# Doximity

**Canonical:** https://apis.io/providers/doximity/  
**Website:** https://www.doximity.com  
**APIs profiled:** 1

Doximity is the leading digital platform for U.S. medical professionals, used by the majority of physicians and a large share of nurse practitioners and physician assistants. Its public developer surface is an OAuth 2.0 and OpenID Connect identity API hosted at auth.doximity.com that lets third-party applications verify and identify Doximity members against the Doximity medical database, request a curated set of profile claims (name, credentials, specialty, email, office, and more), and reduce registration friction. Doximity also ships the Doximity Dialer SDKs for iOS and Android so partner apps can place HIPAA-secure calls that mask the caller's personal number, plus a Share Button and Registration integration. Authentication uses the Authorization Code grant with mandatory PKCE, refresh tokens, and device_code, and the platform is SOC 2 Type 2 and HIPAA/HITECH certified. This profile was enriched by the API Evangelist pipeline from Doximity's public developer documentation and OpenID Connect discovery metadata.

## Kin Score — 55.3 / 100 (strong)

Scored 2026-08-30 under rubric 0.17.2. Trend: flat (+0.0 from 55.3).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 46.9 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 34.2 |
| Developer Ergonomics | 56.5 |
| Commercial Clarity | 50.0 |
| Access Clarity | 50.0 |

Regulatory layer — **Health**: 72.5 (matched via tags).

## Agent readiness — 34.7 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | served |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | served |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (2)

- **Doximity OAuth API** — OAuth 2.0 authorization and token endpoints
- **Doximity OpenID Connect API** — Identity and discovery endpoints

## MCP servers (1)

- **Doximity MCP Server**

## Agentic access (1)

- **Doximity Agentic Access** — 10 operations · 3 acting · 1 human-in-the-loop

## Security (4)

- **Doximity Authentication** — oauth2/openIdConnect · 2 schemes
- **Doximity Domain Security** — TLSv1.3 · HSTS · DMARC
- **Doximity Vulnerability Disclosure** — Hackerone · security.txt · contact published
- **Doximity Trust Center** — SOC 2 Type 2, SOC 3, HIPAA, HITECH

## Tags

Company, Healthtech, Identity, Authentication, OpenID Connect, Physician Network, Healthcare, SSO, Verification

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/doximity/). Scores are computed from the provider's own public artifacts under a published rubric.