Patient Record Import API
API documentation:</strong> Updated for the public patient UUID response behaviour verified on 27 August 2026.</p>
Machine integration:</strong> The API finds or creates the patient synchronously and returns the stable public <code>patient_uuid in the initial response. Clinical extraction, SNOMED resolution, anatomical mapping and audit then continue asynchronously.</code></p>
Open Clinical History provides a REST-style API for submitting patient history documents directly into the clinical-history processing pipeline.
The API endpoint is:
history_api_import.php
For example:
https://www.openclinicalhistory.org/demo/history_api_import.php`
The API can:
patient_uuid immediatelyThe API uses the **same clinical processing pipeline and safety rules as the interactive patient-history importer**importer.
API Processing Flow
A typical API import follows this sequence:
External Clinical SystemProcessing after submission is asynchronous.
A successful import request normally means:
>The patient has been found or created, the source document has been stored, and the document has been accepted for processing.
It does not mean extraction has already completed.
Patient creation or lookup happens synchronously before the document is handed to the asynchronous extraction pipeline. The successful import response therefore includes the patient's stable public `patient_uuid`patient_uuid immediately, even though clinical extraction may still be queued or running.
The sending system should store this `patient_uuid`patient_uuid as its Open Clinical History patient reference. `document_id`document_id remains the identifier for the individual imported source document.
The caller should use the returned `status_url`status_url to monitor processing.
Prerequisites
Before using the API:
queue_worker.php`php must be running.Relevant configuration settings include:
api_enabled
api_require_https
api_default_auto_commit
api_max_upload_mb
queue_enabled
queue_max_attempts
queue_job_timeout
queue_lease_seconds
Authentication
Every API request requires an Open Clinical History API token.
Tokens are created under:
Admin → Configuration → API Tokens**
The preferred authentication method is an HTTP Bearer token:
A fallback header is also supported:
X-API-Token: och_your_token_here`
Bearer authentication should be preferred.
Token security
API tokens are secrets.
They should:
Open Clinical History stores only the SHA-256 hash of the token. The full plaintext token is displayed only once when it is created.
API Scopes
Tokens can carry three scopes.
import
status
commit
A normal integration using automatic commit generally requires the `import`import, `status`status and `commit`commit scopes.
If `auto_commit`auto_commit is enabled for an import, the calling token **must**must have the `commit`commit scope as well as `import`import.
A token without the required scope receives:
HTTP 403`
with:
{
HTTPS
By default:
api_require_https = enabled`
Requests made without HTTPS are rejected.
The API recognises HTTPS through:
X-Forwarded-Proto: https`The latter allows Open Clinical History to operate correctly behind an HTTPS reverse proxy.
HTTPS should remain mandatory for environments containing clinical information.
Response Format
Every API response uses JSON.
Successful response:
{
Error response:
{
Applications should check both:
ok property.API Endpoints
The following actions are available.
ping
import
import
status
status
document
status
commit
commit
queue
status
queue
status + import
It is recommended that callers always specify `action`action explicitly.
Testing the Connection
Use:
GET history_api_import.php?action=ping`
Example:
curl \A successful response resembles:
{
This provides a useful initial connectivity test because it confirms:
Importing a Patient Record
Use:
POST history_api_import.php?action=import`
The preferred request format is:
Content-Type: application/json`
Example request:
{
Import Fields
record_number
Required
Example:
"record_number": "MRN-1001"`
Maximum length:
64 characters`
This is the primary external patient identifier used by the patient-import API.
Open Clinical History searches for an existing patient where:
patient_record_number = supplied record_numberIf found, that patient is reused.
If not found, a new patient is created.
Important
The API is currently a **find-or-create patient API**API, not a demographic-update API.
If the patient already exists, supplying different:
does **not**not update the existing patient record.
The `record_number`record_number should therefore be stable for the lifetime of the patient within the source integration.
display_name
Optional
Example:
"display_name": "Example Patient"`
Used as the patient's human-readable display name when a new patient is created.
