Skip to main content

Multi-Tenancy

Nevatal is a multi-tenant platform. Every API key is bound to a specific clinic, and all operations are automatically scoped to that clinic’s data.

How it works

When you authenticate with your API key:
  1. The API identifies your clinic from the key
  2. All queries are automatically filtered to your clinic’s data
  3. All writes are associated with your clinic
  4. You cannot access data from other clinics
This means you never need to pass a clinicId parameter — it’s inferred from your authentication context.

Locations within a clinic

A single clinic can have multiple locations (branches). Some resources, like appointments and stock, are scoped to a specific location. Use the locationId parameter when working with location-specific data.
# List appointments at a specific location
curl -X GET "https://api.nevatal.com/api/v1/appointments?locationId=loc_main" \
  -H "Authorization: Bearer nvtl_your_api_key"