The RESTful API Infrastructure is an application programming interface (API) framework used to develop and deploy RESTful APIs within the MEDITECH EHR. The APIs deployed on this framework can be used by internal MEDITECH applications or external third party applications.

Interoperability Services (IOPS)  is an API platform that is installed alongside the RESTful API Infrastructure and provides the MEDITECH EHR with next-generation interoperability capabilities. The platform runs interoperability-specific applications (collections of APIs) — enabling the MEDITECH EHR to take advantage of more advanced features and integrations.

The RESTful API Infrastructure and Interoperability Services are installed on the same web server. The services that run on the platform are stateless — allowing the system to be easily scaled up by adding additional web servers should the throughput limit be reached. 

The APIs made available through the RESTful API Infrastructure are protected by multiple layers of network security, including firewalls, load balancers, and encryption. It is further secured by supporting industry standard protocols for Authorization (OAuth2.0) and Authentication (OpenID Connect and SAML 2.0). This document provides more details on the security aspect of RESTful API Infrastructure.

Resources

• A recording of our RESTful API Implementation Informational Sessions can be viewed here (9/18/18) 
  
• MEDITECH Greenfield is a testing ground for apps that can integrate with MEDITECH. Developers have the ability to execute the APIs and test their applications against a real MEDITECH EHR. It also gives customers and application developers access to interactive documentation for the APIs published by MEDITECH (9/24/18)

Questions

For general inquiries about RESTful API & Interoperability Services, please contact our REST API Customer Mailbox. (*) The Imaging Appropriate Use Criteria and Regulatory mailboxes can be contacted for use case specific questions.

It is the responsibility of the hospital IT organization to configure and support their firewalls, load balancers, and other equipment based on industry best practices. For general inquiries, questions about setup or troubleshooting of your firewalls, load balancers, proxy servers, network topology, and encryption associated with your RESTful API infrastructure please contact your Hardware Integrator. If you do not have an integrator we strongly recommend you reach out to one of our Hardware Integrator partners for professional services assistance.

*Specific issues and testing examples should be reported to MEDITECH via a Service Issue.