How to Use the Frontier HSA MCP Server

Frontier HSA provides a remote MCP (Model Context Protocol) server that lets supported AI assistants and MCP-compatible clients interact with your health spending account directly. Once connected, you can manage your HSA through natural conversation.

What can you do with the MCP server?

• Check your profile, benefit class, and bank account details
• Submit new claims by uploading and analyzing receipt files
• View claim status and history with filters (under_review, processing_payment, denied, paid)
• See total reimbursements and estimated tax savings for the year
• Withdraw pending claims you no longer want processed
• Read and manage notifications

The server uses OAuth 2.1 with PKCE for authentication.

What Is MCP?

The Model Context Protocol is an open standard that lets AI assistants connect to external tools and data sources. Think of it as a universal plug that lets your AI talk to Frontier HSA on your behalf.

Getting Started

1. Find the Server URL

The Frontier HSA MCP server is available at:

https://mcp.frontierhsa.ca/mcp

The OAuth 2.1 metadata endpoint for discovery is at:

https://mcp.frontierhsa.ca/.well-known/oauth-authorization-server

2. Connect Your MCP Client

Supported MCP clients handle the OAuth 2.1 flow through their own connection UI or bridge tooling. Add the Frontier HSA server to your client's configuration so it is available in every session.

Claude Desktop — add to claude_desktop_config.json:

{
  "mcpServers": {
    "frontier-hsa": {
      "url": "https://mcp.frontierhsa.ca/mcp"
    }
  }
}

Claude Code — add to your user context so it's always available:

claude mcp add --transport http --scope user frontier-hsa https://mcp.frontierhsa.ca/mcp

Cursor — add globally via Cursor Settings > MCP Tools:

{
  "mcpServers": {
    "frontier-hsa": {
      "url": "https://mcp.frontierhsa.ca/mcp"
    }
  }
}

VS Code — add to your user settings.json:

{
  "mcp": {
    "servers": {
      "frontier-hsa": {
        "type": "http",
        "url": "https://mcp.frontierhsa.ca/mcp"
      }
    }
  }
}

For other clients, see the full setup guide in the MCP Server docs.

When you first connect, your MCP client will open a browser window where you log in with your Frontier HSA account. After logging in, the client receives an access token and can make requests on your behalf.

3. Authorize the Connection

The OAuth 2.1 flow works like this:

1. Your MCP client registers itself with the server automatically
2. You are redirected to your Frontier HSA login page
3. After logging in, you are redirected back to your MCP client
4. The client receives an access token and, when supported, can refresh it automatically

You only need to log in once. Supported clients can store your token and refresh it automatically.

What Tools Are Available?

Once connected, your AI assistant has access to these tools:

Read Your Account

• get_profile - View your name, email, company, benefit class, bank account, and address
• get_tax_savings - See your total reimbursements and estimated tax savings for the year
• get_user_analytics - View company-wide claims and reimbursement totals for admins
• list_claims - Browse your claims with optional status filters (under_review, processing_payment, denied, paid)
• get_claim - View a specific claim with receipt details
• list_notifications - Check your notifications, including an unread-only filter

Take Action

• analyze_receipts - Upload and analyze receipt files to extract claim details and storage URLs
• submit_claim - Submit a new claim using fields returned by analyze_receipts
• withdraw_claim - Withdraw a pending claim you no longer want to process
• mark_notification_read - Mark a notification as read
• mark_all_notifications_read - Clear all notification badges

Example Conversations

Here are some things you can ask your AI assistant once connected:

• "How much have I been reimbursed this year?"
• "Show me my pending claims"
• "Analyze this receipt and draft my claim"
• "Submit this analyzed receipt as a claim"
• "What are my estimated tax savings so far?"
• "Show unread notifications only"

Security

• All connections use OAuth 2.1 with PKCE.
• Access tokens expire according to server configuration, and supported clients can refresh them automatically.
• You can revoke access at any time.
• The MCP server does not collect your Frontier HSA credentials; sign-in happens in the browser through the Frontier HSA login flow.
• All monetary amounts are handled in cents in the API and tool outputs to avoid rounding errors.

Need Help?

If you run into issues connecting your MCP client, reach out to us at hello@frontierhsa.ca or visit our contact page.