← Back to all docs

Athenahealth API

athenahealth is an AI-native, cloud-based healthcare platform whose athenaOne suite bundles an ambulatory EHR, practice management, revenue cycle management, and patient engagement for practices and health systems. An unofficial API lets you programmatically pull patients, appointments, encounters, clinical documents, claims, and eligibility—and push updates like new appointments, charges, claim submissions, and patient communications back into athenaOne.

By Alex KlarfeldMay 30, 2026
Athenahealth API

What is Athenahealth?

athenahealth is an AI-native, cloud-based healthcare software and services company whose athenaOne platform bundles an electronic health record (EHR), practice management and medical billing, and patient engagement for ambulatory practices and health systems. Customers use athenahealth to run clinical documentation, insurance and billing, claim submission and denial management, patient collections, prior authorization, and value-based care coordination across specialties including primary care, behavioral health, orthopedics, and urgent care.

Core product areas include:

  • athenaOne (integrated EHR, practice management, and patient engagement with AI-powered features)
  • Electronic Health Record (tailorable, specialty-specific clinical documentation)
  • Practice Management & Medical Billing (revenue cycle, cleaner-claims submission, denial management)
  • Patient Engagement (self-service scheduling, communication, and collections)
  • Platform & Marketplace Services (Marketplace Partner Program, SSO, HL7/C-CDA interfaces, FHIR and proprietary APIs)

Common data entities:

  • Patients, Departments, Providers, Insurance Packages
  • Appointments, Appointment Types, Open Slots, Encounters
  • Clinical entities (Conditions, Observations, Medications, Allergies, Procedures, Diagnostic Reports)
  • Claims, Charges, Payments, Remittances, Denials
  • Eligibility checks, Prior Authorizations, Documents, Patient Communications

The Athenahealth Integration Challenge

Practices run mission-critical clinical and billing workflows on athenaOne every day, but turning that into reliable API-driven automation is non-trivial:

  • Partner program gates: Production API access flows through the Marketplace Partner Program and onboarding, requiring registration, review, and approval before live credentials are issued
  • Two tablespaces: A preview/sandbox environment holds dummy data while production stores live PHI, so solutions must be promoted and re-validated across environments
  • OAuth 2.0 and SMART on FHIR scopes: Token acquisition, scope selection, and patient- vs provider-facing launch contexts add authorization complexity
  • Two API surfaces: The proprietary REST APIs and the FHIR R4 (US Core) APIs cover overlapping but distinct entities, and choosing the right one per workflow is non-obvious
  • Rate limits: The API enforces per-client throttling (HTTP 429 with X-RateLimit headers), so integrations need backoff, jitter, and request shaping to stay within budget
  • Department and practice context: Most calls are scoped by department and practice ID, and multi-location organizations must thread that context through every request
  • Endpoint breadth: With 800+ endpoints across clinical, administrative, and financial functions, mapping the right calls to a real workflow is a meaningful integration effort

How Supergood Creates Athenahealth APIs

Supergood delivers a resilient, normalized API layer over your athenaOne instance—working with athenahealth's OAuth 2.0 authorization, FHIR R4 and proprietary REST surfaces, and authenticated workflows so you integrate once across clinical, scheduling, and billing data.

  • Handles OAuth 2.0 token acquisition, SMART on FHIR scopes, and SSO-based access securely
  • Manages preview and production tablespace differences and maintains session continuity with automated refresh
  • Normalizes responses across proprietary REST and FHIR R4 entities so you get consistent Patient, Appointment, Encounter, Claim, and Eligibility objects
  • Respects department/practice scoping, rate limits (429 backoff), and per-client throttling to stay within athenahealth's budgets

Use Athenahealth with AI agents: Athenahealth MCP Server →

Getting Started

  • Schedule Integration Assessment

Book a 30-minute session to confirm your athenaOne modules, environments, and authentication model.

  • Supergood Generates and Validates Your API

We deliver a production-ready athenahealth adapter tailored to your practice configuration and entitlements.

