Tell us what you want to build and we will call you. Keys are issued after we have spoken.
Your clinician reads a patient's record exactly as ours does, because the patient granted it to them by name and can revoke it. There is no key that reads a record: the key tells you who may, and your clinician signs in to do it. The patient can claim their record and leave at any time, including leaving you.
A delivery carries an event, an id and a timestamp. It never carries a note, a transcript or anything else about a session, so a leaked endpoint URL leaks nothing. Collect what you need with a key, which we can revoke.
Keys are hashed, scoped to one use case at a time, rotatable, and issued after a call. There is no self-serve key, and a therapist never sees one.