Skip to main content
Once authentication succeeds, the response includes a token field containing a Bearer Token. Send it as a Bearer Token in the Authorization header of every subsequent request.
1

Get a token

POST /auth/token with your client_id and client_secret. The JWT is valid for six hours.
2

List organizations and locations

GET /organizations lists the parent companies you can access. GET /locations (optionally filtered by organization_id) lists their locations with the id you need next. In v2 this list is paginated with page.
3

Request a slot for the location

POST /locations/{location_id}/slots returns a request_key valid for six hours.
4

Pull the location's data

Call any data endpoint with the header X-Vendor-Request-Key: <request_key>. There is no location_id in v2 data URLs.
Fetch everything you need for this location before requesting the next slot. A firm can hold at most 10 active slots; see Concurrency Limits.

​
Organizations

An organization represents the list of accessible locations under a specific parent company owned by a dental group.

​
Locations

Each organization has one or more locations accessible to the authenticated account. In most cases an organization has a single location. Multi-location practices share an organization but each location keeps its own distinct set of data, so you request a slot per location.