Datavant website screenshot

Datavant

Datavant is a United States health-data logistics company, formed from the 2021 merger of Datavant and Ciox Health, that connects and de-identifies healthcare data across a "network of networks" spanning 350+ real-world data partners, 80,000+ hospitals and clinics, and a majority of the largest US health systems. Its core capabilities are privacy-preserving record linkage using Datavant tokens, HIPAA Expert Determination and de-identification, medical record retrieval / release of information, and real-world evidence generation for life sciences, payers, providers, and government. Datavant publishes a real machine-readable contract for the retrieval side of that business: an OpenAPI 3.1.0 document for the Datavant REST API (36 paths, 54 operations, OAuth 2.0 client credentials, base https://api.datavant.io/v2) is served anonymously at https://developer.datavant.com/openapi.json, even though that host's root returns HTTP 404. Access is still enterprise and contract-gated - there is no self-serve sign-up, no published pricing beyond a single AWS Marketplace listing, no published scopes or rate limits, and no FHIR CapabilityStatement. Home market is the United States.

Datavant publishes 1 API on the APIs.io network: REST API. Tagged areas include Healthcare, United States, Interoperability, Health Data, and De-Identification.

Datavant’s developer surface includes authentication, engineering blog, documentation, API reference, support, changelog, CLI, and 36 more developer resources.

59.0/100 strong ▲ 45.5 Agent 63/100 agent ready Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
AccessEnterprise
1 APIs 1 MCP Servers
HealthcareUnited StatesInteroperabilityHealth DataDe-IdentificationTokenizationReal-World DataRecord RetrievalData ConnectivityLife SciencesHIPAAMedical RecordsRelease of InformationPrivacyOAuth 2.0Health Information Exchange

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 59.0/100 · strong
Contract Quality 10.6 / 21
Developer Ergonomics 10.7 / 17
Commercial Clarity 13.9 / 17
Operational Transparency 5.2 / 11
Governance 2.1 / 10
Discoverability 6.5 / 9
Regulatory Posture 9.9 / 15
Agent readiness — 63/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Health regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/datavant: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Datavant REST API

Datavant's REST API for identified patient medical record retrieval - the programmable side of Datavant Connect Retrieval (the ex-Ciox release-of-information business). Resource...

