Discovers itself
list_entity_types describes every resource; the generic tools then read and write any of them. New resources appear automatically.Two ways in
An API key for headless agents, or OAuth for AI apps acting for a signed-in team member.
Same rules
Tools call the API’s services, so an agent cannot do anything a person could not, and every action is on the audit trail.
Authentication
Protocol
Streamable HTTP: JSON-RPC 2.0 overPOST, with Accept: application/json, text/event-stream. The usual sequence is initialize → tools/list → tools/call.
What an agent can do
- Understand the clinic’s data —
list_entity_typesreturns every resource with its attributes, what is filterable and sortable, and which write operations it accepts. - Find anything —
query_entitieswith the API’s filter syntax, or the friendlierpatient-lookup-toolfor name / phone / email searches. - Change anything the API allows —
write_entityfor create / update / delete on any writable resource, plus curatedappointment-book-toolandappointment-reschedule-toolfor the common flows.