athenahealth launches athenaPatient MCP server so patients can connect their health records to Claude

athenahealth, which sells electronic health record and practice management software to ambulatory practices in the United States, announced on November 2 a server called athenaPatient MCP. Built on the open Model Context Protocol, it lets patients link the official record kept by their athenahealth practice to Anthropic's Claude and ask questions about it in conversation.

How the connection works

According to HIT Consultant, patients enable the connector in their Claude settings and then sign in with the credentials they already use for the athenahealth patient portal. They choose which categories of data Claude may see, such as lab results, vital signs, medications, problem lists, immunizations, visit summaries, imaging reports, allergies, procedures and care plans, and they can withdraw the authorization whenever they want. Records are not loaded in advance: Claude fetches them only when a question calls for that context.

athenahealth says portal credentials are not passed to the AI and that data is encrypted in transit, as summarized in coverage of the launch. HIT Consultant reports that the service is live nationwide for Claude Pro and Max subscribers, and that retrieved information is limited to the active session under zero-retention and no-training commitments. Paul Brient, the company's chief product and operations officer, called the launch a milestone for bringing AI into the patient experience responsibly. He told Fierce Healthcare that Claude is the first assistant connected but is not meant to be the only one, and that athenahealth intends to work only with assistants that do not train on patient data, according to a summary of that interview.

Privacy limits to keep in mind

The protections described are contractual and technical commitments from the companies; none of the coverage reviewed describes an independent audit. A guide published by AI Learning Guides, citing guidance from the US Department of Health and Human Services, notes that HIPAA does not restrict what a patient or the app they choose does with records released under the right of access, so the copy held in a consumer AI account generally falls outside HIPAA. The same guide says the no-training term reported by trade press was not visible in the press release it reviewed, and that the tool does not reach every athenahealth patient.

Context

The launch follows similar moves across the sector. Anthropic already offered a HealthEx connector for Claude, and Oracle's patient portal lets patients query their records with OpenAI models. HIT Consultant cites an August Pew Research Center survey in which 34% of US adults said they had used AI assistants for health purposes. A summary built from an incomplete chart can still sound confident, the guide warns.