The API that is being documented here is designed to securely facilitate the patient authentication and the sharing of patient data via a Continuity of Care Document (CCD). eMDs client's, the Practice/Clinic, will supply vendor systems with the necessary access tokens for checking API accessibility status for the practice, validate patient through credential authentication and retrieve the patient CCD based on patient elections for expiration, CCD category and/or date range.
Prerequsites: The vendor system will need both a Practice token and an API token provided by the Practice. Once you have these two tokens (provided by the Practice/Clinic) you will be able to experiment with the following web methods.
Please review the Introduction if you have not yet done so.
Checks the status of the API suite. This web method can be used to provide basic validation that you have active tokens and to verify communication channels.
HTTP Code | Response | Response Fields | Sample JSON Result |
---|---|---|---|
200 | API is Running, Everything checked out. |
|
{"status": |
400 | Error checking API status. |
|
{"errors": |
Checks the status of the Portal based on tokens provided.
This web method is similar to the System Status Check. It validates tokens and can be used to confirm connectivity. But it also confirms connectivity to the Patient Portal software.
HTTP Code | Response | Response Fields | Sample JSON Result |
---|---|---|---|
200 | API is Running, Everything checked out. |
|
{"status": |
400 | Error checking API status. |
|
{"errors": |
For Patient Authentication, the vendor system will call the API method for Patient Authentication and be returned a url that will allow the vendor system to present a webpage for the patient to use for login. This form will allow the patient to enter private Patient Portal credentials as well as set data access parameters for expiration, date range and CCD categories. Once validated, the vendor system can proceed with the resulted patient request token and call the CCD retrieval method.
The "app_name" and "app_desc" fields have two uses: Firstly, they are shown to the Patient on the authorization page. It gives the Patient a confirmation of the system with which they want to share their private data. These fields are also used for audit purposes in the API.
Once the patient has completed their authorization form, they can optionally be redirected back to system that is the source of the request. The "return_link_name" and "return_url" can be used to specify the return trip.
HTTP Code | Response | Response Fields | Sample JSON Result |
---|---|---|---|
200 | API is Running, Everything checked out. |
|
{"status":"Success", |
400 | Error, Missing Tokens. |
|
{"errors": |
400 | Error, Missing parameters. |
|
{"status": "Failed", |
For CCD Retrieval, the vendor system will call the API method for retrieving the CCD. Access will be granted with the Practice, API and Request tokens. The CCD will be transformed to comply with patient elections as previously discussed.
HTTP Code | Response | Response Fields | Sample JSON Result |
---|---|---|---|
200 | Full or partial CCD returned. |
|
{"ccd": |
400 | Error, Missing Tokens. |
|
{"errors": |
400 | Error, Missing Request Token. |
|
{"errors": |
400 | Error, Missing Authorization. |
|
{"errors": |