BioMCP
Unified biomedical research gateway covering PubMed, ClinicalTrials.gov, UniProt, and related sources with one grammar.
Delv Safety Grade: B
Score 74/100 · assessed 2026-04-28
BioMCP is a read-only research aggregator maintained by GenomOncology, a healthcare IT company with domain expertise in oncology informatics. The server queries public biomedical databases (PubMed, ClinicalTrials.gov, UniProt) without requiring API keys or credentials, which limits attack surface significantly. Distribution via PyPI as biomcp-cli follows standard Python packaging practices with uv tool installation. The maintainer is a legitimate mid-size organisation rather than a solo developer, providing reasonable bus factor protection. Permissions are strictly read-only network calls to public APIs. Transparency is adequate with open source code and documentation at biomcp.org, though the repository shows moderate rather than intensive community engagement. No security incidents are known. The narrow scope and read-only nature make this a relatively low-risk addition for biomedical research workflows.
Lethal Trifecta (prompt-injection exposure)
TWO OF THREESame.
Green flags
- Read-only queries to public databases, no write operations or credentials
- Domain-specific expertise from healthcare IT company shows in design
- Standard PyPI distribution with uv tool install, no custom scripts
- No API keys required, reducing credential exposure risk
- Unified interface reduces complexity vs. managing multiple API clients
Red flags
- GenomOncology is smaller vendor, less scrutiny than major tech companies
- Repository shows limited community contributions beyond core maintainer
- No explicit security policy or vulnerability disclosure process visible
Permissions requested
Install
uv tool install biomcp-cli
Review
Install this if you regularly search biomedical databases and want Claude to handle the query syntax for you. The unified interface across PubMed, ClinicalTrials, and UniProt is genuinely useful for exploratory research. Skip it if you're outside life sciences or need write access to these databases.
Good at
- Zero configuration: no API keys, no credentials, just install and go.
- Unified query grammar across PubMed, ClinicalTrials, UniProt, and others saves you learning multiple syntaxes.
- Handles follow-up queries well, so you can chain searches across databases in one conversation.
- Built by a genomics company, so the tool understands real research workflows.
Watch out
- Read-only: you can't save searches, submit data, or interact with the databases beyond querying.
- No visible rate-limiting, so you might hit PubMed's throttle without warning.
- Doesn't cache results, meaning repeated queries re-fetch from upstream APIs.
- Too specialised for anyone outside biomedical research - the databases it covers are niche.
Use cases
- clinical trial lookups
- gene variant research
- literature review
- drug target analysis
Getting started
Works with
Similar MCPs
- Brave SearchGive Claude real-time web search via the Brave Search API. The fastest way to add up-to-date knowledge without paying for Perplexity.
- DuckDuckGo MCPWeb search through DuckDuckGo with built-in rate limiting, SafeSearch, and content fetching, no API key required.
- Kagi SearchPrivacy-focused search via Kagi. Great if your team already pays for Kagi and wants Claude to use the same backend.
- DelvSearch the Delv AI tools, MCP, and Skills directory directly from inside your agent. Ask 'what's a good MCP for databases?' in Claude Desktop and get editorial picks, not a random link dump.