Agent Access
Agent Access is an opt-in feature that lets AI agents query your lab data — coding agents (Claude Code, Cursor), messenger bots (Hermes Agent, OpenClaw), or any MCP-compatible tool. The agent pulls your latest lab context from getbased to answer questions like "how's my iron trending?" or "what changed since my last draw?"
Only a read-only text summary is shared. Your raw data and sync mnemonic never leave your browser.
How It Works
getbased (browser) ──saves context──▶ Context Gateway ◀──queries with token── AI agent (Claude Code, Hermes, etc.)- You enable Agent Access in getbased and receive a read-only token
- getbased pushes a pre-built text summary of your labs, context cards, supplements, goals, and notes to the context gateway
- Your AI agent uses the token to read that summary and answer questions
The gateway stores only the same assembled text context that the in-app AI chat uses — no raw data, no database access, no mnemonic. The summary is refreshed automatically whenever you save changes in getbased.
Setup
1. Enable Agent Access
- Open Settings → Data → Agent Access
- Toggle it on
- A read-only token is generated and displayed
Copy the token — you will paste it into your agent's configuration.
2. Connect your agent
Paste the token into whichever tool you use to run your AI agent. See Compatible Tools below for specific instructions.
3. Query
Ask your agent anything about your labs. It reads your latest context from the gateway and responds.
Token visibility
The token is masked by default in Settings. Click Show to reveal it, or Copy to put it on your clipboard. The clipboard is cleared after 60 seconds.
Multi-Profile Support
If you track labs for multiple people (yourself, a partner, a parent), each profile's context is stored separately on the gateway. Bots can query by profile ID to pull the right person's data.
- When you save context, getbased pushes each profile's summary under its own ID
- The bot's
getbased_list_profilestool returns all available profiles with their names - The bot's
getbased_lab_contexttool accepts an optional profile ID parameter — if omitted, it returns the active profile
Switch to the profile you want to update in getbased, make your changes, and the gateway receives that profile's latest context automatically.
Compatible Tools
Agent Access works with any agent that can call the context gateway's API using your token. The universal adapter is getbased-mcp — an MCP server that exposes your lab context as tools.
getbased-mcp
git clone https://github.com/elkimek/getbased-mcp.git
cd getbased-mcp
pip install .Add it to your agent's MCP config with your token and gateway URL. Works with any MCP-compatible agent — Claude Code, Cursor, Windsurf, Hermes Agent, OpenClaw, and more.
Hermes Agent example
Hermes Agent is a self-hosted AI assistant with built-in support for Matrix, Telegram, Signal, Discord, and other messengers. Configure getbased-mcp in ~/.hermes/config.yaml:
mcp_servers:
getbased:
command: python3
args:
- /path/to/getbased_mcp.py
env:
GETBASED_GATEWAY: https://sync.getbased.health
GETBASED_TOKEN: your-tokenThen restart the gateway: hermes gateway restart
getbased-mcp provides these tools:
| Tool | Description |
|---|---|
getbased_lab_context | Full lab summary — values, ranges, trends, context cards, supplements, goals |
getbased_section | Query a specific section (hormones, biometrics, etc.) or list available sections |
getbased_list_profiles | List all profiles by name and ID |
Security
Agent Access is designed to share the minimum needed for a bot to be useful:
- Read-only token — the token grants access to a pre-built text summary only. No writes, no database queries, no mutations
- No raw data exposed — the gateway stores the same assembled context the in-app AI chat uses, not your underlying lab entries or personal records
- Mnemonic never leaves your browser — the sync mnemonic is a separate system. Agent Access does not use or transmit it
- Revocable at any time — toggle Agent Access off in Settings to immediately invalidate the token. You can also click Regenerate to create a new token, which invalidates the old one
- Self-hostable — the context gateway runs on the same server as the sync relay. Self-host both for full control over where your summary is stored
WARNING
Your token grants access to your lab summary. Treat it like a password — do not share it publicly or commit it to a public repository.
Troubleshooting
Bot sees the wrong profile
The gateway serves whichever profiles have been pushed. If the bot returns data for the wrong person:
- Open getbased and switch to the correct profile
- Make any edit and save (or toggle Agent Access off and back on) to force a fresh push
- Ask the bot again — use the profile ID parameter if you have multiple profiles
Bot returns stale data
The gateway is updated whenever you save changes in getbased. If the bot's answers seem outdated:
- Confirm Agent Access is still toggled on in Settings → Data
- Open getbased in your browser — the push happens from the browser, so it needs to be open at least once after your latest changes
- Check your network connection — the push requires internet access to reach the gateway
Token not working
- Make sure you copied the full token (no trailing spaces)
- Check that Agent Access is still enabled — disabling it invalidates the token
- If you clicked Regenerate, update your bot config with the new token — the old one no longer works
Bot cannot reach the gateway
If you self-host the gateway, verify that:
- The gateway server is running and accessible from the bot's network
- Your bot config points to the correct gateway URL (e.g.,
https://sync.yourdomain.com) - TLS is configured correctly — the bot needs HTTPS access