| Access | Credentials and base URL (staging/production) are requested from [email protected]. |
| API | Authentication with X-API-Key and X-API-Secret. JSON format. 1000 requests/hour limit. |
| Endpoints | POST /consultations (create), GET /consultations/{id} (detail), GET /providers (list), GET /organizations/profile (profile). |
| Dates | Format yyyy-MM-dd HH:mm; organization timezone. |
| Webhooks | Always verify the signature (HMAC-SHA256 of body, lowercase hex). Return 200 if OK, 401 if signature invalid. Events: consultation.created/expired/completed, session_started, session_ended. |
