drchrono · OAuth Scopes

drchrono OAuth Scopes

OAuth 2.0 searched

drchrono publishes 23 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the drchrono API on a user’s behalf.

Tokens are issued from https://app.drchrono.com/o/token/.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

EHRElectronic Health RecordsHealthcareMedical RecordsPractice ManagementHIPAAAppointmentsBillingPrescriptionsLab IntegrationFHIRSMART on FHIRUSCDIInteroperabilityWebhookAuthenticationONC CertifiedTelehealthRevenue Cycle Management

Scopes: 23 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://app.drchrono.com/o/authorize/

Token URL
https://app.drchrono.com/o/token/

Flows
authorizationCode

Scopes (23)

Scope	Description	Flows
billing
billing:patient-payment:read	View patient payment information	authorizationCode
billing:patient-payment:write	Modify patient payment information	authorizationCode
billing:read	View billing information.	authorizationCode
billing:write	Modify billing information.	authorizationCode
calendar:read	View your appointments.	authorizationCode
calendar:write	Schedule appointments and modify the data associated with them.	authorizationCode
clinical:read	View clinical information, such as vitals, clinical notes, medications and diagnoses.	authorizationCode
clinical:write	Create and modify clinical information, such as vitals, clinical notes, medications and diagnoses.	authorizationCode
labs:read	View patient lab orders and results.	authorizationCode
labs:write	Create and modify patient lab orders and results.	authorizationCode
messages:read	View messages in your message center.	authorizationCode
messages:write	Create and modify messages in your message center.	authorizationCode
patients:read	View detailed patient information.	authorizationCode
patients:summary:read	View summary information about your patients. This includes patients' name, chart_id, age, and gender.	authorizationCode
patients:summary:write	Create new patients and set their name, chart_id, age, and gender.	authorizationCode
patients:write	Create patients and modify detailed patient information.	authorizationCode
settings:read	View resources that requires Settings permission, such as custom fields.	authorizationCode
settings:write	Create resources that requires Settings permission, such as custom fields.	authorizationCode
tasks:read	View tasks in your tasks center	authorizationCode
tasks:write	Create and modify tasks in your tasks center	authorizationCode
user:read	View your basic information.	authorizationCode
user:write	Edit select account information, such as creating new exam rooms.	authorizationCode

📄 Provider scope reference: https://app.drchrono.com/api-docs/

Source

OAuth Scopes

generated: '2026-08-14'
method: searched
source: https://app.drchrono.com/api-docs/
docs: https://app.drchrono.com/api-docs/
name: drchrono REST v4 OAuth Scopes
description: The 22 OAuth 2.0 scopes DrChrono declares on the drchrono_oauth2 security scheme of the OpenAPI it
  serves at https://app.drchrono.com/openapi-schema, with the scope-model narrative from the Authorization section
  of its API reference. Scopes take the form BASE_SCOPE:[read|write] over the bases user, calendar, patients, patients:summary,
  billing, clinical and labs, plus messages, tasks, settings and billing:patient-payment.
scope_count: 23
default_behaviour: Omitting the scope parameter on the authorize call requests ALL scopes. DrChrono advises requesting
  only the scopes an application needs.
permission_gate: An OAuth scope is necessary but not sufficient. Each endpoint also requires an in-app permission
  granted by a primary user inside the DrChrono web app; a correctly scoped token returns 403 without it. The API
  reference names the required scope AND permission per endpoint.
granularity_note: patients:summary is deliberately narrower than patients — it exposes only name, chart_id, age
  and gender. DrChrono gives the example of a birthday-email application that should request patients:summary:read
  rather than patients:read. Prefer the summary scope wherever identity is all you need; it is the minimum-necessary
  posture the HIPAA obligations in the API terms call for.
separate_fhir_vocabulary: The SMART on FHIR R4 surface uses an entirely different scope vocabulary (233 SMART scopes)
  against a different authorization server. See scopes/drchrono-fhir-smart-scopes.yml.
schemes:
- name: drchrono_oauth2
  source: openapi/_original/drchrono-rest-api-openapi-schema.json
  flows:
  - flow: authorizationCode
    authorizationUrl: https://app.drchrono.com/o/authorize/
    tokenUrl: https://app.drchrono.com/o/token/
  revocationUrl: https://app.drchrono.com/o/revoke_token
scopes:
- scope: billing
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: billing:patient-payment:read
  description: View patient payment information
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: billing:patient-payment:write
  description: Modify patient payment information
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: billing:read
  description: View billing information.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: billing:write
  description: Modify billing information.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: calendar:read
  description: View your appointments.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: calendar:write
  description: Schedule appointments and modify the data associated with them.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: clinical:read
  description: View clinical information, such as vitals, clinical notes, medications and diagnoses.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: clinical:write
  description: Create and modify clinical information, such as vitals, clinical notes, medications and diagnoses.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: labs:read
  description: View patient lab orders and results.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: labs:write
  description: Create and modify patient lab orders and results.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: messages:read
  description: View messages in your message center.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: messages:write
  description: Create and modify messages in your message center.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: patients:read
  description: View detailed patient information.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: patients:summary:read
  description: View summary information about your patients. This includes patients' name, chart_id, age, and gender.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: patients:summary:write
  description: Create new patients and set their name, chart_id, age, and gender.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: patients:write
  description: Create patients and modify detailed patient information.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: settings:read
  description: View resources that requires Settings permission, such as custom fields.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: settings:write
  description: Create resources that requires Settings permission, such as custom fields.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: tasks:read
  description: View tasks in your tasks center
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: tasks:write
  description: Create and modify tasks in your tasks center
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: user:read
  description: View your basic information.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json
- scope: user:write
  description: Edit select account information, such as creating new exam rooms.
  flows:
  - authorizationCode
  sources:
  - https://app.drchrono.com/api-docs/
  - openapi/_original/drchrono-rest-api-openapi-schema.json

Work with this as data

Every scope set here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for oauth scopes

4 MCP tools reach this

find_scopesBrowse and filter every scope set in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools

Call it yourself

curl for this page

This scope set

curl "https://apis.io/api/v1/scopes/drchrono-scopes"

All oauth scopes

curl "https://apis.io/api/v1/scopes?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.