---
title: "Medical record retrieval API for AI companies and agents"
description: "Medical record retrieval API for any US provider: one signed authorization, a webhook on every status change, structured documents. Agents: tavrn.ai/agents.md"
canonical: https://www.tavrn.ai/solutions/agents
updated: 2026-10-16
---

# Medical record retrieval, as an API

One authorization in, complete record out. Create a case, request records from any US provider, get a webhook on every status change, and download structured documents into your product or agent.

## Get complete records without waiting weeks.

### Retrieval as an endpoint for your product or agent

REST API: a webhook fires on every status change. Plain JSON, SDK-free, documented.

### Fees you can see and control

Provider fees passed through at exact cost, under an approval threshold you set.

- **Automated follow-up** — Every open request is followed up automatically every 48 hours.
- **Missing records agent** — Checks every delivery against the request and goes back to the provider for anything missing.
- **Live status on every provider** — Per-provider status, provider-stated dates, and full history on every request

## FAQ

## How do I get an API key?

Test keys are self-serve: sign up at sandbox.tavrn.ai with a work email and get a tavrn_sk_test_ key for synthetic data in a minute. Production keys are issued to customer organizations in the Tavrn dashboard after a 30-minute call. The sandbox never touches production systems or protected health information; the call covers your use case, volumes and the BAA.

## How does authentication work?

Send your key as a Bearer token on every request. Keys start with tavrn_sk_live_ and are scoped to your organization; rotate them from the dashboard.

## What does the patient have to sign?

One HIPAA authorization per patient. Upload the signed PDF through the sign-upload endpoint and reference it as auth_form on each retrieval request; Tavrn handles every provider’s own forms from there.

## How do I know when records are ready?

Subscribe a webhook (POST /v2/webhooks) and a signed delivery fires on every status change, or poll GET /v2/retrieval-requests/{id}: received → processing → completed, with action_required when the team needs something from you.

## Which record types can I request?

Medical, billing and imaging lines on one request: medical_records, medical_records_er, medical_records_mental_health, abstract_medical_records, radiology_reports, rfc and the other 11 types in the reference, plus custom_* with your own label.

## Can an AI agent use Tavrn on my behalf?

Yes. An agent can read agents.md, answer your questions from it, test against the sandbox with a key you create there, and book the call for you. Live record requests still need your organization’s production key and the patient’s signed authorization.

## What types of records can Tavrn retrieve?

Medical records, billing records, radiology images, accident reports and insurance coverage from any US provider.

## Which providers can Tavrn reach?

Around 425,000 provider organizations across all 50 states and DC: the health-data networks plus the long tail that only answers fax, portal, mail, email or phone.

## How long does retrieval take?

Requests go to the provider the same day. Every open request is followed up automatically every 48 hours, and you see per-provider status and provider-stated dates live.

## Does Tavrn replace our existing system?

No. Start requests from the Tavrn app or connect your own system over the API and webhooks; records land back where you work.

## How long does it take to get started?

Requests can start the day your team gets access to the Tavrn app; API keys are issued in the Tavrn dashboard after a 30-minute call.

## Do we need to use a separate portal?

No. Start requests from the Tavrn app or through the API, and records land back where you already work.

## Book a demo

See a request go out and the records come back.

[Book a demo](https://www.tavrn.ai/demo)