Back to Browse

Openfda MCP Server

Developer ToolsLow Risk10.0MCP RegistryRemote
Free

Server data from the Official MCP Registry

OpenFDA MCP — wraps the openFDA API (free, no auth required)

About

OpenFDA MCP — wraps the openFDA API (free, no auth required)

Remote endpoints: streamable-http: https://gateway.pipeworx.io/openfda/mcp

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 0 medium validity signals). No known CVEs in dependencies. Imported from the Official MCP Registry. Trust signals: trusted author (201/201 approved). 1 finding(s) downgraded by scanner intelligence.

6 tools verified · Open access · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-pipeworx-io-openfda": {
      "url": "https://gateway.pipeworx.io/openfda/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

OpenFDA — FDA Drug, Device, and Food Data

The U.S. Food and Drug Administration's open data platform. Adverse event reports (FAERS), drug approvals, drug labels, recalls, device reports, food recalls, tobacco enforcement. The official source for what's been reported to or by the FDA. Free, no auth required (rate-limited).

Part of Pipeworx — an MCP gateway connecting AI agents to 1476+ live data sources.

Why this matters for AI agents

Drug-safety questions resolve here. Adverse event volumes, label changes, approval timelines, recall posture — all structured. For the full drug picture, pair with RxNorm (canonical IDs) and ClinicalTrials.gov (trials).

Common flows:

  • Adverse events for a drug. "Reports for Ozempic" → fda_drug_events({query: "ozempic"}) → individual safety reports + counts.
  • Bucket reactions. "Top reactions reported for Ozempic" → fda_event_counts({query: "ozempic", count_field: "patient.reaction.reactionmeddrapt.exact"}) → MedDRA-coded counts.
  • Approval history. "When was Ozempic approved and for what?" → fda_drug_approvals({query: "ozempic"}).
  • Recalls. "Any Ozempic recalls?" → fda_drug_recalls({query: "ozempic"}).
  • Label content. "What does the FDA label say about contraindications?" → fda_drug_labels({query: "ozempic"}).

Used by the pharma_drug_profile and pharma_safety_report compounds.

Auth

Public, no key required. Anonymous limit is ~240 requests/min and 1,000/day, counted per IP — so every caller sharing an egress address shares one 1,000/day budget, not one each.

api.fda.gov runs on api-umbrella, the same stack as api.data.gov, so an api.data.gov key authenticates it and lifts the daily limit to 120,000. Pipeworx injects a platform key (PLATFORM_DATAGOV_KEY); bring your own with _apiKey and your calls draw on your quota instead. Register free at https://open.fda.gov/apis/authentication/.

A key that is rejected or revoked does not fail the call — the pack retries once anonymously, since openFDA is fully usable without one.

Datasets

DatasetEndpoint familyCoverage
Drug adverse events (FAERS)fda_drug_events1968-present, ~20M+ reports
Drug approvalsfda_drug_approvals1939-present (NDA/BLA/ANDA)
Drug labelsfda_drug_labelsCurrent SPL labels
Drug recallsfda_drug_recallsClass I/II/III enforcement actions
Device adverse events(separate tools)MAUDE database
Food recalls(separate tools)FSIS + FDA recalls

Common pitfalls

  • Reports are not unique patients. A single hospitalization can produce multiple FAERS reports. The total field is reports, not adverse-event-suffering-individuals.
  • Causality not implied. A FAERS report links a drug to an event temporally; it does not prove the drug CAUSED the event. Use language carefully.
  • Brand vs generic naming. Searching "ozempic" finds Ozempic-tagged reports. Searching "semaglutide" finds reports for any semaglutide product. They can differ — the user's intent determines which to search.
  • Query syntax is FDA's, not ours. OpenFDA uses Lucene-style search with field-specific queries. Pipeworx tool descriptions show the syntax. Quotation marks matter.
  • Reaction names use MedDRA word order. Natural phrasing can differ from the preferred term stored by FDA — ISCHAEMIC OPTIC NEUROPATHY is filed as OPTIC ISCHAEMIC NEUROPATHY. Reaction-filtered tools retry two- and three-word phrases in alternate word orders and disclose the resolved term in reaction_resolved.
  • Reaction filters match one whole preferred term. They are not substring or token matches, so NEUROPATHY returns only reports filed under that exact term (~1,700) rather than every term containing the word (~117,000). This is deliberate: a disproportionality table needs one case definition, not an ad-hoc grouping. To find the terms FDA actually stores, count on patient.reaction.reactionmeddrapt.exact.
  • An unmatched term is reported, not silently zeroed. When no word order matches, tools return reaction_resolution: "not_a_meddra_preferred_term" with a hint. Treat that as "the filter missed," never as "no reports exist."
  • Lag from event to report. FAERS reports lag the event by months — sometimes years. The "last 30 days" view is misleading; recent counts will keep growing as reports flow in.

Quick Start

Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):

{
  "mcpServers": {
    "openfda": {
      "url": "https://gateway.pipeworx.io/openfda/mcp"
    }
  }
}

What this endpoint actually serves

tools/list at https://gateway.pipeworx.io/openfda/mcp returns the tools in the table above plus the shared Pipeworx meta-toolsask_pipeworx, discover_tools, search_within, remember/recall and the rest of the gateway-wide set. So the tool count you see is larger than this table: a single-pack endpoint currently lists roughly 30 shared tools alongside the pack's own. The connection's initialize response states its exact scope, and is the authoritative answer for a given day.

This is deliberate, not multiplexing by accident. The meta-tools are what let a scoped connection answer a question this pack does not cover — via ask_pipeworx, which routes across the whole catalog — without you adding a second MCP server. There is currently no way to mount a pack endpoint without them; if the extra schemas cost you more context than the routing is worth, connect to the full gateway once rather than to several pack endpoints.

Or connect to the full Pipeworx gateway to get every pack's tools listed directly, instead of just this one's:

{
  "mcpServers": {
    "pipeworx": {
      "url": "https://gateway.pipeworx.io/mcp"
    }
  }
}

Both URLs reach the same gateway and the same 1476+ data sources. The only difference is which pack's tools are listed directly; ask_pipeworx reaches all of them from either one.

Using with ask_pipeworx

Instead of calling tools directly, you can ask questions in plain English — this works on the pack endpoint above as well as on the full gateway:

ask_pipeworx({ question: "your question about Openfda data" })

The gateway picks the right tool and fills the arguments automatically.

More

License

MIT

Reviews

No reviews yet

Be the first to review this server!