Solution
Pharmacies
Adherence, medication reviews, discharge follow-up, packing and delivery for your patients, and the admissions, family access, MAR, rounds and incident reporting for the assisted-living, group-home and nursing-home sites your pharmacy runs or serves.
- Credential model
- OAuth 2.0 client credentials for your organisation. Authentication
- Before production
- A BAA on file; patients must share their medicines with the pharmacy; a named staff member attests every admission and family invitation.
- Sandbox
- A pharmacy sandbox.
Families you'll use
| Family | Fit | Status |
|---|---|---|
| Care sites | Core | Built — gated |
| Events (webhooks) | Core | Built — gated |
| Pharmacy | Core | Built — gated |
| Enrolment & messaging | Useful | Built — gated |
Scopes to request
Ask only for what your product uses.
| Scope | Allows |
|---|---|
members.read | List the organisation's linked members as opaque member references. |
pharmacy.patients.read | Read your pharmacy's patients (medicines-sharing status, pack cycle, open discharge follow-up), discharge follow-up episodes, medication reviews, the packing queue and deliveries, the monitoring-due list (a consensus schedule, not an order) and refills due (pharmacies only, BAA on file). |
pharmacy.adherence.read | Read a patient's dose log and adherence summary: taken, skipped and unrecorded kept apart (an unrecorded dose is never counted as missed) and never a proportion of days covered (pharmacies only; the patient must share medications with you). |
pharmacy.reviews.write | Start a medication review, add the pharmacist's recommendations and the prescriber's answer, and complete it (pharmacies only). |
pharmacy.episodes.write | Open a discharge follow-up episode and record the day-3 / day-30 contacts, how each medication difference was resolved, the 30-day outcome and closing (pharmacies only). |
pharmacy.delivery.write | Record a verified pack (the four-item checklist, all confirmed) and a delivery confirmed at the door (pharmacies only). |
care_sites.read | Read the assisted living, group home and nursing home sites your organisation runs: the census, each resident's medication administration record, rounds, medication incidents, incident and change-of-condition reports, care plans and emergency-preparedness attestations (pharmacies and care-facility operators, their own sites only, BAA on file). |
care_sites.mar.write | Record a scheduled dose as given, held or refused, and an as-needed dose with its reason and follow-up, on a resident's medication administration record; only doses on the resident's schedule (pharmacies and care-facility operators). |
care_sites.events.write | Record a round check, report a medication incident, and report an incident or a change in a resident's condition (Norvya alerts the site's nurses with its own generic wording) (pharmacies and care-facility operators). |
care_sites.residents.write | Admit a resident to one of the assisted living, group home or nursing home sites your organisation runs: an existing patient by member_ref, or a resident without a Norvya login by your own resident ID; a named staff member attests the consent basis (the resident, a guardian or the facility's admission agreement) (pharmacies and care-facility operators, BAA on file). |
care_sites.family.write | Issue a family member read-only access to a resident (a one-time code by email; a named staff member attests the resident's or guardian's consent), list it and revoke it at once (pharmacies and care-facility operators, BAA on file). |
documents.read | List and download the documents Norvya already produces about a patient (care plans, survivorship plans, reviews, summaries, estimates) as PDF, in the patient's language where the document supports it; each document kind keeps its own consent gate (treating practices, including medical-travel desks, and pharmacies). |
webhooks.manage | Register HTTPS webhook endpoints (payloads carry no PHI). Each event also needs its own scope: worklist / attention events clinical.panel.read, import events panel.import.write, population.export_completed population.export (medical practices only), member.at_risk fitness.roster.read, public_health.iis_ack_received public_health.immunizations.read, public_health.case_report_response public_health.case_reports.read. claims.import_completed needs claims.import.write (medical practices only). member.account_claimed needs members.claim_invite (medical practices only). hospital_at_home.escalation needs hospital_at_home.read (hospitals only). hospice.idg_review_due needs hospice.read (hospice agencies only). pharmacy.refill_due and pharmacy.discharge_episode_opened need pharmacy.patients.read; care_site.change_of_condition, care_site.incident_recorded and care_site.mar_exception need care_sites.read (pharmacies and care-facility operators, their own sites). travel.journey_updated and travel.leg_status_changed need travel.journeys.read, travel.nursing_visit_recorded travel.nursing.read, travel.invoice_issued travel.billing.read (medical-travel desks only). travel.inquiry_updated needs travel.inquiries.read, travel.journey_message_posted travel.messages.read (medical-travel desks only). instrument.batch_dispatched needs instruments.request (medical practices only). roster.enrolment_summary needs members.roster.read (medical practices only). older_adults.falls_tier_raised needs older_adults.read (medical practices only). employer.challenge_completed needs employer.challenges.read and occupational.exam_due occupational.read (employers only); medspa.adverse_event_reported needs medspa.aftercare.read (treating practices only). rehab.goal_met needs rehab.read; nutrition.caseload_flagged needs nutrition.read (medical practices only). cocm.review_due needs behavioral.read (medical practices only). derm.lesion_recheck_due and derm.patch_test_read_recorded need derm.read (medical practices only). |
Not callable yet
- Enrolment & messaging Built — gated
Before production
Gate: A BAA on file; patients must share their medicines with the pharmacy; a named staff member attests every admission and family invitation.
