drchrono · OAuth Scopes

drchrono OAuth Scopes

OAuth 2.0 derived

drchrono publishes 23 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the drchrono API on a user’s behalf.

Tokens are issued from https://app.drchrono.com/o/token/.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

EHRElectronic Health RecordsHealthcareMedical RecordsPractice ManagementHIPAAAppointmentsBillingPrescriptionsLab IntegrationFHIR

Scopes: 23 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://app.drchrono.com/o/authorize/

Token URL
https://app.drchrono.com/o/token/

Flows
authorizationCode

Scopes (23)

Scope	Description	Flows
billing
billing:patient-payment:read	View patient payment information	authorizationCode
billing:patient-payment:write	Modify patient payment information	authorizationCode
billing:read	View billing information.	authorizationCode
billing:write	Modify billing information.	authorizationCode
calendar:read	View your appointments.	authorizationCode
calendar:write	Schedule appointments and modify the data associated with them.	authorizationCode
clinical:read	View clinical information, such as vitals, clinical notes, medications and diagnoses.	authorizationCode
clinical:write	Create and modify clinical information, such as vitals, clinical notes, medications and diagnoses.	authorizationCode
labs:read	View patient lab orders and results.	authorizationCode
labs:write	Create and modify patient lab orders and results.	authorizationCode
messages:read	View messages in your message center.	authorizationCode
messages:write	Create and modify messages in your message center.	authorizationCode
patients:read	View detailed patient information.	authorizationCode
patients:summary:read	View summary information about your patients. This includes patients' name, chart_id, age, and gender.	authorizationCode
patients:summary:write	Create new patients and set their name, chart_id, age, and gender.	authorizationCode
patients:write	Create patients and modify detailed patient information.	authorizationCode
settings:read	View resources that requires Settings permission, such as custom fields.	authorizationCode
settings:write	Create resources that requires Settings permission, such as custom fields.	authorizationCode
tasks:read	View tasks in your tasks center	authorizationCode
tasks:write	Create and modify tasks in your tasks center	authorizationCode
user:read	View your basic information.	authorizationCode
user:write	Edit select account information, such as creating new exam rooms.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/drchrono-rest-api-openapi.yml
schemes:
- name: drchrono_oauth2
  source: openapi/drchrono-rest-api-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.drchrono.com/o/authorize/
    tokenUrl: https://app.drchrono.com/o/token/
scopes:
- scope: billing
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: billing:patient-payment:read
  description: View patient payment information
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: billing:patient-payment:write
  description: Modify patient payment information
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: billing:read
  description: View billing information.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: billing:write
  description: Modify billing information.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: calendar:read
  description: View your appointments.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: calendar:write
  description: Schedule appointments and modify the data associated with them.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: clinical:read
  description: View clinical information, such as vitals, clinical notes, medications and diagnoses.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: clinical:write
  description: Create and modify clinical information, such as vitals, clinical notes, medications
    and diagnoses.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: labs:read
  description: View patient lab orders and results.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: labs:write
  description: Create and modify patient lab orders and results.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: messages:read
  description: View messages in your message center.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: messages:write
  description: Create and modify messages in your message center.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: patients:read
  description: View detailed patient information.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: patients:summary:read
  description: View summary information about your patients. This includes patients' name, chart_id,
    age, and gender.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: patients:summary:write
  description: Create new patients and set their name, chart_id, age, and gender.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: patients:write
  description: Create patients and modify detailed patient information.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: settings:read
  description: View resources that requires Settings permission, such as custom fields.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: settings:write
  description: Create resources that requires Settings permission, such as custom fields.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: tasks:read
  description: View tasks in your tasks center
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: tasks:write
  description: Create and modify tasks in your tasks center
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: user:read
  description: View your basic information.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml
- scope: user:write
  description: Edit select account information, such as creating new exam rooms.
  flows:
  - authorizationCode
  sources:
  - openapi/drchrono-rest-api-openapi.yml