Firefly Health Member API

aid: firefly-health:member-api
name: Firefly Health Member API
description: 'Private first-party HTTP API that backs the Firefly Health member web app and iOS/Android
  apps. Observed at https://api-prod.firefly.health with an /api/v2/ base path referenced by the members.firefly.health
  application bundle. The service answers on a gunicorn origin, sets Strict-Transport-Security, Content-Security-Policy,
  X-Frame-Options: DENY and X-Content-Type-Options, and varies on Cookie (session-based authentication).
  No public specification, no developer portal and no documentation are published; every probed discovery
  path (/openapi.json, /swagger.json, /api-docs, /docs, /redoc, /graphql, /.well-known/*) returned 404.
  Recorded here as an observed private API surface, not as a consumable public API.'
humanURL: https://members.firefly.health/
baseURL: https://api-prod.firefly.health/api/v2/
x-access: private
x-evidence:
  fetched: '2026-08-01'
  url: https://members.firefly.health/static/js/index.WM1KT9U9.js
  note: api-prod.firefly.health referenced in the member web application bundle; HEAD https://api-prod.firefly.health/api/v2/
    returned 404 from server gunicorn
  http_status: 404
tags:
- Virtual Care
- Members
properties:
- type: Login
  url: https://members.firefly.health/
- type: SignUp
  url: https://members.firefly.health/signup/user-type