API Governance

Manage API clients and credentials with explicit permissions and scope

API Governance Model

Every credential has an explicit owner, explicit permissions, and explicit scope. API access is a separately granted capability — not automatic with provider/clinic approval. Plaintext keys are displayed ONCE at creation and never again. Raw keys are never stored.

No API credentials issued yet

Create an API client first, then issue a credential