Overview

What is HealthEx?

HealthEx is building the trusted platform that empowers individuals, and their agents, to work intelligently with personal health context to power seamless, delightful health experiences.

In practice, HealthEx is the identity, consent, and health data context layer for consumer-directed healthcare. Through a single integration, individuals verify their identity, choose which organizations, apps, and AI agents can access their records, and connect a unified clinical history from the care sites they've visited, so your product or agent works from their actual health context.

Three layers, one integration

• Digital identity: IAL2/AAL2 verification, required for automatic record location. Individuals verified with one HealthEx partner arrive pre-verified and pre-consented with the next.
• Unified health records and data: Retrieved through TEFCA Individual Access Services and FHIR endpoints, returned as deduplicated FHIR R4 aligned to USCDI v3. Claims data also available for leading national health plans. We are actively working to further expand the set of data sources and types.
• Consent & permissions: Granular per organization, app, or AI agent, with a full audit trail, instant revocation and active compliance with national and state laws governing health data access and sharing.

Ways to access records: FHIR/CCDA delivery for batch and analytics · FHIR REST API for real-time queries · MCP Server for LLM and agent integrations, with consent enforced on every tool call · AI Skills for health summaries, medication reconciliation, and care-gap detection.

Built on transparency, privacy, and accountability. HealthEx is a Request-Only IAS provider under TEFCA, a DirectTrust accredited network participant, and SOC 2 Type II audited. Records are handled consistent with the HIPAA Privacy Rule under TEFCA's IAS SOPs and encrypted in transit and at rest. Every access is logged, and data moves only on the individual's terms.

HealthEx powers record access today for leading AI platforms, digital health and wellness apps, providers, health plans, and life science teams.

Learn more at healthex.io.

Who can use HealthEx APIs?

In order to use our APIs, your organization must be a provisioned customer of HealthEx. If you are interested in becoming a customer, please contact us.

Getting started

The HealthEx APIs allow organizations to programmatically manage project workflows for consumer-consented clinical context retrieval by initiating patient outreach, discovering and keeping records up to date, automating consent enforcement and validation, and much more.

These APIs are accessible as simple REST APIs, allowing them to be used from any platform or any programming language.

To get started, we recommend you follow our documentation in the following order:

1. Read the Key Concepts section to understand the basics of the HealthEx system if you are unfamiliar.
2. Read the Authentication section to learn how to set up and authenticate with HealthEx.
3. Pick a section below to start building.

Explore the docs

Patients

Add patients to projects, follow their progress through consent and record retrieval, and work with the data they share.

• Adding Patients to Projects
• Patient Flow Progress
• Accessing Patient Data
• Add a Record Location
• Test Patients

Consents

Check what a patient has consented to before you use their data, and audit how that consent was given.

• Basic Consent Checking
• Consent Checking Examples
• About Consent Auditing

MCP Server

Connect AI agents to patient health records, with consent, through the Model Context Protocol and OAuth 2.0.

• MCP Access
• MCP Tools
• OAuth Flow
• Troubleshooting

Org Management

Configure how your organization connects to HealthEx: webhooks, federated login, redirects, and usage reporting.

• Webhooks
• Federated Login
• Hosted Redirect
• Usage

Prefer a non-technical walkthrough? See User Workflows to test HealthEx as a synthetic patient, no API calls required.