The Pharmacy API is part of CuraRx — prescription and pharmacy verification on the Curably Platform. It lets pharmacy chains and POS vendors integrate without the full provider portal UI.

All Pharmacy API requests must include a signature header computed over the raw JSON body (before parsing).

X-Cura-Signature: sha256=<hex>
Content-Type: application/json

const crypto = require("crypto");

function sign(body, secret) {
  const h = crypto.createHmac("sha256", secret).update(body, "utf8").digest("hex");
  return "sha256=" + h;
}

Invalid signatures return 401 Invalid signature. The platform uses timing-safe comparison to prevent oracle attacks.

{
  "rxId": "RX-7781",
  "orgId": "pharmacy-org-uuid",
  "patient": {
    "cura_id": "CURA-XXXX",
    "name": "Ada Okafor"
  },
  "drug": "Amoxicillin 500mg",
  "qty": 20,
  "prescriber": "Dr. Emeka Nwosu",
  "directions": "1 capsule TID x 7 days"
}

Success returns { ok: true, id: "..." } with the persisted medical record ID. Unknown patients return 404.

{
  "rxId": "RX-7781",
  "drug": "Amoxicillin 500mg",
  "qty": 20,
  "actor": "Pharmacist Ada",
  "dispensedAt": "2026-06-10T11:45:00Z",
  "batchNumber": "LOT-2026-0412"
}

• Links to the original eRx via rxId
• Emit audit events visible in Audit & compliance
• Supports offline queue: POST when connectivity returns (use Idempotency-Key)

{
  "items": [
    { "sku": "RX-001", "name": "Amoxicillin 500mg", "stock": 120 },
    { "sku": "RX-002", "name": "Metformin 850mg", "stock": 80 }
  ]
}

Inventory history is available via GET /api/pharmacy/inventory/history for controlled-substance and NAFDAC audit trails.

Requires active consent with medications.read and/or allergies.read scopes. See Consent & privacy.