Luna Salud API · For enterprise & developers

The medical API for clinical data in Mexico.

Build on appointments, patients, clinical records, labs and biomarkers through one secure REST API — built to Mexico's NOM-004 standard, with data hosted in Mexico. Read-only by design, so you can connect it with confidence.

NOM-004
Mexican clinical-record norm
8+
REST endpoints
Webhooks
Real-time events
🛡️
Compliant by designNOM-004 · AES-256 · TLS
bash — api.lunasalud200 OK
# Fetch your organization's appointments
curl https://account.lunahealth.app/api/appointments \
  -H "Authorization: Bearer YOUR_API_KEY"
{
  "items": [
    {
      "id": "apt_8f2c",
      "status": "CONFIRMED",
      "start_time": "2026-07-24T10:00:00Z",
      "patient": { "first_name": "Maria" },
      "service": { "name": "General consult" }
    }
  ],
  "meta": { "total": 42, "page": 0 }
}
🔒
AuthenticatedBearer token · read-only

Connect Luna Salud with the tools your team already runs on

📊 Power BI📗 Google Sheets📈 Looker Studio🧮 Snowflake · Excel⚡ Zapier · Make🤖 AI agents🧾 Your ERP / CRM
What you can build

Your clinical data, working across your stack

Programmatic access to your organization's data so you can use it in your own systems — no manual exports, no stale spreadsheets, no compliance gray areas.

📊

Custom reporting

Feed Power BI, Looker Studio, Snowflake, Google Sheets or Excel with your clinics' real metrics, always current.

📈

Real-time dashboards

Build executive and operational dashboards for appointments, capacity, patients and revenue across sites.

🔌

Enterprise integrations

Connect Luna to your accounting, CRM, ERP or data warehouse so information flows without double entry.

🧪

Clinical & lab monitoring

Sync lab tests, results and biomarkers into surveillance workflows or population-health dashboards.

🤖

AI agents & copilots

Give your AI assistant structured, permissioned access to the clinical record for grounded, source-backed answers.

🌐

Custom portals & apps

Build tailored experiences for patients or providers on the same single source of truth your organization uses.

The API surface

REST endpoints for every part of your practice

Every endpoint is read-only (GET), returns JSON and supports pagination. Base URL: https://account.lunahealth.app/api

📅

Appointments

Query scheduling activity with filters by date range, status and patient.

GET/appointmentsAppointment list
👥

Patients

Access your organization's patient directory and each individual patient profile.

GET/patientsDirectory
GET/patientProfile by ID
📋

Clinical records

Retrieve clinical notes and the structured chart: encounters, vitals, allergies, diagnoses and procedures.

GET/patient-chartsNotes & chart
🧪

Labs & biomarkers

Query lab tests and each patient's biomarkers — values, units and reference ranges included.

GET/biomarkersBiomarkers
GET/lab-testsLab tests
GET/lab-test-biomarkersPer-test detail
🔔

Webhooks

Receive automatic notifications when new lab results are uploaded or biomarkers are updated. Read your active configuration.

GET/webhooks/configConfiguration
🔑

Authentication

Every request carries your API key in the Authorization header with the Bearer prefix. Keys are issued from your account settings.

AUTHBearer YOUR_API_KEYPer organization

Looking for every parameter and response example? Read the full technical documentation →

Get started in minutes

Your first request in 3 steps

No mandatory SDK, no heavy setup. If your language speaks HTTP, it can already talk to Luna Salud.

  1. 1

    Issue your API key

    An administrator generates it from account.lunahealth.app, under Settings → API. The key grants read-only access scoped to your organization.

  2. 2

    Authenticate with Bearer

    Include the key in the Authorization: Bearer … header of every request. Keep it server-side only, never in the browser.