  • Deploy with Monitoring

Go live with continuous monitoring and automatic adjustments as athenahealth evolves.

athenahealth

API Endpoints

Authentication

POST/authenticate

Acquire an OAuth 2.0 access token (with SMART on FHIR scopes where applicable) for downstream athenaOne API calls.

Patient Operations

GET/patients

Search and list patients by name, DOB, department, insurance member ID, and other parameters across the practice.

Scheduling

GET/appointments

Retrieve appointments, open slots, and appointment types filtered by department, provider, date range, and status.

Scheduling

POST/create_appointment

Book a new appointment for a patient against an open slot, department, and provider.

Clinical

GET/encounters

Pull clinical encounters and associated conditions, observations, medications, and documents via proprietary or FHIR R4 surfaces.

Billing

POST/submit_claim

Submit charges and claims for an encounter and track downstream status, remittances, and denials.

Billing

GET/eligibility

Run and retrieve insurance eligibility and benefits checks for a patient and coverage.

Use Cases

Sync patient and scheduling data into your stack

- Pull patients, departments, and providers into a unified warehouse or CRM - Stream appointments, open slots, and cancellations to scheduling and reminder tools - Keep patient demographics and insurance packages reconciled across systems

Automate clinical document and encounter workflows

- Pull encounters, conditions, observations, and medications via FHIR R4 (US Core) - Surface clinical documents and diagnostic reports in downstream apps and dashboards - Trigger care-coordination and value-based-care reporting from encounter events

Streamline revenue cycle and billing

- Submit charges and claims and track remittances, payments, and denials - Run eligibility and benefits checks before visits to reduce rejected claims - Feed denial and collections data into AR and analytics systems

Power patient engagement and communication

- Push appointment confirmations, reminders, and recalls to patients - Sync patient self-service messages and portal activity into your CRM - Automate prior-authorization status updates across providers and patients

Technical Specifications

Authentication

OAuth 2.0 access tokens with SMART on FHIR scopes and SSO, handled in a managed session

Connectivity

athenahealth proprietary REST APIs and FHIR R4 (US Core) APIs across preview and production tablespaces

Response format

Normalized JSON across Patient, Appointment, Encounter, Claim, and Eligibility objects

Rate limits

Adaptive throttling tuned to athenahealth's per-client limits, honoring X-RateLimit headers and HTTP 429 responses

Session management

Automatic OAuth token refresh, scope handling, and credential rotation

Data freshness

Near real-time pulls for patients, appointments, and claims with optional scheduled batch syncs

Security

Encrypted credential vault, scoped tokens, HIPAA-aligned controls, and audit logging

Webhooks

Event-style callbacks for appointment changes, encounter updates, and claim/billing status

Latency

Sub-second reads on cached entities; multi-second writes when posting through scheduling and billing workflows

Throughput

Horizontally scaled workers sized to multi-department, multi-provider practice volume

Reliability

Retry, backoff with jitter, and idempotency keys for claim submissions and appointment writes

Adaptation

Continuous monitoring of athenahealth API releases, FHIR profile changes, and Marketplace program updates

Frequently asked questions

Yes. Supergood normalizes athenaOne entities across the EHR and practice management/billing modules, so patient, encounter, and clinical data sit alongside claims, charges, eligibility, and remittance data in one API surface.

Both. athenahealth exposes a FHIR R4 (US Core) API and a broader proprietary REST API. Supergood picks the right surface per workflow and normalizes responses so you don't have to manage two object models.

Production API access flows through athenahealth's onboarding and Marketplace Partner Program. Supergood works with your approved credentials and entitlements, and can operate against the preview tablespace during build and testing.

Supergood honors athenahealth's per-client rate limits using X-RateLimit headers and 429 backoff, and maps the relevant subset of the 800+ endpoints to your real workflows so you integrate against a small, consistent API.

Yes. Credentials live in an encrypted vault, tokens are scoped, and access is logged. Production PHI in athenaOne is accessed under HIPAA-aligned controls, kept separate from the preview/sandbox environment.

Ready to get a real API?