Sandbox
Build and test against synthetic members before you touch real data. A pharmacy sandbox. What a sandbox holds, its credentials, limits, resets and expiry are in the Sandbox guide. To request one, write to [email protected] with your organisation and market.
Every endpoint for this market
The families this solution uses, filtered to the scopes it requests. Each link opens the endpoint on its family page.
Platform Built — gated3
- GET
/v1/members - POST
/v1/oauth/token - GET
/v1/usage
Events (webhooks) Built — gated5
- GET
/v1/webhooks - POST
/v1/webhooks - DELETE
/v1/webhooks/{webhook_id} - GET
/v1/webhooks/{webhook_id}/deliveries - POST
/v1/webhooks/{webhook_id}/enable
Records & documents Built — gated3
- GET
/v1/documents/{document_ref} - GET
/v1/documents/{document_ref}/content - GET
/v1/patients/{member_ref}/documents
Pharmacy Built — gated23
- GET
/v1/pharmacy/discharge-episodes - POST
/v1/pharmacy/discharge-episodes - GET
/v1/pharmacy/discharge-episodes/{episode_ref} - POST
/v1/pharmacy/discharge-episodes/{episode_ref}/checks/{which} - POST
/v1/pharmacy/discharge-episodes/{episode_ref}/close - PUT
/v1/pharmacy/discharge-episodes/{episode_ref}/medications - POST
/v1/pharmacy/discharge-episodes/{episode_ref}/outcome - POST
/v1/pharmacy/discharge-episodes/{episode_ref}/resolutions - GET
/v1/pharmacy/medication-reviews/{review_ref} - POST
/v1/pharmacy/medication-reviews/{review_ref}/complete - POST
/v1/pharmacy/medication-reviews/{review_ref}/recommendations - GET
/v1/pharmacy/monitoring-due - GET
/v1/pharmacy/packing - GET
/v1/pharmacy/patients - GET
/v1/pharmacy/patients/{member_ref}/adherence - GET
/v1/pharmacy/patients/{member_ref}/deliveries - POST
/v1/pharmacy/patients/{member_ref}/deliveries - GET
/v1/pharmacy/patients/{member_ref}/medication-reviews - POST
/v1/pharmacy/patients/{member_ref}/medication-reviews - GET
/v1/pharmacy/patients/{member_ref}/packing - POST
/v1/pharmacy/patients/{member_ref}/packing/verify - GET
/v1/pharmacy/patients/{member_ref}/sync-plan - GET
/v1/pharmacy/refills-due
Care sites Built — gated19
- GET
/v1/care-sites - GET
/v1/care-sites/{site_ref}/attesting-staff - GET
/v1/care-sites/{site_ref}/census - GET
/v1/care-sites/{site_ref}/condition-reports - GET
/v1/care-sites/{site_ref}/emergency-preparedness - DELETE
/v1/care-sites/{site_ref}/family/{family_access_ref} - GET
/v1/care-sites/{site_ref}/medication-incidents - POST
/v1/care-sites/{site_ref}/residents - GET
/v1/care-sites/{site_ref}/residents/{member_ref}/care-plan - POST
/v1/care-sites/{site_ref}/residents/{member_ref}/condition-reports - GET
/v1/care-sites/{site_ref}/residents/{member_ref}/family - POST
/v1/care-sites/{site_ref}/residents/{member_ref}/family - GET
/v1/care-sites/{site_ref}/residents/{member_ref}/mar - POST
/v1/care-sites/{site_ref}/residents/{member_ref}/mar/administrations - POST
/v1/care-sites/{site_ref}/residents/{member_ref}/mar/prn - POST
/v1/care-sites/{site_ref}/residents/{member_ref}/mar/prn/{event_ref}/follow-up - POST
/v1/care-sites/{site_ref}/residents/{member_ref}/medication-incidents - POST
/v1/care-sites/{site_ref}/round-plans/{plan_ref}/checks - GET
/v1/care-sites/{site_ref}/rounds