The State of Digital Health APIs

About this paper

Digital health is the best-equipped market in the catalog. It has a genuinely excellent, free, openly-governed standard in HL7 FHIR, an authorization profile written specifically for it in SMART on FHIR, implementation guides for payers and provider directories and bulk export, and the only two rules in the world that actually compel a company to publish an API. No other market scored in this series has that much scaffolding — and it comes in at 17.2 against a whole-catalog average of 22.9, with one Exemplar in 1,234 companies.

Consent is the finding. It is the moral and legal centre of health data. HIPAA is built on authorization, FHIR defines a Consent resource, and SMART on FHIR exists to scope delegated access. Consent is a legible, machine-readable surface at 3.4% of this market against 3.3% of the whole catalog — the same rate as companies selling weather data and font libraries. An agent acting for a patient can get a token; it cannot read what the patient agreed to.

The report is a map of where the mandate reached and where it stopped. Certified EHR platforms average 27.8 and publish a contract 37.4% of the time; patient-engagement platforms average 14.1 and publish one 3.6% of the time — the difference is a certification criterion, not engineering talent. Twenty-one of the ninety-four best companies in the market score exactly 30.6 on agent-readiness, carrying the same four artifacts and nothing beyond them. And the good news for every company in that list is that the expensive work is already done: the red list on the blueprint — consent, idempotency, a dry-run mode, provenance, a versioning policy — is weeks of work against years of interoperability engineering, and it is worth more on both scores than another FHIR resource.

What's inside

1. Executive summary — the best-equipped market in the catalog, below its average
2. How this cohort was built, and why it matters
3. The state of the market — certification, not competition, predicts the score
4. The resource taxonomy — what this market actually models
5. The composite Kin Score, and why it's the foundation
6. Agent-readiness — the compliance floor
7. The blueprint
8. The standards layer — the standard worked; publishing against it is the gap
9. The regulatory layer — the most mandated market in the series
10. Standards and artifacts for the agentic turn
11. Security, auth, scopes and compliance
12. Provider-by-provider intelligence
13. The investable thesis
14. Where this is going

What you get for $500.00