MCP reference / Files
File tools
Two tools. Uploads have no tool at all — the bytes go from the browser straight to storage and never pass through the server, so there is nothing for an agent to call.
How to read this
Each tool below lists its arguments exactly as the input schema declares them — the type, whether it is required, and the permitted values where the schema fixes them. There are no argument descriptions: the schemas carry types, not prose, and inventing a sentence per argument would be writing fiction about a contract.
practiceId is never an argument. It comes from your token, and the write paths strip it if a client sends one anyway.
Every example is a complete tools/call request with this tool's required arguments filled in. Errors are returned inside a 200 response with isError set — see the MCP overview for that envelope, and the full catalogue for every tool at a glance.
Files
Uploads are browser-to-storage and have no tool; these read and remove what is already stored.
get_file
Read a file's metadata with a short-lived signed download URL. Use list_patient_files to find ids.
Arguments
| Tool | Type | Required? |
|---|---|---|
| fileId | string | Required |
Example call
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "get_file",
"arguments": {
"fileId": "0f1c7a2e-...."
}
}
}Result
{
"jsonrpc": "2.0",
"id": 1,
"result": {
"structuredContent": {
"status": 200,
"ok": true,
"data": { "...": "the requested records" }
}
}
}Errors
| Code | Status | When |
|---|---|---|
| validation_failed | 400 | An argument is missing, of the wrong type, or outside its allowed values. |
| not_found | 404 | The id does not exist in your practice. A malformed id looks identical. |
| unauthorized | 401 | The bearer token is missing, invalid or expired. |
delete_file
Permanently delete a file.
Arguments
| Tool | Type | Required? |
|---|---|---|
| fileId | string | Required |
Example call
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "delete_file",
"arguments": {
"fileId": "0f1c7a2e-...."
}
}
}Result
{
"jsonrpc": "2.0",
"id": 1,
"result": {
"structuredContent": {
"status": 200,
"ok": true,
"data": { "...": "the written record" }
}
}
}Errors
| Code | Status | When |
|---|---|---|
| validation_failed | 400 | An argument is missing, of the wrong type, or outside its allowed values. |
| not_found | 404 | The id does not exist in your practice. A malformed id looks identical. |
| unauthorized | 401 | The bearer token is missing, invalid or expired. |
Common questions
Patient records are encrypted in transit and at rest, files are stored privately and served through short-lived signed links, and every change is written to an audit log. Staff accounts sign in with passkeys rather than shared passwords.
Yes. Every list in HyperCRM exports to CSV from the app, and your files can be downloaded at any time. Your practice data belongs to you, and there is no export fee or waiting period — on either plan, during the trial, and after you cancel.
HyperCRM is paid software. Every practice starts with a 30-day free trial of the full Complete plan, with no card required. After that, plans start at €19 and €29 a month excluding VAT, banded by how many practitioners you have. Every price is printed on the pricing page rather than quoted on a call.