healthcare.dev docs
API referenceKeys

Get a child key

GET /v1/keys/{id}

GET https://api.healthcare.dev/v1/keys/{id}

One child key with its scopes, limits, cap and this month's usage (updated every few minutes). Never returns the secret.

Requires an API key: Authorization: Bearer hdev_live_.... See Authentication.

Path parameters

NameTypeRequiredDescriptionExample
idstring (uuid)yesThe child key's id3f1c9a52-6b0e-4d7a-9c2e-8a4b7d1e0f63

Examples

curl

curl "https://api.healthcare.dev/v1/keys/3f1c9a52-6b0e-4d7a-9c2e-8a4b7d1e0f63" \
  -H "Authorization: Bearer $HDEV_API_KEY"

TypeScript

const res = await fetch("https://api.healthcare.dev/v1/keys/3f1c9a52-6b0e-4d7a-9c2e-8a4b7d1e0f63", {
  headers: { Authorization: `Bearer ${process.env.HDEV_API_KEY}` },
});
const { data, meta } = await res.json();

Python

import os
import requests

res = requests.get("https://api.healthcare.dev/v1/keys/3f1c9a52-6b0e-4d7a-9c2e-8a4b7d1e0f63", headers={"Authorization": f"Bearer {os.environ['HDEV_API_KEY']}"})
body = res.json()

Try it

GEThttps://api.healthcare.dev/v1/keys/3f1c9a52-6b0e-4d7a-9c2e-8a4b7d1e0f63
Get a free key
Copy as curl
curl "https://api.healthcare.dev/v1/keys/3f1c9a52-6b0e-4d7a-9c2e-8a4b7d1e0f63" \
  -H "Authorization: Bearer $HDEV_API_KEY"

Response

The child key

{
  "data": {
    "id": "string",
    "name": "string",
    "prefix": "string",
    "env": "live",
    "scopes": [
      "codes"
    ],
    "rps_limit": 1,
    "monthly_cap_cents": 1,
    "month_to_date": {
      "calls": 1,
      "spend_cents": 1
    },
    "created_at": "string",
    "last_used_at": "string",
    "revoked_at": "string"
  },
  "meta": {
    "source": "cms-icd10",
    "data_version": "2026.1",
    "retrieved_at": "2026-10-24T12:00:00Z",
    "license": "Public domain (CMS). Reference data, not medical advice."
  },
  "links": {
    "self": "/v1/keys/3f1c9a52-6b0e-4d7a-9c2e-8a4b7d1e0f63",
    "next": null
  }
}

Fields

FieldTypeAlways presentDescription
idstringyes
namestringyes
prefixstringyesThe key's public prefix (hdev_live_k3j9x2ab), never the secret
env"live" | "test"yes
scopesKeyScope[]yesRoute groups it may call; null for every group except webhooks
rps_limitinteger | nullyesIts own requests-a-second limit, if set
monthly_cap_centsinteger | nullyesIts monthly spend cap, if set
month_to_dateobjectyesUsage so far this month; it also counts toward the account's own usage
created_atstringyes
last_used_atstring | nullyes
revoked_atstring | nullyes

Errors

Errors are application/problem+json (RFC 9457). Branch on type, not on title. See Errors.

StatustypeWhen
401unauthorizedMissing, malformed or revoked API key.
403plan-upgrade-requiredThe plan doesn't include this feature; required_plan names the plan that does.
404not-foundNo record with that id (retired records are still returned).
429rate-limited / quota-exceededToo many requests per second (retry after Retry-After), or the monthly quota is used up.

On this page