API keys and webhooks (connecting other software)

If your clinic uses other software, an EPOS till, a marketing platform, a reporting dashboard, or automation tools like Zapier, you can connect them to AesthetiClinic yourself with API keys and webhooks. This is for technically confident users or whoever builds your integrations; nothing here is needed for day-to-day clinic use.

API keys

1. Go to Settings → Integrations → Manage API keys (owners only).
2. Create a key and choose its scopes, which decide what it can reach: operations (patients, appointments), accounts (payments), EPOS (products, stock), marketing (reviews, campaigns, consents). Give a key only the scopes its integration needs.
3. The key is shown once, copy it somewhere safe. You can roll a key (a 24-hour overlap keeps the integration running while you swap it) or revoke it instantly.

Every key's activity is logged, and you can restrict a key to specific IP addresses. Access to full medical records has additional safeguards and its own acknowledgement step, most integrations should not request it.

Webhooks

Webhooks push events to your systems in real time: bookings made, payments succeeding, reviews arriving, stock moving. Set them up under Settings → Integrations → Manage webhooks. For privacy, webhook payloads deliberately contain record IDs only, never patient details; your integration fetches whatever detail it is scoped to via the API. Deliveries are signed so your endpoint can verify they really came from AesthetiClinic, and failed deliveries retry automatically.

One responsibility to understand

When you connect a third-party tool, that tool's provider processes your data on your instructions, so your clinic is responsible for having an appropriate data-processing agreement with them. The key-creation screen reminds you of this at the moment it matters.