  3. 3

    Query & automate

    Call any endpoint, paginate with page and rowsPerPage, and subscribe to webhooks to react in real time.

example — biomarkers200 OK
# A patient's critical biomarkers
curl "https://account.lunahealth.app/api/biomarkers?patientId=pat_456&status=CRITICAL" \
  -H "Authorization: Bearer YOUR_API_KEY"
{
  "items": [
    {
      "name": "Fasting glucose",
      "value": 148,
      "unit": "mg/dL",
      "status": "CRITICAL",
      "reference_range": "70-99"
    }
  ],
  "meta": { "total": 3, "rowsPerPage": 50 }
}
Built for engineering teams

Standard, predictable and secure by design

No surprises: REST over HTTPS, clean JSON, and a read-only surface that can't break your data.

🧩

Standard REST

HTTP + JSON over HTTPS. Works with any language or platform — no proprietary client required.

📄

Clean responses

Consistent JSON with pagination metadata (page, rowsPerPage, total) on every list.

👁️

Read-only

The API reads, never writes. Connect it with confidence — no risk of altering clinical records.

🏢

Organization-scoped

Your key only ever sees your organization's data. Tenant isolation comes built in.

Real-time webhooks

Get lab and biomarker events as they happen instead of polling in a loop.

📚

Full documentation

Parameters, examples and responses documented at docs.lunasalud.mx so teams ship fast.

Security & Compliance

One API, two regulatory worlds

Built for organizations that answer to both U.S. and Mexican healthcare requirements. Luna Salud is HIPAA-aligned and built to Mexico's NOM-004-SSA3 clinical-record standard — so foreign entities operating in Mexico get a single, compliant source of clinical data.

🔒
HIPAA-alignedProtected health information handled to the U.S. standard
🇲🇽
NOM-004-SSA3Structured to Mexico's clinical-record regulation
🛡️
AES-256 encryptionData encrypted in transit (TLS) and at rest
🇲🇽
Data residency in MexicoPatient data stored in-country, under your control
🛡️

Your data, under your control

Patient data belongs to your organization. The API is read-only, access is organization-scoped, and keys are issued and revoked from your account at any time.

HIPAA-alignedNOM-004-SSA3AES-256 · TLSRead-onlyData in Mexico
Frequently asked questions

The Luna Salud Medical API, explained

It's a REST API for programmatically reading your Luna Salud account data: appointments, patients, clinical records, lab tests and biomarkers. It's built for clinics, labs and healthcare enterprises operating in Mexico — including foreign companies — that need to connect clinical data with reports, dashboards, other systems or AI agents.

The API runs on Luna Salud's HIPAA-aligned infrastructure: protected health information is handled to the U.S. HIPAA standard, encrypted with AES-256 in transit and at rest, and accessed with per-organization API keys. It's a strong fit for U.S. and international entities that must meet HIPAA while operating in Mexico.

Yes. Clinical data is structured in line with Mexico's NOM-004-SSA3 standard for the electronic clinical record, and patient data is hosted in Mexico. This lets a single API satisfy both HIPAA expectations and Mexican regulatory requirements at once.

Patient data is hosted in Mexico and remains your organization's property. The API is read-only and access is scoped to your organization, so data residency and tenant isolation are handled by default.

No. The Luna Salud API is read-only: you can query information but cannot create, edit or delete records. This is a security design choice, so you can connect it without any risk of altering clinical records.

The main endpoints are /appointments, /patients, /patient, /patient-charts, /biomarkers, /lab-tests, /lab-test-biomarkers and /webhooks/config. All use the GET method and return paginated JSON.

An administrator generates it from account.lunahealth.app, under Settings → API or Integrations. The key identifies your organization and goes in the Authorization: Bearer header of every request. You can regenerate it at any time if it's ever compromised.

Any language that can make an HTTP request — JavaScript/Node, Python, PHP, Go, Java and more — plus no-code platforms like Zapier or Make, and BI tools such as Power BI, Looker Studio, Snowflake and Google Sheets.

The full documentation, with every parameter, request example and response, lives at docs.lunasalud.mx. It covers each endpoint and how to authenticate.

✨ Available now

Build on compliant
clinical data in Mexico

Issue your API key, read the docs, and connect Luna Salud's clinical data with the tools your team already uses — HIPAA-aligned and NOM-004 ready.