Connect a clinic's website to Moonshot EHR

For the web team or agency that builds a clinic's site. Everything here works today for any clinic on Moonshot EHR once the clinic turns it on. Patient records stay inside the EHR.

Guides

Send leads to Moonshot EHRPost form submissions with their campaign, notes and service interest; hear back when a lead becomes a patient.
Receive signed eventslead.converted, appointment.booked, rescheduled and cancelled, signed with HMAC-SHA256 and retried.
Embed booking and intake, read availabilityPut the clinic's booking page or forms inside your site, or build your own widget.
Booking linksDeep links by booking link name and provider, with campaign tracking.
Membership join linksA button that takes a visitor straight to joining a plan.
Read API v1Services, providers, membership plans and open times, from a server or the clinic's own site; plus the clinic's secret API key for its own integration, which creates leads and reads whether they booked.

Quick start: the read API

curl -s https://api.moonshotehr.com/api/v1/catalog -H 'X-Tenant-Slug: <clinic>'

Every route, field and limit: Read API v1 reference.

What a marketing site cannot reach

Patient records, visit notes, lab results, prescriptions, messages, documents and payment details are not available to a website, through this API or any other route here. That information is protected health information. It stays inside the EHR, where access is tied to a named staff member or the patient's own portal sign-in and every view is recorded.

Booking, intake and payment run on the clinic's hosted pages (embedded or linked) so identity checks, consent and payment stay in one place. Your site can start those journeys and hear about outcomes through events; it does not hold the record.

Getting a test clinic

Email support@moonshotclinic.com with the clinic you are building for and your site's addresses. We set up a test clinic for your project and share its identifier, the lead key and the settings you need. Test clinics are set up by our team, not self-serve. A secret API key (it starts mck_test_ on a test clinic) is created by the clinic's owner in the EHR and shown to them once; see Secret API keys.