Skip to content

Changelog

What's changed

Every API-affecting change, newest first. Additive changes ship within the current major; breaking changes get a new major version — see Versioning for how to write a tolerant client.

  1. v1.6

    Developer program: self-serve apps, sandbox keys & webhook management

    • addedSelf-serve app registration — request an app with the exact scopes you need and track approval status in the portal.
    • addedSandbox: one issued client-credentials key against a seeded, non-PHI sandbox org/facility, with a documented data reset.
    • addedIn-portal webhook management: register, list, test-fire, and revoke signed subscriptions.
    • addedPublished OpenAPI 3.1 specification, an interactive reference explorer, and a downloadable Postman collection.
    • addedChangelog and status pages.
  2. v1.5

    Connect governance unified onto one persisted app model

    • changedApp publish-state and per-app allowed_scopes are now a single admin-owned record the request gate authorizes against.
    • addedPer-org / per-facility Connect enablement is now explicit and deny-by-default.
    • securityThe gate now returns distinct, non-PHI reason codes (app_not_published, scope_not_granted, connect_disabled) so integrators can self-diagnose.
  3. v1.4

    Clinical read surface expanded

    • addedNew read scopes and resources: diagnostics.read, careplans.read, notes.read, assessments.read, adl.read, therapy.read, nutrition.read, consents.read, contacts.read, incidents.read, calendar.read, episodes.read.
    • addedFHIR-aligned Immunization and Practitioner projections.
  4. v1.3

    Financial ingest

    • addedcharges.write and payments.write — post ancillary-charge and private-cash import batches; poll a processId for status.
    • addedfinancial.read — daily balance, statements, and journal-entries summary.
  5. v1.2

    Signed webhooks

    • addedWebhook subscriptions with per-subscription HMAC signing secret and the X-MedFlo-Signature header.
    • addedA /test endpoint that returns the exact signed bytes so you can validate your verifier before going live.
  6. v1.1

    Per-client rate limiting

    • addedPer-client rate limits keyed on your credential, with X-RateLimit-* headers on every response.
    • changedToken endpoint is now rate-limited by IP to blunt credential stuffing — cache and reuse your token for its full hour.
  7. v1.0

    Connect API general availability

    • addedOAuth2 client-credentials token grant and a discoverable scope catalog.
    • addedFHIR-aligned reads: Patient, Coverage, Condition, MedicationRequest, AllergyIntolerance, Observation.
    • addedDeny-by-default per-tenant scoping — org and facility are derived from your credentials, never client input.
Watching for changes programmatically? New event types, optional response fields, and new endpoints are additive and safe to ignore until you need them. Breaking changes are announced here before a new major ships.