curl --request POST \
--url https://sandbox.rx.tera.health/v1/data-requests/{data_request_id}/decision \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"decision": "accepted",
"decision_note": "Corrected the severity to 2."
}
'{
"id": "7a2e4c61-0b3d-4f58-9a17-2c4e6f8a0b13",
"enrollment_id": "0190f5c2-3a1b-7c4d-8e9f-a0b1c2d3e4f5",
"external_patient_id": "brand-pt-48213",
"kind": "amend",
"status": "completed",
"requested_at": "2026-10-26T14:05:00Z",
"completed_at": "2026-10-28T10:00:00Z",
"export": null,
"amendment": {
"details": {
"record_type": "symptom_log",
"record_id": "0190f5c9-7f80-7192-8cb4-3d4e5f607182",
"description": "The severity was logged as 5 by mistake.",
"requested_change": "Severity should be 2."
},
"respond_by": "2026-12-25T14:05:00Z",
"decision": "accepted",
"decision_note": "Corrected the severity to 2.",
"decided_at": "2026-10-28T10:00:00Z"
}
}Decide an amendment
Accept or deny an amend request within 60 days of requested_at. A denial needs decision_note (HIPAA requires
the reason). Accepting applies the change and records the previous value in the record history.
Error codes: not_an_amend_request, already_decided (409).
Scope: data_requests:write.
curl --request POST \
--url https://sandbox.rx.tera.health/v1/data-requests/{data_request_id}/decision \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"decision": "accepted",
"decision_note": "Corrected the severity to 2."
}
'{
"id": "7a2e4c61-0b3d-4f58-9a17-2c4e6f8a0b13",
"enrollment_id": "0190f5c2-3a1b-7c4d-8e9f-a0b1c2d3e4f5",
"external_patient_id": "brand-pt-48213",
"kind": "amend",
"status": "completed",
"requested_at": "2026-10-26T14:05:00Z",
"completed_at": "2026-10-28T10:00:00Z",
"export": null,
"amendment": {
"details": {
"record_type": "symptom_log",
"record_id": "0190f5c9-7f80-7192-8cb4-3d4e5f607182",
"description": "The severity was logged as 5 by mistake.",
"requested_change": "Severity should be 2."
},
"respond_by": "2026-12-25T14:05:00Z",
"decision": "accepted",
"decision_note": "Corrected the severity to 2.",
"decided_at": "2026-10-28T10:00:00Z"
}
}Authorizations
A brand's server, one OAuth client per brand and environment. Get a token with the
client_credentials grant and send it as Authorization: Bearer <token>. Tokens last 1 hour.
A brand server reads status and ids only; it never reads clinical content. A platform partner holds one
client for all its brands and gets one token per brand, naming it with tenant_id.
Headers
Optional on this action. When sent, it works as on creating requests (24 hours, same body).
8 - 255Path Parameters
Body
Response
The decided request.
"7a2e4c61-0b3d-4f58-9a17-2c4e6f8a0b13"
"0190f5c2-3a1b-7c4d-8e9f-a0b1c2d3e4f5"
Your own identifier, printable ASCII without spaces.
1 - 128^[\x21-\x7E]+$"brand-pt-48213"
export: a copy of the patient's coaching records for your brand, as a download.delete: removes the patient's coaching records for your brand, except what the law requires TeraRx to keep (the audit log).amend: the HIPAA right to amend. You decide within 60 days ofrequested_at.
export, delete, amend "export"
received, processing, completed, rejected "processing"
ISO 8601 in UTC.
"2026-10-26T14:05:00Z"
null
Export requests, once completed.
Show child attributes
Show child attributes
Amend requests only.
Show child attributes
Show child attributes