded budget. On timeout or 5xx after a write, resend the same Idempotency-Key where the endpoint documents it, or look the key up; elsewhere reconcile state or ask support before repeating it. See [safe retries](https://docs.hi-doctor.ai/api-reference/idempotency.md).

`hidoctor_checkout_status` can complete a paid session; do not treat it as a harmless polling read. `hidoctor_messages_get_thread` only reads. Follow the [error guide](https://docs.hi-doctor.ai/api-reference/errors.md), [REST authentication](https://docs.hi-doctor.ai/api-reference/authentication.md) and [permissions](https://docs.hi-doctor.ai/mcp/permissions.md).

For list tools follow returned continuation fields; REST pages use endpoint-specific envelopes and next URLs. Validate origin and path before forwarding a bearer token. Consult the [REST quickstart](https://docs.hi-doctor.ai/api-reference/quickstart.md), [public schema](https://docs.hi-doctor.ai/api-reference/openapi.json) and [API changelog](https://docs.hi-doctor.ai/api-reference/changelog.md).

## Rules an assistant must follow

- Never invent, assume or infer a medical answer. "I don't know" is a real answer: ask the patient to pick the closest option rather than guessing for them.
- Never give medical advice and never suggest a medication or a dose. An EU-licensed doctor decides those.
- If a questionnaire returns `ineligible`, say so plainly. Do not retry with altered answers.
- Before anything that costs money or cancels a plan, state exactly what will happen and get an explicit yes.
- Cancellation takes effect at the **end of the paid period**, not immediately. Say so.
- An early order is irreversible: it creates the renewal consultation immediately and uses up the period's one early order. Explain that and get an explicit yes.
- Prescription and invoice links are medical documents. A `signed_redirect` link opens without signing in: give it only to the patient, never repeat it anywhere shared.
- Send option `value`s, not the labels shown to the patient. Labels are translated, values are stable.
- Never ask for card details. Payment happens on Stripe's hosted checkout via a link.
- On severe or sudden symptoms (chest pain, difficulty breathing, severe allergic reaction, suicidal thoughts), stop and direct the patient to their local emergency number.

agent-resources-sha256: bf3d60c680eddc736f2cecea06f22c74928da119cb9e5a11eb2396a8b66c645a