Microsoft Copilot security directory

Veterans Affairs Providers (Independent Publisher)

Published by Richard Wilson

Medium risk

The Provider Directory API facilitates the development of applications that can retrieve lists of VA providers, offering details on provider locations, specialties, office hours, and patient acceptance status. It leverages FHIR standards to ensure compliance with CMS requirements for public-facing API endpoints.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 8 tools or capabilities.

  • Get location by ID
  • Get organization by Id
  • Get practitioner by ID
  • Get practitioner role by ID
  • List locations
  • List organizations
  • List practitioner roles
  • List practitioners

The interactive security report will load automatically.