Skip to main content

API & events reference

The compact map of the whole Rx surface. Full request/response shapes live in the OpenAPI reference and the per-SDK pages.

Storefront endpoints (public — no API key)

Base: /api/public/v1/rx. Case routes authorize with the (orderId, checkoutToken) ownership proof.

Merchant endpoints (Tagada API key)

Base: /api/v1/rx — Node SDK namespace tagada.rx.*.

Patient portal endpoints (customer CMS session)

Base: /api/v1/rx/portal — authenticated with the customer’s x-cms-token (email OTP login).

Clinical webhooks (network → Tagada)

POST /api/public/webhooks/rx/{networkSlug} (e.g. /rx/mdi) — HMAC-SHA256 signed, processed asynchronously and idempotently. You don’t consume these; they drive the case state you read from the APIs above.

Case statuses

Case events

Append-only, exposed on GET /rx/cases/{caseId} and the portal timeline:

Key objects at a glance