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

datavant-mcp.yml

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Datavant Rate Limits

0 limits

RATE LIMITS

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Datavant Authentication

oauth2/openIdConnect · 2 schemes

SECURITY

Datavant Domain Security

TLSv1.3 · DNSSEC · DMARC

SECURITY

Datavant Vulnerability Disclosure

Hackerone · security.txt · contact published

SECURITY

Datavant Trust Center

FedRAMP Moderate, SOC 2 Type 2, HIPAA, FIPS 140-2

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Datavant Scopes

OAuth 2.0 · no documented scopes

0 scopes

SCOPES

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Datavant Agentic Access

54 operations · 28 acting · 2 human-in-the-loop

54 operations · 28 acting

AGENTIC

Resources

Get Started 2

Portal, sign-up, and the first successful call

Documentation 3

Reference material describing how the API behaves

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 5

Pagination, idempotency, versioning, errors, and events

Build 3

SDKs, sample code, and the tooling you integrate with

Access & Security 8

Authentication, authorization, and security posture

Scroll for all 8

Operate 4

Status, limits, changes, and where to get help

Commercial 4

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Other 6

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: datavant
url: https://raw.githubusercontent.com/api-evangelist/datavant/refs/heads/main/apis.yml
name: Datavant
kind: company
description: 'Datavant is a United States health-data logistics company, formed from the 2021 merger of Datavant and Ciox
  Health, that connects and de-identifies healthcare data across a "network of networks" spanning 350+ real-world data partners,
  80,000+ hospitals and clinics, and a majority of the largest US health systems. Its core capabilities are privacy-preserving
  record linkage using Datavant tokens, HIPAA Expert Determination and de-identification, medical record retrieval / release
  of information, and real-world evidence generation for life sciences, payers, providers, and government. Datavant publishes
  a real machine-readable contract for the retrieval side of that business: an OpenAPI 3.1.0 document for the Datavant REST
  API (36 paths, 54 operations, OAuth 2.0 client credentials, base https://api.datavant.io/v2) is served anonymously at https://developer.datavant.com/openapi.json,
  even though that host''s root returns HTTP 404. Access is still enterprise and contract-gated - there is no self-serve sign-up,
  no published pricing beyond a single AWS Marketplace listing, no published scopes or rate limits, and no FHIR CapabilityStatement.
  Home market is the United States.'
accessModel:
  pricing: enterprise
  onboarding: contact-sales
  trial: false
  try_now: false
  public: false
  label: Enterprise · Partner onboarding
  confidence: high
  source:
  - review
  - https://developer.datavant.com/openapi.json
  - https://aws.amazon.com/marketplace/pp/prodview-eolcfagze2ihw
  generated: '2026-08-14'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Healthcare
- United States
- Interoperability
- Health Data
- De-Identification
- Tokenization
- Real-World Data
- Record Retrieval
- Data Connectivity
- Life Sciences
- HIPAA
- Medical Records
- Release of Information
- Privacy
- OAuth 2.0
- Health Information Exchange
created: '2026-07-24'
modified: '2026-08-14'
specificationVersion: '0.19'
apis:
- name: Datavant REST API
  description: 'Datavant''s REST API for identified patient medical record retrieval - the programmable side of Datavant Connect
    Retrieval (the ex-Ciox release-of-information business). Resource-oriented, JSON-encoded, protected by OAuth 2.0 client
    credentials. 36 paths and 54 operations across seven resources: Configuration (tenant defaults), Projects (order grouping),
    Orders (the parent container), Order Queries (one per patient), Prematch (population sizing before committing to retrieval),
    Visits (the retrieval work performed at each clinic) and Documents (the charts that come back). Collections page with
    limit/offset in a JSON:API-flavoured envelope; versioning is a /v2 path segment plus an optional version-datavant date
    header defaulting to 2023-04-01. No scopes, no rate limits, no idempotency key and no webhooks are published.'
  humanURL: https://developer.datavant.com/docs
  baseURL: https://api.datavant.io/v2
  tags:
  - healthcare
  - medical-records
  - record-retrieval
  - release-of-information
  - health-data
  - orders
  - documents
  - oauth2
  - united-states
  - hipaa
  - life-sciences
  - payers
  properties:
  - type: OpenAPI
    url: openapi/datavant-rest-api-openapi.yml
  - type: OpenAPI
    url: openapi/_original/datavant-openapi.json
  - type: Documentation
    url: https://developer.datavant.com/docs
  - type: APIReference
    url: https://developer.datavant.com/docs
  - type: Authentication
    url: authentication/datavant-authentication.yml
  - type: OAuthScopes
    url: scopes/datavant-scopes.yml
  - type: Conventions
    url: conventions/datavant-conventions.yml
  - type: ErrorCatalog
    url: errors/datavant-problem-types.yml
  - type: DataModel
    url: data-model/datavant-data-model.yml
  - type: Overlay
    url: overlays/datavant-rest-api-overlay.yaml
  - type: RateLimits
    url: rate-limits/datavant-rate-limits.yml
  - type: ChangeLog
    url: changelog/datavant-changelog.yml
  - type: Lifecycle
    url: lifecycle/datavant-lifecycle.yml
  - type: AgentSkill
    url: skills/_index.yml
  - type: AgenticAccess
    url: agentic-access/datavant-agentic-access.yml
  - type: MCPServer
    url: mcp/datavant-mcp.yml
  - type: Support
    url: mailto:support@datavant.com
common:
- type: AgenticAccess
  url: agentic-access/datavant-agentic-access.yml
- type: OAuthScopes
  url: scopes/datavant-scopes.yml
- type: Authentication
  url: authentication/datavant-authentication.yml
- type: DomainSecurity
  url: security/datavant-domain-security.yml
- type: Website
  url: https://www.datavant.com/
- type: Blog
  url: https://www.datavant.com/blog
- type: TrustCenter
  url: https://trust.datavant.com/
- type: StatusPage
  url: https://status.datavant.com/
- type: PrivacyPolicy
  url: https://www.datavant.com/privacy-policy
- type: GitHubOrganization
  url: https://github.com/datavant
- type: LinkedIn
  url: https://www.linkedin.com/company/datavant
- type: LLMsTxt
  url: llms/datavant-llms.txt
- type: ProductPage
  url: https://www.datavant.com/products/connect-linkage
- type: ProductPage
  url: https://www.datavant.com/products/connect-privacy
- type: ProductPage
  url: https://www.datavant.com/products/connect-retrieval
- type: ProductPage
  url: https://www.datavant.com/products/insights-and-evidence-generation
- type: DeveloperPortal
  url: https://developer.datavant.com/docs
- type: Documentation
  url: https://developer.datavant.com/docs
- type: APIReference
  url: https://developer.datavant.com/docs
- type: OpenAPI
  url: openapi/datavant-rest-api-openapi.yml
- type: Support
  url: mailto:support@datavant.com
- type: TermsOfService
  url: https://www.datavant.com/terms-of-use
- type: Login
  url: https://portal.datavant.com/
- type: Conventions
  url: conventions/datavant-conventions.yml
- type: ErrorCatalog
  url: errors/datavant-problem-types.yml
- type: DataModel
  url: data-model/datavant-data-model.yml
- type: Overlay
  url: overlays/datavant-rest-api-overlay.yaml
- type: Lifecycle
  url: lifecycle/datavant-lifecycle.yml
- type: ChangeLog
  url: changelog/datavant-changelog.yml
- type: Conformance
  url: conformance/datavant-conformance.yml
- type: Compliance
  url: https://www.datavant.com/about/privacy-compliance
- type: WellKnown
  url: well-known/datavant-well-known.yml
- type: OpenIDConnect
  url: https://auth.datavant.com/.well-known/openid-configuration
- type: VulnerabilityDisclosure
  url: security/datavant-vulnerability-disclosure.yml
- type: Security
  url: https://www.datavant.com/report-vulnerabilities
- type: TrustCenter
  url: security/datavant-trust-center.yml
- type: Packages
  url: packages/datavant-packages.yml
- type: CLI
  url: cli/datavant-cli.yml
- type: Plans
  url: plans/datavant-plans-pricing.yml
- type: Pricing
  url: https://aws.amazon.com/marketplace/pp/prodview-eolcfagze2ihw
- type: RateLimits
  url: rate-limits/datavant-rate-limits.yml
- type: AgentSkill
  url: skills/_index.yml
- type: MCPServer
  url: mcp/datavant-mcp.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
x-enrichment:
  date: '2026-08-14'
  status: enriched
  artifacts_added: 27
  pass: local-v1