It is stored with the patient's attributes.
It is not used as the primary patient-matching key.
dob
Optional
Preferred format:
YYYY-MM-DD`
Example:
"dob": "1967-04-02"`
ISO dates are recommended for all machine integrations.
The API also accepts the date format configured under:
Admin → Configuration → Date format**
For example:
02/04/1967
when the system is configured for `dd/mm/.yyyy`yyyy
Validation
The date:
An invalid value produces:
bad_dob
Machine integrations should always use ISO `YYYY-MM- to avoid regional date ambiguity.DD`DD
sex
Optional
Accepted values are:
female
male
intersex
unknown
Values are case-insensitive.
If omitted:
unknown
is used.
An unrecognised value is currently normalised to:
unknown
rather than causing the request to fail.
source_name
Optional
Identifies the source document.
Example:
"source_name": "cardiology-letter-2026-08-25.txt"`
Default:
api-upload.txt
A meaningful source name is strongly recommended because it makes individual documents easier to identify in Open Clinical History.
text
Required for JSON imports**
Contains the complete unstructured source document.
Example:
"text": "12 March 2018 - Patient admitted with..."`
The document can contain raw clinical text.
It does not need to be pre-classified into clinical events or SNOMED concepts.
Open Clinical History performs that processing.
The document must not be empty.
auto_commit
Optional
Boolean:
"auto_commit": true`
or:
"auto_commit": false`
If omitted, the value comes from:
api_default_auto_commit
in **Admin → Configuration**Configuration.
When `true`true, the API token must have the:
commit
scope.
What auto-commit actually means
Auto-commit does **not**not mean every extracted event is blindly inserted into the patient's clinical history.
After extraction, Open Clinical History performs its normal audit checks.
An event is automatically committed only when it satisfies the safety criteria.
Among other things, a proposal must:
Safe events are committed.
Events that cannot be safely committed are rejected from automatic commit and routed to the unmatched/learning workflow for further resolution.
Conceptually:
Extracted proposal
v
Clinical audit
|
This allows unattended imports without treating every AI-generated proposal as trusted clinical data.
external_ref
Optional but strongly recommended**
Example:
"external_ref": "hospital-a:MRN-1001:discharge:84721"`
This provides request-level idempotency.
If the same import request is retried with the same `external_ref`external_ref, Open Clinical History does not create another import.
Instead, it returns the existing document and its current processing state.
The response includes:
"duplicate": true`
and returns HTTP:
200 OK
rather than creating a second queue item.
Because duplicate responses use the existing document state, they also return the existing `patient_uuid`patient_uuid and `patient_url`patient_url. A retry can therefore recover the Open Clinical History patient identifier even if the caller never received the original `202 response.Accepted`Accepted
This is particularly important when an integration cannot determine whether an earlier HTTP request reached the server.
Recommended external reference design
Use a stable source-system identifier such as:
::
For example:
hospital-a:MRN-1001:document-84721
or:
pms:48392:consultation-998312
The maximum stored length is approximately:
190 characters`
The current implementation searches `external_ref`external_ref globally rather than per token, so integrations should ensure that external references are **globally unique across Open Clinical History**History.
Optional `priority`
priority
The JSON import endpoint also accepts:
"priority": 0`
This controls ordering within the ingest queue.
Allowed effective values are:
-10 to +10`
Higher numbers are processed before lower numbers.
For example:
"priority": 5`
will be processed before a queued document with:
"priority": 0`
Within the same priority, older queue items are processed first.
For normal integrations, leave this at:
unless there is a genuine requirement for priority processing.
Example JSON Import
curl -X POST \Successful Import Response
When queue processing is enabled, a successful import normally returns:
HTTP 202 Accepted`
with a response similar to:
{
The patient identifier is available at this point even though the clinical history has not yet finished processing.
document_id
Open Clinical History identifier for the uploaded source document.
