# HeartFlow

**Canonical:** https://apis.io/providers/heartflow/  
**Website:** https://www.heartflow.com/  
**APIs profiled:** 1

Heartflow, Inc. (Nasdaq: HTFL) is a healthcare technology company founded in 2010 and headquartered in San Francisco, California. Its Heartflow One platform applies AI to coronary computed tomography angiography (CCTA) to non-invasively diagnose and manage coronary artery disease, bundling Roadmap Analysis, FFRct Analysis, Plaque Analysis, Plaque Staging and the PCI Navigator, and delivering results back into hospital PACS and EMR systems. More than 650,000 patients have been analyzed across 1,800+ institutions. Heartflow runs a production REST API at api.heartflow.net and customer documentation at docs.heartflow.net, but both are authenticated: there is no public developer program, no published OpenAPI, and no self-serve signup.

## Kin Score — 21.2 / 100 (emerging)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (-0.7 from 21.9).

| Facet | Score |
|---|---|
| Discoverability | 68.5 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 2.6 |
| Developer Ergonomics | 7.1 |
| Commercial Clarity | 43.4 |
| Access Clarity | 43.4 |

Regulatory layer — **Health**: 30.0 (matched via tags).

## Agent readiness — 2.5 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## APIs (1)

- **Heartflow One Platform API** — Production REST API behind the Heartflow One platform, observed live at https://api.heartflow.net. Every probed route answers with the Django REST Framework challenge {"detail":...

## Security (3)

- **Heartflow Authentication** — 0 schemes
- **Heartflow Domain Security** — TLSv1.3 · HSTS · DMARC
- **Heartflow Trust Center** — SOC 2 Type 2, ISO/IEC 27001:2022, ISO 13485:2016, HITRUST, HIPAA, GDPR, CCPA

## Plans (1)

- **Heartflow Plans Pricing**

## Tags

Company, Healthcare, Medical Imaging, Artificial Intelligence, Cardiology, Diagnostics, Medical Devices, Radiology, Clinical Decision Support, Machine Learning

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/heartflow/). Scores are computed from the provider's own public artifacts under a published rubric.