Developers & agencies
REST APIs with OpenAPI 3.1 specs, webhooks and an MCP server. You keep your front end and your product; Bask runs the clinical, pharmacy and payments side.
What you can build
Ship a custom checkout first, then grow into a full patient portal, a CRM sync or a client's whole site. It all runs on the same APIs, so nothing you build early gets rebuilt later.
Build custom intake, checkout and onboarding in your own front end, running on Bask's clinical and pharmacy services.
Put the logged-in experience inside your own app: treatments, orders, messages, scheduling and payments.
Send Bask events into your CRM, data warehouse, support tools or marketing automation through webhooks.
Agencies create and manage each brand's sites, flows and catalog programmatically through the Admin API.
AI agents build and run sites through the MCP server, with the same operations your team uses.
Bask's clinical services review intake and handle prescriptions behind your front end.
Prescriptions route to pharmacies and ship to patients without a pharmacy integration of your own.
Checkout, saved cards and recurring payments run on Bask's commerce backend.
Patient data is handled to HIPAA requirements across every service behind the API.
Headless
The API covers the whole patient journey, not just checkout, and tells your systems when anything changes. The Headless page has the full detail.
Sign-in, intake sessions and steps, identity verification, cart, checkout and payments, treatments and prescriptions, orders and tracking.
Available for your store: treatments, orders, payments and saved cards, messaging, visit scheduling, patient to-dos, documents and receipts. Or hand patients to the hosted portal with a magic link.
24 event types, from new patient and new prescription to order shipped, payment failed, dispute created and abandoned session.
One-time codes, passwords, magic links or guest checkout, whichever fits your product.
Pause, resume or cancel a treatment and check refill eligibility from your own screens.
Care-team chat in your app, with live updates over WebSocket.
Webhooks go out through a queue, and failed events land in a dead-letter queue.
Admin API
For those who want full control over their telehealth platform, we offer powerful APIs and Webhooks that enable you to build your own custom applications.
Connect seamlessly with external systems, integrate with your existing workflows, and create a telehealth experience tailored to your unique needs.
Integrate real-time webhooks to receive instant updates and automate workflows.
Effortlessly connect systems, trigger actions, and streamline processes with seamless data synchronization.
Stay informed with instant data synchronization. Webhooks push updates in real-time, allowing you to react to changes immediately without manual refresh or polling.
Boost efficiency by automating tasks. Webhooks trigger actions automatically when specific events occur, saving time and reducing human error in your operations.
Effortlessly connect systems. Headless flexibility allows you to integrate various platforms and services, ensuring smooth data flow and interaction between your tools and third-party services.
Turn any screen into a digital health experience. Gain control over your visual expression and patient experience without the restrictions of generic templates.
AI agents build and run sites through the MCP server. Changes that move money, like pricing and fulfillment, show a preview first and need explicit confirmation.
Create a weight-loss intake for Lumen with a clinical assessment, the GLP-1 programme and checkout.
Security
Bask is HIPAA compliant, and every API call is scoped, rate-limited and audited.

Separate keys for the browser, your server and platform automation, so each one carries only the access it needs.

Every API call is logged, so you can answer who did what and when.
Each API version has its own OpenAPI 3.1 spec.
Every key has its own limits, with stricter ones on sign-in endpoints.
The server enforces the boundary between stores, not the client.
Guest checkout tokens are blocked from any patient data.
Developer kit
Each piece is documented on the Bask docs site.
A spec for each API version.
Public, secret and admin keys, and what each one can do.
All 24 event types and how delivery works.
Connect Claude, Cursor or any MCP client to your account.
The docs cover every API, the webhook events and the MCP server.
Prefer no code? Launch without writing any