Field Medical · Authentication Profile

Field Medical Authentication

Authentication

Field Medical secures its APIs with none and bearer-visitor-token across 2 declared security schemes, as derived from its OpenAPI definitions.

CompanyMedical DevicesHealthcareCardiologyMedical TechnologyClinical ResearchMCP

Methods: none, bearer-visitor-token Schemes: 2 OAuth flows: API key in:

Security Schemes

anonymous-jsonrpc none

wix-visitor-token http

scheme: bearer

Source

Authentication Profile

generated: '2026-08-12'
method: probed
source: https://www.fieldmedicalinc.com/_api/mcp
scope: Applies ONLY to the Wix-provided site MCP endpoint served at Field Medical's
  domain. Field Medical publishes no developer portal, no REST/GraphQL API and no
  authentication documentation of its own; there is no OpenAPI in this repo to derive
  securitySchemes from. Everything below was observed live, not read from a provider
  auth page.
summary:
  types:
  - none
  - bearer-visitor-token
  api_key_in: []
  oauth2_flows: []
schemes:
- name: anonymous-jsonrpc
  type: none
  applies_to:
  - tools/list
  - initialize
  - GetBusinessDetails
  - SearchInSite
  - SearchSiteApiDocs
  evidence: POST https://www.fieldmedicalinc.com/_api/mcp with no credentials returned
    HTTP 200 and the full nine-tool manifest on 2026-08-12.
  sources:
  - mcp/field-medical-mcp-tools.json
- name: wix-visitor-token
  type: http
  scheme: bearer
  applies_to:
  - CallWixSiteAPI
  - ExecuteWixAPI
  obtained_via: GenerateVisitorToken (MCP tool, no credentials required)
  evidence: 'visitorToken is a required inputSchema property on CallWixSiteAPI and
    ExecuteWixAPI in the live tools/list response; the published tool description states:
    "You must use this tool before calling CallWixSiteAPI".'
  sources:
  - mcp/field-medical-mcp-tools.json
  - llms/field-medical-llms.txt
notes:
- A plain GET on https://www.fieldmedicalinc.com/_api/mcp returns HTTP 401; the endpoint
  answers JSON-RPC POST only.
- No OAuth 2.0 / OIDC discovery is served — /.well-known/oauth-authorization-server,
  /.well-known/oauth-protected-resource and /.well-known/openid-configuration all
  returned HTTP 400 HTML (see well-known/field-medical-well-known.yml).

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/field-medical-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.