Mediflo
REST APILocations

Create a location

`code` must be unique within the tenant. Required scope: `locations.write`.

POST/locations

Authorization

ApiKeyAuth
AuthorizationBearer <token>

An external API key, sent as Authorization: Bearer mflo_…. Scopes are checked per route; see each operation’s description.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/locations" \  -H "Content-Type: application/json" \  -d '{    "name": "string",    "code": "string"  }'
{  "data": {    "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",    "name": "string",    "code": "string",    "street": "string",    "city": "string",    "postalCode": "string",    "country": "string",    "fullAddress": "string",    "phone": "string",    "email": "string",    "timezone": "string",    "isActive": true,    "instructions": "string",    "createdAt": "2019-08-24T14:15:22Z",    "updatedAt": "2019-08-24T14:15:22Z"  }}

Update a location PATCH

Required scope: `locations.write`.

Find a patient by phone number (deprecated) GET

An unknown number answers 200 with `found: false` — a new patient is the normal case, not an error, and a 404 here would be an existence oracle. Names are masked; patients are named by an opaque `patientRef`. **Deprecated:** the phone number (and the optional surname) travel in the query string, where proxy logs and error trackers keep them. Use POST /patients/lookup, which takes the same fields in a body and answers identically. This form keeps working. Required scope: `patients.read`.