What ClinikAPI does
Every request you make to ClinikAPI triggers a set of managed operations on the backend:- FHIR R4 transformation — your simplified JSON payloads are automatically converted to strict FHIR R4 resources before storage
- Tenant isolation — every resource is tagged with your organization ID and filtered on every read, so your data is never visible to other tenants
- Secure storage — data is persisted in AWS HealthLake with encryption at rest and in transit
- Compliance — BAA-ready infrastructure with audit logging on every request, suitable for storing Protected Health Information (PHI)
14 FHIR R4 resources
ClinikAPI exposes 14 FHIR R4 resource types with full CRUD, search, and pagination out of the box. Every resource is accessible via the REST API and the TypeScript SDK.| Resource | FHIR type | SDK namespace |
|---|---|---|
| Patients | Patient | clinik.patients |
| Practitioners | Practitioner | clinik.practitioners |
| Practitioner roles | PractitionerRole | clinik.practitionerRoles |
| Encounters | Encounter | clinik.encounters |
| Observations | Observation | clinik.observations |
| Medications | Medication | clinik.medications |
| Prescriptions | MedicationRequest | clinik.prescriptions |
| Appointments | Appointment | clinik.appointments |
| Intakes | QuestionnaireResponse | clinik.intakes |
| Consents | Consent | clinik.consents |
| Labs | DiagnosticReport | clinik.labs |
| Notes | DocumentReference | clinik.notes |
| Assessments | ClinicalImpression | clinik.assessments |
| Documents | Composition | clinik.documents |
Architecture overview
ClinikAPI is a data API — you bring your own auth provider (Supabase, Clerk, Auth0, Firebase, etc.) and use ClinikAPI purely for clinical data storage and retrieval.- The SDK runs server-side only with a secret API key — never import it in client-side code
- React widgets from
@clinikapi/reactuse a proxy pattern — they talk to your backend, which calls ClinikAPI, so your API key is never exposed to the browser - Test keys (
clk_test_*) route to a shared test datastore; live keys (clk_live_*) route to production
Because ClinikAPI is a data API, it does not issue JWTs or session tokens to your users. Your authentication layer handles identity; ClinikAPI handles clinical data.
Next steps
Quickstart
Create your first patient record in under 5 minutes.
Authentication
Learn how API keys and tenant isolation work.
SDK reference
Full TypeScript SDK documentation with all 14 resources.
React components
Drop-in clinical UI widgets for your frontend.