Medical record retrieval, as an API

# 1. Create the case the records belong to
curl -X POST https://enterprise.tavrn.ai/v2/cases \
  -H "Authorization: Bearer $TAVRN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "title": "Doe v. Example Motors", "client_name": "Jane Doe",
        "client_date_of_birth": "1980-01-15" }'

# 2. Upload the signed HIPAA authorization: get a presigned URL, then PUT the PDF to it
curl -X POST https://enterprise.tavrn.ai/v2/cases/{case_id}/sign-upload \
  -H "Authorization: Bearer $TAVRN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{ "file_name": "jane_doe_hipaa.pdf", "file_type": "application/pdf",
        "purpose": "retrieval_attachment" }'
# → { "upload_id": "...", "upload_url": "https://…", "expires_at": "..." }
curl -X PUT "{upload_url}" -H "Content-Type: application/pdf" --upload-file jane_doe_hipaa.pdf

# 3. Request records from one provider, with the signed authorization attached
curl -X POST https://enterprise.tavrn.ai/v2/cases/{case_id}/retrieval-requests \
  -H "Authorization: Bearer $TAVRN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "patient":  { "name": "Jane Doe", "date_of_birth": "1980-01-15" },
    "facility": { "name": "Example Medical Center", "address_line1": "100 Main St",
                  "city": "Los Angeles", "state": "CA", "zip_code": "90001" },
    "requested_records": [ { "type": "medical_records" }, { "type": "billings" } ],
    "auth_form": { "upload_id": "{upload_id}", "file_name": "jane_doe_hipaa.pdf" }
  }'

# → { "id": "...", "order_number": "...", "status": "received" }

import { readFile } from 'node:fs/promises';

const base = 'https://enterprise.tavrn.ai/v2';
const headers = {
  Authorization: `Bearer ${process.env.TAVRN_API_KEY}`,
  'Content-Type': 'application/json',
};

// 1. Create the case the records belong to
const kase = await fetch(`${base}/cases`, {
  method: 'POST',
  headers,
  body: JSON.stringify({ title: 'Doe v. Example Motors', client_name: 'Jane Doe' }),
}).then((r) => r.json());

// 2. Upload the signed HIPAA authorization: get a presigned URL, then PUT the PDF to it
const { upload_id, upload_url } = await fetch(`${base}/cases/${kase.id}/sign-upload`, {
  method: 'POST',
  headers,
  body: JSON.stringify({ file_name: 'jane_doe_hipaa.pdf', file_type: 'application/pdf',
                         purpose: 'retrieval_attachment' }),
}).then((r) => r.json());
await fetch(upload_url, {
  method: 'PUT',
  headers: { 'Content-Type': 'application/pdf' },
  body: await readFile('jane_doe_hipaa.pdf'),
});

// 3. Request records from one provider, with the signed authorization attached
const request = await fetch(`${base}/cases/${kase.id}/retrieval-requests`, {
  method: 'POST',
  headers,
  body: JSON.stringify({
    patient: { name: 'Jane Doe', date_of_birth: '1980-01-15' },
    facility: { name: 'Example Medical Center', address_line1: '100 Main St',
                city: 'Los Angeles', state: 'CA', zip_code: '90001' },
    requested_records: [{ type: 'medical_records' }, { type: 'billings' }],
    auth_form: { upload_id, file_name: 'jane_doe_hipaa.pdf' },
  }),
}).then((r) => r.json());

console.log(request.status); // "received"

import os, requests

base = "https://enterprise.tavrn.ai/v2"
headers = {"Authorization": f"Bearer {os.environ['TAVRN_API_KEY']}"}

# 1. Create the case the records belong to
case = requests.post(f"{base}/cases", headers=headers, json={
    "title": "Doe v. Example Motors", "client_name": "Jane Doe",
}).json()

# 2. Upload the signed HIPAA authorization: get a presigned URL, then PUT the PDF to it
upload = requests.post(f"{base}/cases/{case['id']}/sign-upload", headers=headers, json={
    "file_name": "jane_doe_hipaa.pdf", "file_type": "application/pdf",
    "purpose": "retrieval_attachment",
}).json()
with open("jane_doe_hipaa.pdf", "rb") as pdf:
    requests.put(upload["upload_url"], data=pdf, headers={"Content-Type": "application/pdf"})

# 3. Request records from one provider, with the signed authorization attached
request = requests.post(f"{base}/cases/{case['id']}/retrieval-requests", headers=headers, json={
    "patient": {"name": "Jane Doe", "date_of_birth": "1980-01-15"},
    "facility": {"name": "Example Medical Center", "address_line1": "100 Main St",
                 "city": "Los Angeles", "state": "CA", "zip_code": "90001"},
    "requested_records": [{"type": "medical_records"}, {"type": "billings"}],
    "auth_form": {"upload_id": upload["upload_id"], "file_name": "jane_doe_hipaa.pdf"},
}).json()

print(request["status"])  # "received"

Base URL https://enterprise.tavrn.ai · Bearer API key · JSON · API reference · OpenAPI. Testing with a sandbox key? Run the same calls against https://sandbox.tavrn.ai/v2 — each host rejects the other’s keys.