Hologic, Inc. (NASDAQ: HOLX) is a global medical technology company focused on women's health, headquartered in Marlborough, Massachusetts. It develops, manufactures and supplies diagnostic products, medical imaging systems and GYN surgical solutions across four businesses: Breast Health, Diagnostic Solutions, GYN Surgical Solutions and Skeletal Health. Its products are FDA-cleared or CE-marked medical devices for trained healthcare professionals, and integration happens at the device — DICOM network services and HL7 feeds into RIS, PACS and LIS — rather than through a public web API. Hologic publishes no developer portal, OpenAPI or SDK; the contracts it does publish are per-product DICOM Conformance Statements and MDS2 security disclosure forms, both as PDF.
Hologic is profiled on the APIs.io network. Tagged areas include Fortune 1000, Healthcare, Medical Devices, Medical Imaging, and Diagnostics.
Hologic’s developer surface includes support, engineering blog, authentication, and 17 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Health regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for
this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero:
never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and
several others — scorable at all.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/hologic/"><img src="https://apis.io/badge/hologic/card.svg" alt="Hologic on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
Stable Error Semantics+8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
A2A Agent Card+8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
10 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
The Kin Score Market layer reads a provider inside its market:
its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted:
not part of the Kin Score or agent readiness.
Registered MCP server and declares compatibility are report only — not weighted.
Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
name: Hologic
aid: hologic
type: Index
specificationVersion: '0.23'
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/hologic.png
url: https://raw.githubusercontent.com/api-evangelist/hologic/refs/heads/main/apis.yml
description: 'Hologic, Inc. (NASDAQ: HOLX) is a global medical technology company focused on women''s health, headquartered
in Marlborough, Massachusetts. It develops, manufactures and supplies diagnostic products, medical imaging systems and GYN
surgical solutions across four businesses: Breast Health, Diagnostic Solutions, GYN Surgical Solutions and Skeletal Health.
Its products are FDA-cleared or CE-marked medical devices for trained healthcare professionals, and integration happens
at the device — DICOM network services and HL7 feeds into RIS, PACS and LIS — rather than through a public web API. Hologic
publishes no developer portal, OpenAPI or SDK; the contracts it does publish are per-product DICOM Conformance Statements
and MDS2 security disclosure forms, both as PDF.'
tags:
- Fortune 1000
- Healthcare
- Medical Devices
- Medical Imaging
- Diagnostics
- Women's Health
- DICOM
- Life Sciences
created: '2026-04-28'
modified: '2026-09-13'
maintainers:
- FN: API Evangelist
email: info@apievangelist.com
url: https://apievangelist.com
deliveryModel:
model: unknown
open_source: false
commercial: false
callable_host: false
label: Delivery model not determined — needs a product licence on record
confidence: low
source:
- none
generated: '2026-08-28'
method: derived
accessModel:
pricing: unknown
onboarding: approval
trial: false
try_now: false
public: false
label: Requires approval
confidence: medium
probe_state: covered
source:
- plans
- authentication
- scopes
- security
generated: '2026-11-06'
method: derived
apis: []
common:
- type: Plans
url: plans/hologic-plans-pricing.yml
- type: Website
url: https://www.hologic.com
- type: Support
url: https://www.hologic.com/support
- type: Login
url: https://support.hologic.com/s/login/
- type: Blog
url: https://www.hologic.com/about/newsroom
- type: TermsOfService
url: https://www.hologic.com/terms-conditions
- type: PrivacyPolicy
url: https://www.hologic.com/privacy-policy
- type: GitHubOrganization
url: https://github.com/Hologic-BSHS
- type: LinkedIn
url: https://www.linkedin.com/company/hologic
- type: LLMsTxt
url: llms/hologic-llms.txt
- type: WellKnown
url: well-known/hologic-well-known.yml
- type: Authentication
url: authentication/hologic-authentication.yml
- type: OAuthScopes
url: scopes/hologic-scopes.yml
- type: Conformance
url: conformance/hologic-conformance.yml
- type: Compliance
url: conformance/hologic-conformance.yml
- type: VulnerabilityDisclosure
url: security/hologic-vulnerability-disclosure.yml
- type: Security
url: security/hologic-vulnerability-disclosure.yml
- type: DomainSecurity
url: security/hologic-domain-security.yml
- type: Lifecycle
url: lifecycle/hologic-lifecycle.yml
- type: Deprecation
url: lifecycle/hologic-lifecycle.yml
x-contract-discovery:
checked: '2026-09-13'
verdict: no-public-api-contract
summary: No OpenAPI, Swagger, GraphQL SDL, AsyncAPI, MCP manifest, A2A agent card, gRPC proto or WSDL is published on any
Hologic-controlled host. Hologic's integration contract is the DICOM Conformance Statement, published per product as PDF.
