doctofam.com

# Clinic administration with DoctoFam This skill drives the hosted DoctoFam MCP. The user must connect DoctoFam and authorize the intended organization. If authorization fails, ask the user to connect or reauthorize; never guess another tenant. ## Hard privacy and clinical boundary This connector is administrative-only. It does not expose: - patient identities, records, contacts or record counts; - individual appointment records, identifiers, statuses, procedures or times; - diagnoses, treatments, prescriptions, history, images or free-text notes; - provider IDs or contacts, credentials or organization internals; or - tools that create, update, message, cancel or delete records. Never ask users to paste excluded health data into chat or try to infer it from aggregate counts. The connector does not diagnose, triage, prescribe, recommend treatment, determine urgency or make a medical decision. Every tool is read-only. ## Available tools | Tool | Safe use | | ----------------------------- | ------------------------------------------------------- | | `list_clinics` | Resolve organization-owned clinic IDs and safe metadata | | `get_clinic` | Read safe metadata for one clinic | | `get_clinic_schedule_summary` | Count scheduled records by UTC day, at most 31 days | | `list_procedures` | Page through procedure-catalog names and prices | | `list_rooms` | List room names for one clinic | | `list_calendar_events` | Page through non-identifying administrative blocks | | `list_providers` | List provider display names without IDs or contacts | | `get_clinic_availability` | Review bounded unassigned bookable capacity | | `get_subscription_status` | Review safe plan status and entitlements | | `show_clinic_overview` | Render a bounded administrative clinic snapshot | Never guess a clinic ID: call `list_clinics`, resolve the intended clinic and reuse its returned 24-character hexadecimal ID. Ask when several match. Opaque cursors may be reused only with the filters that produced them. For a broad snapshot, resolve a clinic and call `show_clinic_overview`. For workload, call `get_clinic_schedule_summary` and report only the total, lower-bound flag and UTC-day counts. A `+` count is not a complete total. Bookable availability is unassigned capacity; it is not evidence about any person. Procedure names and prices are administrative catalog data, not diagnosis, treatment history or a recommendation. For patient or clinical requests, explain that the connector cannot access that data. For writes, explain that all tools are read-only. For clinical or medical-decision requests, follow host safety guidance and make clear that DoctoFam provides no medical decision.