Store this identifier for document-level status monitoring, troubleshooting and reconciliation.
patient_id
Internal numeric Open Clinical History database identifier.
This may refer to:
record_number; orpatient_id is primarily an implementation identifier. External integrations should normally persist `patient_uuid`patient_uuid instead.
patient_uuid
Stable public Open Clinical History patient identifier.
Example:
5ab5c79f-a20d-11f1-bdaf-c6baf601d317This is the identifier used by the patient viewer and is intended to be stored by the sending system as the Open Clinical History reference for that patient.
It is returned immediately in the original `202 import response. The caller does Accepted`Accepted**not**not need to wait for extraction or commit to finish before recording it.
For an existing patient, the API returns that patient's existing UUID. For a newly created patient, the database creates the UUID during patient insertion and the API returns it before queue processing begins.
The `patient_uuid`patient_uuid is also returned by:
document endpointThe current import request still matches patients using `record_number`record_number; `patient_uuid`patient_uuid is a returned Open Clinical History identifier, not currently an import matching field.
patient_url
Relative URL for opening the patient's Open Clinical History viewer.
Example:
/patient.php?p=5ab5c79f-a20d-11f1-bdaf-c6baf601d317This URL is derived from `patient_uuid`patient_uuid.
Integrating systems may store it as a convenience, but `patient_uuid`patient_uuid should be treated as the durable identifier rather than parsing the URL.
queue_id
Identifier of the ingest queue item.
This is useful for queue administration and troubleshooting but is not the patient or document identifier.
queue_position
Number of queued items currently ahead of this item.
Therefore:
0
means no queued items are ahead of it.
Queue positions can change while workers process other records.
state
Immediately after queue submission:
queued
is normally returned.
status_url
Relative URL that can be used to monitor the document.
Example:
/demo/history_api_import.php?action=status&doc=142Authentication is still required when using this URL.
poll_after
Suggested number of seconds before polling again.
In queue mode the API currently returns:
15
seconds.
Clients should respect this value rather than aggressively polling the server.
Importing a File
The API also supports `multipart/form-.data`data
Use a file part named `history`history.
For example:
curl -X POST \When a file is uploaded, its filename becomes the document's `source_name`source_name.
Maximum Document Size
The maximum accepted document size is controlled by:
api_max_upload_mb
under:
Admin → Configuration**
Default:
2 MB`
The limit applies to both:
text
history filesDocuments exceeding the limit receive:
HTTP 413 Payload Too Large`
with error code:
too_large
Character Encoding
Clinical text is expected to be UTF-8.
If uploaded text is not valid UTF-8, the current importer attempts to convert it from:
ISO-8859-1`
to UTF-8 before storing it.
Integrating systems should supply UTF-8 directly wherever possible.
Duplicate Source Documents
Open Clinical History also calculates a SHA-256 hash of the normalised document text.
For a given patient, if identical document content has already been stored, the existing document can be reused rather than storing another physical copy.
However:
> `external_ref`
external_refshould still be used as the integration's primary idempotency mechanism.
The document hash protects against identical content. `external_ref`external_ref identifies the source-system transaction/document itself.
Monitoring an Import
Use:
GET history_api_import.php?action=status&doc=<document_id>`
Requires:
status
scope.
Example:
curl \Import States
The high-level API `state`state may be:
queued
extracting
extracted
committed
failed
cancelled
A typical automatic-import sequence is:
queued
Without auto-commit:
queued
The client can then explicitly call the `commit`commit endpoint.
Example Status Response
A completed status response can resemble:
{
The exact values depend on the document and current pipeline stage.
The `patient_uuid`patient_uuid remains the same throughout the lifecycle of the import. A client that did not persist the UUID from the initial import response can recover it from `status`status or `document`document.
Understanding the Status Response
patient_uuid
Stable public Open Clinical History identifier for the patient associated with this document.
