Ga Medical Exclusions MCP server

@pipeworx/ga-medical-exclusions

Georgia Department of Community Health (DCH) Office of Inspector General (OIG) List of Excluded Individuals and Entities screening — check a provider by name or NPI against the ~1,377-row current-snapshot list of individuals and entities excluded from Georgia's Medicaid program, the state-level counterpart to the federal HHS OIG LEIE (leie pack) and the sibling of ny-omig-exclusions (New York), ca-medical-exclusions (California), tx-medical-exclusions (Texas), fl-medical-exclusions (Florida) and pa-medical-exclusions (Pennsylvania).

Part of Pipeworx — an MCP gateway connecting AI agents to 1831+ live data sources. This is an independent, unofficial integration — not affiliated with, endorsed by, or published by the upstream provider.

Tools

against the DCH OIG exclusions list. An NPI match is an identification (an exact, provider-specific identifier); a name match — even an exact one — is a candidate lead only, since the list carries no date of birth and most rows carry no business name to disambiguate same-named providers.

• gamedicalcheck_exclusion(name?, npi?, limit?) — screens a provider

list, how many carry an NPI, how many distinct provider types appear, and the oldest/newest sanction effective date. Pass year or startdate/enddate to instead count exclusions whose sanction effective date falls in that range, over the whole list.

• gamedicalexclusion_coverage() — total exclusions currently on the

Auth

Keyless.

Data sources

General — List of Excluded Individuals and Entities, the state's published roster of individuals and businesses excluded from participating in Georgia's Medicaid program under O.C.G.A. §§ 49-4-140 et seq., searchable/downloadable at .

• Georgia Department of Community Health (DCH), Office of Inspector

The download link is NOT stable — resolved fresh every bake

DCH republishes a new document node roughly monthly, and its URL embeds the publication date (e.g. a slug ending in -october-5-2026). scripts/bake-index.mjs fetches the listing page first and extracts the CURRENT download link from it — the same "resolve from the listing page, never guess the filename" discipline scripts/ingest-dmepos.mjs uses for CMS's unstable DMEPOS zip names. Never hardcode the dated URL.

Why this is baked, not a live proxy

Per root CLAUDE.md's standing rule for a table this size, the full list (1,377 rows at capture time) is baked by scripts/bake-index.mjs into src/ga-dch-oig-index-data.ts, registered in workers/gateway/src/pack-baked-indexes.json, uploaded to KV at deploy, and injected into every call as args._bakedIndex — never a static module-scope import (fleet #2754). A missing or malformed injection throws loudly rather than answering "not found" — see src/index.test.ts.

The resolved download is a plain, unauthenticated GET returning an Excel 2007+ (.xlsx) file — no VIEWSTATE, no session, no form replay, simpler than tx-medical-exclusions and even pa-medical-exclusions.

No external XLSX library — hand-rolled, same "no dependencies" discipline

An .xlsx is a zip of XML parts. bake-index.mjs reuses scripts/ingest-dmepos.mjs's minimal pure-Node zip reader (Node's built-in zlib.inflateRawSync over a hand-walked central directory — no unzip CLI, no npm package), resolves the workbook's first sheet dynamically via xl/workbook.xml + xl/_rels/workbook.xml.rels (Excel reassigns sheetN.xml numbers when tabs are reordered, so this is never assumed), decodes xl/sharedStrings.xml for text cells, and walks / elements for the 9 columns this file uses.

SANCDATE is three different raw shapes in the same column

Shortened. The full README is on GitHub.