Highlights
OAuth 2.0 + PKCE
SMART launch flows, refresh tokens, and short-lived service tokens.
FHIR R4 resources
Patient, Encounter, Observation, MedicationRequest, DocumentReference.
Webhooks
Consult lifecycle, prescription events, red-flag triggers, message events.
Rate limits
Per-tenant burst allowances with clear headers and honest retry semantics.