This value can be persisted by the source system and used to correlate future Open Clinical History links or references to the same patient.
patient_url
Relative viewer URL constructed from `patient_uuid`patient_uuid.
document_state
The current status stored against the source document itself.
This is distinct from the high-level API `state`state.
For normal integrations, `state`state should generally be used to decide what action to take next.
char_count
Number of characters in the stored source document.
queue
Contains ingest-queue information when queue mode is enabled.
queue.state
Possible queue-level states are:
queued
running
done
failed
cancelled
attempts
Number of times a worker has claimed the queue item.
A worker claim counts as an attempt even if that worker subsequently disappears.
max_attempts
Maximum number of processing attempts permitted before the item is permanently parked as failed.
last_error
The most recent queue processing error, if any.
A job that fails and is automatically retried may therefore have a `last_error`last_error while returning to:
queued
Extraction Progress
The `extraction`extraction object provides lower-level information about the extraction worker.
It may contain:
state
phase
chunks_total
chunks_done
events
requests
tokens
started
updated
errors
This can be used to provide richer progress information to an integrating application.
The `extraction`extraction object may be `null`
null
before a worker job has been created.
Proposal Counts
The status response contains:
{
These are the extracted clinical event proposals associated with the document.
proposed
Events that still await a final decision.
committed
Events accepted into the patient's clinical history.
rejected
Events not automatically committed.
Rejected does not necessarily mean that the extracted clinical statement was incorrect.
It may mean that Open Clinical History could not safely establish:
Such events can be routed through the unmatched/learning process.
A Note About the Top-Level `queued`queued Value
There are two different queue concepts in the API response.
queue
The object:
{
describes the **document ingest queue**queue.
queued
The top-level numeric value:
"queued": 2`
after the audit stage means that two extracted clinical events were routed to the **unmatched/learning workflow**workflow rather than automatically committed.
It does **not**not mean there are two documents ahead of this document in the ingest queue.
Status by Job Identifier
Status can also be requested using the extraction job identifier:
GET history_api_import.php?action=status&job=<job>`
Example:
curl \Job identifiers are 16 lowercase hexadecimal characters.
For most integrations, monitoring by `document_id`document_id is simpler.
Status responses resolved from a job identifier also include the associated `patient_uuid`patient_uuid and `patient_url`patient_url once the document is identified.
Document Endpoint
Use:
GET history_api_import.php?action=document&doc=<document_id>`
Requires:
status
scope.
Example:
curl \The current implementation returns the same assembled document-processing view used by document-based status requests.
That view includes `patient_id`patient_id, `patient_uuid`patient_uuid and `patient_url`patient_url, so the Open Clinical History patient reference can be recovered from a known `document_id`document_id.
This endpoint provides a semantic way for an integration to request the current summary for a known document.
Manual Commit
If the document was imported with:
"auto_commit": falsethe normal completed state is:
extracted
To run the audit and commit stage:
POST history_api_import.php?action=commit&doc=<document_id>Requires the:
commit
scope.
Example:
curl -X POST \A successful response resembles:
{
Again:
committed is the number of clinical events accepted into the clinical history.
queued is the number routed to the unmatched/learning workflow.
The returned `patient_uuid`patient_uuid is the same stable public patient identifier supplied during the original import.
Commit While Extraction Is Running
The API will not allow a document to be committed while extraction is still active.
It returns:
HTTP 409 Conflict`
with:
still_extracting
The response includes a `status_url`status_url that should be polled until extraction has finished.
Ingest Queue
When:
queue_enabled = true`
API imports are placed into the controlled ingest queue.
This prevents a burst of API submissions from launching an unlimited number of LLM extraction processes.
The queue worker processes them in a controlled sequence.
Inspecting the Queue
Use:
GET history_api_import.php?action=queue`
Requires:
status
scope.
Example:
curl \The response includes:
By default the most recent `25`25 items are returned.
