Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/chrischall/simplepractice-mcp/simplepracticenpx skills add chrischall/simplepractice-mcp --skill simplepracticegit clone --depth 1 https://github.com/chrischall/simplepractice-mcpWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00078 | $0.00862 |
| Opus 5 | $0.00039 | $0.00431 |
| Sonnet 5 | $0.00016 | $0.00172 |
| Haiku 4.5 | $0.00008 | $0.00086 |
Grade A, and why
simplepractice scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
`simplepractice-fpx` does the same reads with `curl` and no server, for How it starts
The opening of the file, as written. The whole thing — 75 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SimplePractice Client Portal
simplepractice-mcp reads the Client Portal a practice gives its clients —
the patient side, not the clinician side. It is read-only: nothing here
cancels an appointment, signs a form, or pays a bill.
Signing in
The portal has no password. SimplePractice emails a one-time link (or a 6-digit PIN), and that is the only way in.
simplepractice_session_status— check first; a session persists between runs, so most of the time there is nothing to do.simplepractice_request_sign_in_linkwith the user's portal email. It is confirm-gated because it sends a real email and the endpoint is rate-limited per address and per IP — a retry loop locks the user out of the only auth path there is. Ask before sending, and never send twice.- The user opens the email and gives you the link. Pass it whole to
simplepractice_verify_sign_in_token— it takes the token out of the fragment itself. Tokens are single-use and last 24 hours.
SIMPLEPRACTICE_PRACTICE must name the practice's portal — the slug or the
full <practice>.clientsecure.me host, from the link the provider emailed.
If it is unset, every tool says so on its first call.
There is no refresh token. When a session lapses the tools say to sign in again; that means another email.
Reading
simplepractice_get_account— the practice, the current client, and the clients this login covers. Start here: one portal login can act for several people (a parent for two children), so confirm whose record you are about to report on before you report on it. It also returns the practice's real cancellation policy and the client's feature permissions.simplepractice_list_appointments—status: "scheduled"for confirmed and upcoming,"requested"for ones the practice has not confirmed yet.simplepractice_list_document_requests— paperwork.outstandingOnly: trueanswers "is anything waiting for me?", which is the usual question.simplepractice_get_billing_overview— balance due and per-category counts. Cheaper than listing the billing collections to find out they are empty.simplepractice_list_billing_items— invoices, statements, superbills (the receipt to claim out-of-network insurance), receipts, or account history. Pages by cursor: pass the returnednextCursorback asbefore.simplepractice_list_payment_methods,simplepractice_list_documents,simplepractice_list_announcements.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 75 lines · 78 tokens per session scan A a447d4852e35
simplepractice is a skill published in the GitHub repository chrischall/simplepractice-mcp (0 stars, last pushed 2d ago), licensed MIT. It adds 78 tokens to every session and 862 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
twitter-reader
Read Twitter/X for financial research using opencli (read-only). Use this skill whenever the user wants to read their Twitter feed, search for financial tweets, view bookmarks, look up user profiles, or gather market sentiment from Twitter/X. Triggers include: "check my feed", "search Twitter for", "show my…
chenhao-limit-up
Use when evaluating A-share limit-up (涨停板) setups through Chen Hao's sentiment and momentum lens: market emotion cycles, board strength, follow-through, and short-term aggressive momentum trading.
copy-trading-solana
Copy trade Solana wallets - mirror trades automatically.
southwest
Search Southwest Airlines fares and points pricing via Patchright browser automation. SW is not in any GDS or API. Covers all fare classes, Companion Pass value, and fare drop monitoring.
alpaca-trade-api-sdk
Integrate and build on the @alpacahq/alpaca-trade-api TypeScript SDK for the Alpaca Trading and Market Data APIs (the unified Alpaca client, ergonomic order builders, normalized market-data shapes, pagination, typed errors, resilience, and real-time streaming). Use when writing or reviewing code that imports…
alphagbm-greeks
Greeks dashboard for any option contract or multi-leg position. Covers first-order Greeks (Delta, Gamma, Theta, Vega, Rho) and second-order Greeks (Charm, Vanna, Volga). Returns individual and position-level Greeks with scenario heatmaps. Use when: checking option sensitivities, managing position risk, understanding…