BloomText API
The BloomText API brings your BloomText account into your own software: text patients and read their replies, keep patient records in step with your EHR, and keep staff, organizations and teams in step with your HR or identity system. An account’s Owners and IT create API keys and choose the organizations each one reaches.
Patient API
Text patients by phone number or patient ID, keep patient records in step with your EHR, and read what patients wrote back. No person signs in.
Start the Patient API quickstart →Staff and organizations
Add, change and remove staff and their teams across your account’s organizations from your HR or identity system, alongside Okta single sign-on and Directory Sync.
Manage members →OAuth
Let a person connect their BloomText account to your app, then work in their own conversations, team chats and patient conversations alike.
Start the OAuth quickstart →Every path starts with an API key an account Owner or IT person creates. See Authentication for scopes and limits.
What you can build
How it works
Your server texts a patient and reads the reply with an API key. No one signs in.
- BloomText turns on API access for your account, and an Owner or IT person creates an API key under Settings → Account → API keys, choosing its scopes and the organizations it reaches.
- Your server messages patients, manages patient records, and keeps staff and teams in step with your HR or identity system.
- If your staff sign in with Okta, SSO and Directory Sync can manage people instead, and the API sees who manages each membership.
The OpenAPI spec
Every endpoint is described in an OpenAPI spec you can download, feed to a client generator, or import into tools like Okta Workflows and Postman. The API reference is generated from it.
- OpenAPI 3.1 (YAML) · The source of every reference page.
- OpenAPI 3.1 (JSON) · The same spec, for tools that import JSON.
- OpenAPI 3.0 · For Okta Workflows and other tools that read 3.0.
- Swagger 2.0 · For Microsoft Power Automate connectors.
api_key variable. If your key reaches several organizations, set org_id and switch on that parameter.Turned on when you ask
Some features are turned on per account when you ask. They’re documented in full, and each page has a Request access button that books a call: webhooks, API identities, phone-number limits on keys, campaigns, patient imports, the audit events API, and OAuth. Everything else on these pages works today.
Access
API access requires a signed BAA. Request API access to get started, and see Security and BAA for how the API protects patient data.
Don’t include patient information in your access request. The form isn’t a secure channel.