A custom limit can be supplied:
?action=queue&limit=50`
The API permits between:
1 and 100`
items through this endpoint.
Inspecting One Queue Item
Use:
GET history_api_import.php?action=queue&id=<queue_id>`
For example:
curl \The response includes the queue item and its current position.
Retry a Failed Queue Item
A failed or cancelled item can be reset and submitted again.
Use:
POST history_api_import.php?action=queue&id=<queue_id>&op=retry`
Requires both:
status
import
scopes.
Retry:
queued
Cancel a Queue Item
Use:
POST history_api_import.php?action=queue&id=<queue_id>&op=cancel`
Requires:
status
import
scopes.
Cancellation is allowed when the queue item is:
queued
or:
failed
A currently running worker is not cancelled by this endpoint.
Automatic Queue Retries
If processing fails, the queue automatically retries until `queue_max_attempts`
queue_max_attempts
has been reached.
Retry delay uses increasing quadratic backoff.
Conceptually, with successive failed attempts:
attempt 1 -> wait 60 seconds`
attempt 2 -> wait 240 seconds`
attempt 3 -> wait 540 seconds`
The delay is capped at one hour.
Once all allowed attempts have been exhausted, the item is marked:
failed
Worker Leases
When a worker claims a queue item, it receives a temporary lease.
The lease is controlled by `queue_lease_seconds`queue_lease_seconds.
Workers extend their lease while long-running extraction is taking place.
If a worker crashes and its lease expires, the item can be returned to the queue rather than remaining permanently stuck in:
running
Recommended Client Workflow
A robust integration should use the following pattern:
1. Generate stable external_refThe critical distinction is:
patient_uuid identifies the patient in Open Clinical History.document_id identifies this particular imported source document.external_ref identifies the source-system submission/document for idempotency.queue_id identifies the temporary ingest work item.Do not continuously resubmit the original document while waiting.
Poll the status endpoint instead.
If network uncertainty makes a resubmission necessary, send the **same `external_ref`**external_ref. If the original request was already accepted, the duplicate response returns the existing document state and `patient_uuid`patient_uuid.
Recommended Polling Behaviour
After submission, use the returned:
"poll_after": 15`
value.
A simple client strategy is:
Submit
There is no need to poll every second.
Clinical extraction may involve several model requests and can take some time for large documents.
Idempotent Retry Example
Initial request:
{
Suppose the client's connection fails before it receives the response.
The client may safely resend:
{
If the original submission was already accepted, the API returns the existing request with:
"duplicate": true`
rather than intentionally creating another import.
Patient Matching Behaviour
Patient matching deserves particular attention when designing an integration.
Open Clinical History currently matches imported patients using:
patient_record_number
+
source_system = history_import`
It does **not**not currently match using:
Therefore:
MRN-1001
must consistently refer to the same patient.
Existing patient
If the patient already exists, the API reuses that patient.
New record number
If it does not exist, the API creates a new patient.
Consequently, changing a patient's external record number can create another Open Clinical History patient rather than updating the existing one.
Relationship between `record_number`record_number and `patient_uuid`
patient_uuid
These identifiers serve different purposes:
record_number
patient_id
patient_uuid
For subsequent imports for the same patient, the source system should continue to send the same `record_number`record_number.
The source system should also retain the returned `patient_uuid`patient_uuid so it has a durable Open Clinical History reference for that patient.
The current API does not require or accept `patient_uuid`patient_uuid as the patient matching key on import.
Patient Asset Set
When a patient is first created by this API, `sex = selects the male`male`male`male anatomical asset set.
The current implementation uses the:
female
asset set for the other sex values.
This affects the anatomical visual layers used when displaying the patient's history.
Date Handling Recommendation
Although Open Clinical History can accept the configured display format, integrations should always send:
YYYY-MM-DD`
For example:
"dob": "1971-09-05"`
rather than:
"dob": "05/09/1971"`
This makes the payload independent of the user-interface date configuration and avoids ambiguity between Australian and US date formats.
