Imaging

X-rays and clinical photos are attached to the patient file. Files are kept in S3-compatible object storage; never in the database.

Early Access All API

Endpoints

3 endpoint

Endpoints for this resource. Every endpoint is scoped to the clinic data the API key is bound to; write endpoints support the Idempotency-Key header.

GET /v1/patients/{id}/images Lists the patient's images (X-ray/photo) All authorized roles

POST /v1/patients/{id}/images Uploads an image (S3, stream/presigned) admin · physician · secretary

GET /v1/images/{id}/raw Downloads the image file (presigned) All authorized roles

Example Usage

List the patient's images

Request

curl https://api.udentiva.com/v1/patients/{id}/images \
  -H "Authorization: Bearer udk_live_xxx"

Response

HTTP/1.1 200 OK
[
  {
    "id": "img-55",
    "kind": "panoramic",
    "url": "https://s3.../signed?expires=...",
    "created_at": "2026-06-24T09:20:00Z"
  }
]

Security in this resource

Security isn't a feature, it's the architecture itself. The guarantees that apply to this resource:

Large files (X-rays) are never written to the BFF disk; they go directly to S3 as stream/presigned.

Raw file access is granted via a time-limited signed (presigned) link; even if the link leaks, it expires.

All images are isolated to the patient and the clinic (RLS); an unauthorized clinic cannot access them.

Full security model →

Error Format

Errors are returned in a consistent envelope; the code is for the machine, the message for the user. Internal error/stack is never leaked.

{
  "error": {
    "code": "validation_failed",
    "message": "Invalid field: email"
  }
}

Other Resources

রোগীগণ Scheduling & Calendar Odontogram & Treatment Collections & Finance স্টক ল্যাব Lead & CRM স্বাস্থ্য পর্যটন Reporting & BI Webhooks Data Transfer (Export API)

Want early access?

Be the first to know when the API opens.

যোগাযোগ করুন