Privacy notice: Mediora MCP server

Effective 24 October 2026 · applies to mcp.mediora.ai

This notice covers the Model Context Protocol server at mcp.mediora.ai. It supplements the Mediora Privacy Policy, which remains the main document. The server is operated by SLAtech Ltd (company number 515518926, HaShayetet 8, Rishon LeZion, Israel), the same controller as the Mediora website.

Catalog tools need no personal data

The catalog endpoint https://mcp.mediora.ai/mcp/catalog and the catalog tools on /mcp require no account, no sign-in and no API key. A tool call carries only the tool name and its arguments: the name or code of a test, panel, condition or symptom, a search phrase, and a language code. The catalog does not need personal or health information, so please do not put it into the arguments.

What the server keeps

Who else sees the traffic

Requests pass through Cloudflare (content delivery and DDoS protection), which is listed as a processor in Section 5 of the Privacy Policy. The AI assistant that calls the server (Claude, ChatGPT or another client) is run by its own provider under that provider's privacy policy. Mediora does not receive your conversation, only the tool calls the assistant chooses to make.

Tools that need a Mediora sign-in

The general endpoint /mcp also has tools that work with a Mediora account: an account check, report history, marker trends and lab-report analysis. They need your Mediora sign-in token, process your health data, and are covered by the main Privacy Policy. The catalog endpoint does not have these tools.

Not medical advice

Catalog content is general information written with the help of AI and not reviewed by a physician. It is not a diagnosis or a treatment recommendation.

Contact

Questions and requests: support@mediora.ai.