Simplepractice MCP server

simplepractice-mcp

MCP server for the SimplePractice Client Portal — the side a practice's clients log into, not the clinician side. Appointments, billing, paperwork, and announcements, read over the portal's own JSON:API.

Developed and maintained by AI (Claude Code). Use at your own discretion.

What it reads

Everything is read-only. Cancelling, signing, and paying happen in the portal.

The reads that answer with a SimplePractice record rather than a projection — appointments, billing items, the billing overview, one document request, announcements — take a view. It defaults to compact, which returns the slim projection where this server has one and otherwise drops logo and avatar URLs a model cannot see; view: "full" returns the record untouched. simplepracticelistdocuments deliberately takes none: what it returns is the file reference, and a shared scan is a .jpg.

Setup

npm install -g simplepractice-mcp

There is nothing to configure. The practice comes from your sign-in link.

Signing in

The Client Portal has no password. SimplePractice emails a one-time link (or a 6-digit PIN); you trade it for a session cookie:

1. Open the email your provider sent, copy the link.
2. simplepracticeverifysignintoken { link } — pass the whole link.

The link is https://.clientsecure.me/sign-in/token#, so one paste carries both halves of what the server needs: the token is the # fragment, and the host names the practice. Nothing is hardcoded, and the stored session remembers the practice for every later run — simplepracticesessionstatus reports which practice is in play and whether it came from a link, the environment variable, or the saved session.

To have a fresh link sent rather than using one you already have, name the practice once:

simplepractice_request_sign_in_link { email, practice: "achievebalancetherapy", confirm: true }

practice can be omitted whenever the server already knows the practice — from an earlier sign-in, or from SIMPLEPRACTICE_PRACTICE.

Two sign-in links name no practice, and fall back to whichever one is already known: the mobile-app variant SimplePractice sends (https://clientsecure.me/client-portal-api/sign-in/token#, pointed at the bare apex), and a bare token pasted without its link. A link on any host outside *.clientsecure.me is never adopted — the token is not sent there.

Shortened. The full README is on GitHub.