Prescription API
Sign prescription
Sign a clinically validated prescription to make it active and immutable.
POST
/prescriptions/{id}/signOAuth 2.0prescriptions.sign201 CreatedAuthentication
OAuth 2.0
Required
Permissions
prescriptions.sign
Required
Rate limit
300 requests / min
Default
Caching
No caching
Not applicable
Response
201 Created
Path parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
| id | uuid | Yes | Prescription identifier |
Request headers
| Header | Type | Required | Description |
|---|---|---|---|
| Idempotency-Key | string | No | Prevents duplicate signing |
Request body
| Field | Type | Required | Description |
|---|---|---|---|
| signature_method | string | Yes | Signature method |
| signed_by | uuid | Yes | Prescriber identifier |
| certificate_id | string | No | Certificate/key reference |
| notes | string | No | Audit note |
Example request
cURL
curl -X POST "https://api.mediloop.com/v1/prescriptions/presc_456/sign" \
-H "Authorization: Bearer $ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-d '{"signature_method":"qualified_electronic","signed_by":"prac_123"}'Example response
201 Created{
"data": {"id":"presc_456","status":"signed","snapshot_hash":"sha256:..."}
}Example response
Responses use stable identifiers and lifecycle status values so clients can safely coordinate clinical and pharmacy workflows.
Errors
| HTTP | Description |
|---|---|
| 200 | Request completed successfully |
| 201 | Resource/action created |
| 400 | Validation error |
| 401 | Authentication required |
| 403 | Insufficient permission or scope |
| 404 | Prescription not found |
| 409 | Lifecycle or concurrency conflict |
| 422 | Unprocessable clinical/request data |
Workflow
draftCreated by provider
clinically_validatedClinically validated
signedDigitally signed
routedSent to pharmacy
dispensedDispensed to patient