Oig Corporate Integrity MCP server

@pipeworx/oig-corporate-integrity

HHS-OIG Corporate Integrity Agreements — does this healthcare company or individual have a Corporate Integrity Agreement (CIA), since when, what obligations does it impose, and what is its current status? A CIA is a different condition from an exclusion (see the leie and ny-omig-exclusions packs): an entity under a CIA is still participating in Medicare/Medicaid, under binding compliance obligations OIG negotiated instead of seeking exclusion.

Part of Pipeworx — an MCP gateway connecting AI agents to 1764+ live data sources. This is an independent, unofficial integration — not affiliated with, endorsed by, or published by the upstream provider.

Tools

HHS-OIG CIA roster. An exact name match is the strongest signal; a normalized-name or token match is returned as a labelled candidate, since CIA entity names are frequently compound (a company plus named co-signers, e.g. "SNAP Diagnostics, LLC and Gil Raviv"). For the best match, fetches the entity's own detail page live to return the effective date, term/duration, settlement amount and the agreement PDF URL — none of that is baked, so it is never stale. Returns found: false with the list's as-of date and total agreement count when no match exists.

• oigciacheck(name, limit?) — checks an entity against the current

matching as oigciacheck) or takes a documenturl directly, fetches the agreement PDF live** from oig.hhs.gov, extracts its text, and reports which of six obligation categories (Board Resolution, Independent Review Organization/IRO reviews, Compliance Officer/Committee, Annual or Implementation reporting, a disclosure program, excluded-persons screening) actually appear in the text, each with a short excerpt. Not every CIA includes every category — a sole-individual CIA typically has no Board Resolution clause — and some older, fully closed agreements have no PDF posted at all, reported as found: false, not an error.

• oigciaobligations(name?, document_url?) — resolves the entity (same

status (Effective / Suspended / Closed / Refused). Fast (no live fetch), but carries only what the list card shows — call oigciacheck on a specific entity for effective date, term and the agreement document.

• oigcialist(status?, limit?, offset?) — browses the baked CIA list by

Auth

Keyless.

Data sources

— the paginated, filterable CIA roster (339 agreements as captured, 20 per page). No JSON/REST endpoint and no bulk CSV/Excel export exist.

(/compliance/corporate-integrity-agreements/browse-cias//) — effective date, term, settlement amount, category/tags, and the agreement PDF's URL. Fetched live, per call, never baked.

• Each agreement's own detail page

text PDFs, extracted with shared/src/pdf-text.ts.

• The agreement PDF itself (oig.hhs.gov/documents/cias//.pdf) —

Why only the LIST is baked

Root CLAUDE.md's standing rule for this shape: a baked table never sits in gateway module scope. scripts/bake-index.mjs crawls all 17 pages of the browse list and bakes only the entity name, detail-page path, the status badge/date shown on the list card, location and report type — into src/oig-cia-index-data.ts, registered in workers/gateway/src/pack-baked-indexes.json, uploaded to KV at deploy, and injected as args._bakedIndex (fleet #2754 pattern, same as south-dakota-code / ny-omig-exclusions / usgs-mineral-commodities). A missing or malformed injection throws loudly rather than answering "no CIA found" — see src/index.test.ts.

Shortened. The full README is on GitHub.