HTTP Status Codes
Common HTTP responses include:
200
202
400
401
403
404
405
409
413
422
500
503
Common API Error Codes
Authentication
missing_token
invalid_token
insufficient_scope
Configuration
not_configured
api_disabled
https_required
queue_disabled
Request format
bad_json
method_not_allowed
unknown_action
missing_target
Document import
missing_text
empty_document
too_large
upload_failed
missing_record_number
bad_record_number
bad_dob
store_failed
link_failed
patient_uuid_missing
Processing
still_extracting
bad_job
not_found
Queue management
unknown_op
not_applicable
Example Error
An invalid date may return:
HTTP 400`
{
Applications should use the machine-readable `error. for program logic and treat code`code`error. as diagnostic information.message`message
Queue Worker Requirement
When the ingest queue is enabled:
queue_enabled = true`
submitting a document does **not**not directly perform extraction.
It creates a queue item.
At least one instance of:
queue_worker.php
must therefore be running.
If no worker is running, submissions can still return `202 but will remain in:Accepted`Accepted
queued
until a worker becomes available.
Queue health should therefore be monitored as part of production operations.
Behaviour Without the Queue
If the `ingest_queue`ingest_queue table is unavailable or:
queue_enabled = false`
the API falls back to its earlier behaviour and spawns an extraction worker for each import.
The response still returns `202 but contains a job identifier rather than queue information.Accepted`Accepted
The response still includes `patient_id`patient_id, `patient_uuid`patient_uuid and `patient_url`patient_url, so the public patient reference is available immediately in this mode as well.
The suggested poll interval becomes:
5 seconds`
This mode is unbounded and is less appropriate for burst or high-volume integrations.
The controlled ingest queue is recommended.
API Security Model
API permissions are capability based.
A token with:
status
scope can currently query API document and queue status generally.
A token with:
commit
scope can request a commit for a supplied document identifier.
The current API does not restrict documents to the token that originally submitted them.
Therefore:
>API tokens should currently be treated as trusted integration credentials for the Open Clinical History installation, rather than as isolated per-patient or per-tenant credentials.
Use least-privilege scopes and issue separate tokens for different integrations where appropriate.
Suggested Integration Requirements
A production integration should:
record_number
source_name
external_ref
patient_uuid as the durable Open Clinical History patient referencedocument_id for document-level monitoring and reconciliationpatient_id as an internal numeric identifier rather than the preferred external referencestatus_url or reconstruct it from document_id
poll_after
external_ref when retrying an uncertain submissionMinimum JSON Request
The smallest valid JSON import is:
{
All other fields have defaults or are optional.
For a real integration, however, the recommended payload is:
{
Recommended Production Sequence
Create API tokenThe Open Clinical History patient reference is available before asynchronous clinical processing finishes. There is therefore no need for a source system to wait until `committed`committed before recording the relationship between its own patient and the Open Clinical History patient.
Summary
history_api_import. provides the machine-to-machine entry point into the Open Clinical History patient-processing pipeline.php`php
The API deliberately separates:
Patient find/createThis means external systems can provide **raw, unstructured clinical records**records while Open Clinical History performs the extraction, SNOMED classification, anatomical mapping and clinical-safety checks required to turn those records into a longitudinal patient history.
The external system does not need to pre-classify the clinical content before submission.
It also does not need to wait for processing to finish before receiving the Open Clinical History patient identifier. The initial successful import response provides:
patient_uuid — the stable public patient identifierpatient_url — a convenience link to the patient viewerdocument_id — the specific imported source documentexternal_ref — the source-system idempotency referencestatus_url — the endpoint used to monitor asynchronous processingFor integrations, `patient_uuid`patient_uuid should be stored as the durable Open Clinical History patient reference, while `document_id`document_id should be stored for tracking the lifecycle of each imported document.