API changelog

What changed, newest first. We’ll announce breaking changes here and by webhook before they land.

API 1.0

2026-07-24

Added Data ingestion — POST /fhir/Observation writes data for a service you own, for patients who have enabled it. Scope system/Observation.write.

Added Webhooks — subscribe to service.enabled, service.disabled, observation.created; HMAC-SHA256 signed callbacks with retry.

Added Patient notifications — POST /fhir/$notify-patient. Scope system/Notification.write.

Added OpenAPI 3.1 spec at /fhir/openapi.json for Postman/Swagger import.

Added Read API — GET /fhir/Observation (search & read), GET /fhir/Patient/{id}, GET /fhir/metadata.

Added OAuth2 client_credentials auth; restricted vs elevated access levels; per-service data scoping.

Added Developer onboarding: application → approval, workspace, sandbox install flow.

Planned

Upcoming

Planned Rate limiting (see the limits section) — quotas per client, with 429 + Retry-After.

Planned More writable FHIR resources beyond Observation.

Planned Additional webhook events.