hosts_probed:
- www.hologic.com
- hologic.com
- www.hologic.co.uk
- support.hologic.com
- investor.hologic.com
- dev.hologic.com
- unificonnect.com
- prod.unificonnect.com
- dev.unificonnect.com
- www.endomag.com
- api.hologic.com
- developer.hologic.com
- developers.hologic.com
- apis.hologic.com
- connect.hologic.com
- cloud.hologic.com
- unifi.hologic.com
- portal.hologic.com
- my.hologic.com
findings:
- probe: REST OpenAPI on api/docs host roots
result: 'api.hologic.com, developer.hologic.com, developers.hologic.com, apis.hologic.com, connect.hologic.com, cloud.hologic.com,
unifi.hologic.com and portal.hologic.com have no DNS record at all. dev.hologic.com returns HTTP 401 with WWW-Authenticate
Basic and x-ah-environment: dev — it is the basic-auth-protected Acquia staging copy of the marketing site, not a developer
portal. my.hologic.com 302s to hologic.sharepoint.com. /openapi.json, /openapi.yaml, /swagger.json, /swagger/v1/swagger.json,
/v1/openapi.json, /api-docs, /api/openapi.json, /docs, /redoc and /graphql all 404 on www.hologic.com and unificonnect.com.'
- probe: Unifi Connect platform hosts
result: 'prod.unificonnect.com and dev.unificonnect.com serve an Angular SPA (title "Unifi-Analytics build version: 1.3")
whose catch-all route answers HTTP 200 with the same 2,054-byte index.html for EVERY path, including a negative-control
path that cannot exist. Every 200 there is a shell, not a document. The Unifi Connect telemetry API these apps call
is machine-to-machine between Hologic devices and the platform and is not publicly documented.'
- probe: GraphQL introspection
result: No /graphql endpoint responds on any host; nothing to introspect.
- probe: MCP tools/list
result: No MCP endpoint found. Note the Salesforce Experience Cloud IdP at support.hologic.com advertises an mcp_api OAuth
scope — that is a Salesforce platform capability, not a Hologic-operated MCP server, and it is recorded as such in scopes/hologic-scopes.yml.
- probe: A2A agent card
result: /.well-known/agent-card.json and /.well-known/agent.json miss on every host. The only 200s were the unificonnect.com
SPA shells, rejected as HTML. No card written — correctly, since an agent card may only ever be recorded when the provider
actually serves one.
- probe: OGC surface
result: Not applicable — no geospatial evidence anywhere in Hologic's material.
- probe: WSDL / SOAP
result: No ?wsdl or ?singleWsdl surface reachable. A published MuleSoft case study describes Hologic running SOAP and
REST services internally behind an integration layer; none of it is externally published.
- probe: DICOM Conformance Statement
result: HIT, as PDF. Multiple first-party statements are public and fetchable, e.g. the Selenia Dimensions / 3Dimensions
Acquisition Workstation statement MAN-05763 Rev 002 (HTTP 200, application/pdf), which declares real Application Entities
and DICOM UIDs under 1.2.840.10008 — Modality Worklist FIND, MPPS, Storage, Storage Commitment Push Model, Study Root
Query/Retrieve FIND and MOVE, Print and Verification. Recorded in conformance/hologic-conformance.yml as the domain-standard
conformance it is.
x-enrichment:
date: '2026-09-13'
status: enriched
artifacts_added: 11
pass: local-v3
x-coverage:
state: covered
reason: covered
detail: 'Hologic ships no web API, but it is not an empty profile: it serves a real 24.8 KB llms.txt, a valid OpenID Connect
discovery document at support.hologic.com, a staffed Coordinated Vulnerability Disclosure Policy with a published contact
and PGP key, a dated product end-of-life guide, and per-product DICOM Conformance Statements and MDS2 forms — all of it
public, all of it PDF or HTML rather than machine-readable spec.'
evidence:
- url: https://www.hologic.com/llms.txt
status: 200
- url: https://support.hologic.com/.well-known/openid-configuration
status: 200
- url: https://www.hologic.com/security/coordinated-vulnerability-disclosure-policy
status: 200
- url: https://www.hologic.com/end-of-life
status: 200
- url: https://www.hologic.com/openapi.json
status: 404
checked: '2026-09-13'
Hologic API — frequently asked questions
How do I authenticate with the Hologic API?
Hologic documents its authentication (1 scheme). The details are profiled on APIs.io as Hologic Authentication.
Is the Hologic API ready for AI agents?
Hologic has a Kin Score of 25.8 out of 100 (emerging) and an Agent Readiness score of 15.1 (agent-aware), scored by API Evangelist on 2026-11-06.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →
It updates itself when the score changes. Paste this where you link to your API docs: