Aurabox API Documentation

Introduction

This documentation aims to provide all the information you need to work with our API.

Authenticating requests

To authenticate requests, include an Authorization header with the value "Bearer {YOUR_AUTH_KEY}".

All authenticated endpoints are marked with a requires authentication badge in the documentation below.

You can retrieve your token by visiting your dashboard and clicking Generate API token.

Cases

APIs for managing deidentified patient cases

List cases.

GET
https://region.aurabox.cloud
/api/v1/cases
requires authentication

Returns a paginated list of deidentified patients (cases) in the authenticated user's current team realm. Supports search by label, archived filtering, and sorting.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

Body Parameters

Example request:
curl --request GET \
    --get "https://region.aurabox.cloud/api/v1/cases" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"per_page\": 7,
    \"search\": \"rzp\",
    \"sort\": \"label\",
    \"direction\": \"asc\",
    \"archived\": false
}"
Example response:
{
    "data": [
        {
            "id": "003fb6c7-a399-46de-8199-ac51e031bd10",
            "label": "CASE-00142",
            "status": "deidentified",
            "archived": false,
            "created_at": "2025-01-15T10:30:00.000000Z",
            "updated_at": "2025-01-15T10:30:00.000000Z"
        }
    ],
    "links": {
        "first": "https://region.aurabox.cloud/api/v1/cases?page=1",
        "last": "https://region.aurabox.cloud/api/v1/cases?page=1",
        "prev": null,
        "next": null
    },
    "meta": {
        "current_page": 1,
        "from": 1,
        "last_page": 1,
        "per_page": 25,
        "to": 1,
        "total": 1
    }
}

Create a Case.

POST
https://region.aurabox.cloud
/api/v1/cases
requires authentication

Creates a new deidentified patient (case) in the authenticated user's team realm. A label is required; sex and date of birth are optional.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

Body Parameters

Example request:
curl --request POST \
    "https://region.aurabox.cloud/api/v1/cases" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"label\": \"nvtgvzvdmelospjvztft\",
    \"sex\": \"other\",
    \"date_of_birth\": \"2009-11-01\"
}"
Example response:
{
    "data": {
        "id": "f47ac10b-58cc-4372-a567-0e02b2c3d479",
        "label": "CASE-00143",
        "status": "deidentified",
        "archived": false,
        "created_at": "2025-02-18T10:30:00.000000Z",
        "updated_at": "2025-02-18T10:30:00.000000Z"
    }
}

Show a Case.

GET
https://region.aurabox.cloud
/api/v1/cases/{patient_id}
requires authentication

Returns a deidentified patient (case) by ID. Cases are patients whose identity has been removed — only a label and non-identifying metadata are returned.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
eum
Example request:
curl --request GET \
    --get "https://region.aurabox.cloud/api/v1/cases/eum" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json"
Example response:
{
    "data": {
        "id": "003fb6c7-a399-46de-8199-ac51e031bd10",
        "label": "CASE-00142",
        "status": "deidentified",
        "archived": false,
        "created_at": "2025-01-15T10:30:00.000000Z",
        "updated_at": "2025-01-15T10:30:00.000000Z"
    }
}
{
    "message": "Not found"
}

Update a Case.

PUT
https://region.aurabox.cloud
/api/v1/cases/{patient_id}
requires authentication

Updates an existing deidentified patient (case). Only label, sex, and date of birth may be changed.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
harum

Body Parameters

Example request:
curl --request PUT \
    "https://region.aurabox.cloud/api/v1/cases/harum" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"label\": \"zkmrlcjeho\",
    \"sex\": \"male\",
    \"date_of_birth\": \"2011-05-10\"
}"
Example response:
{
    "data": {
        "id": "003fb6c7-a399-46de-8199-ac51e031bd10",
        "label": "CASE-00142-UPDATED",
        "status": "deidentified",
        "archived": false,
        "created_at": "2025-01-15T10:30:00.000000Z",
        "updated_at": "2025-02-18T12:00:00.000000Z"
    }
}
{
    "message": "Not found"
}

Delete a Case.

DELETE
https://region.aurabox.cloud
/api/v1/cases/{patient_id}
requires authentication

Permanently deletes a deidentified patient (case) from the current team realm.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
beatae
Example request:
curl --request DELETE \
    "https://region.aurabox.cloud/api/v1/cases/beatae" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json"
Example response:
[Empty response]
{
    "message": "Not found"
}

Patients

APIs for managing patients

List patients for the current team realm.

GET
https://region.aurabox.cloud
/api/v1/patients
requires authentication

Returns a paginated list of patients in the authenticated user's current team realm. Supports search, archived filtering, and sorting.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

Body Parameters

Example request:
curl --request GET \
    --get "https://region.aurabox.cloud/api/v1/patients" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"per_page\": 9,
    \"search\": \"cjitazziahaxrcxwogbcs\",
    \"sort\": \"created_at\",
    \"direction\": \"desc\",
    \"archived\": false
}"
Example response:
{
    "data": [
        {
            "id": "003fb6c7-a399-46de-8199-ac51e031bd10",
            "given_names": "Jessica",
            "family_name": "Jones",
            "date_of_birth": "1985-06-15",
            "sex": "female",
            "address": {
                "street": "123 Main Street",
                "city": "Sydney",
                "region": "NSW",
                "postcode": "2000",
                "country": "au"
            },
            "status": "active",
            "archived": false,
            "created_at": "2025-01-15T10:30:00.000000Z",
            "updated_at": "2025-01-15T10:30:00.000000Z"
        }
    ],
    "links": {
        "first": "https://region.aurabox.cloud/api/v1/patients?page=1",
        "last": "https://region.aurabox.cloud/api/v1/patients?page=1",
        "prev": null,
        "next": null
    },
    "meta": {
        "current_page": 1,
        "from": 1,
        "last_page": 1,
        "per_page": 25,
        "to": 1,
        "total": 1
    }
}

Create a patient record on the current team.

POST
https://region.aurabox.cloud
/api/v1/patients
requires authentication

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

Body Parameters

Example request:
curl --request POST \
    "https://region.aurabox.cloud/api/v1/patients" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"given_names\": \"aoxhnfggpebskabzzajigrfa\",
    \"family_name\": \"rkpurkdoj\",
    \"date_of_birth\": \"2003-06-27\",
    \"sex\": \"female\",
    \"address\": {
        \"street\": \"gxxseksewhhrtjgxrghfovxp\",
        \"city\": \"ndifmugoclprs\",
        \"region\": \"bzzfekbbtqpvalngaq\",
        \"postcode\": \"hkzmaverxc\",
        \"country\": \"w\"
    }
}"

Retrieve a patient.

GET
https://region.aurabox.cloud
/api/v1/patients/{id}
requires authentication

Returns a single patient record. De-identified patients return only a label instead of personal details.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

id
string
required

The ID of the patient.

Example:
ab
Example request:
curl --request GET \
    --get "https://region.aurabox.cloud/api/v1/patients/ab" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json"
Example response:
{
    "data": {
        "id": "003fb6c7-a399-46de-8199-ac51e031bd10",
        "given_names": "Jessica",
        "family_name": "Jones",
        "date_of_birth": "1985-06-15",
        "sex": "female",
        "address": {
            "street": "123 Main Street",
            "city": "Sydney",
            "region": "NSW",
            "postcode": "2000",
            "country": "au"
        },
        "status": "active",
        "archived": false,
        "created_at": "2025-01-15T10:30:00.000000Z",
        "updated_at": "2025-01-15T10:30:00.000000Z"
    }
}

Update a patient record.

PUT
https://region.aurabox.cloud
/api/v1/patients/{id}
requires authentication

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

id
string
required

The ID of the patient.

Example:
velit

Body Parameters

Example request:
curl --request PUT \
    "https://region.aurabox.cloud/api/v1/patients/velit" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"given_names\": \"ivmvraagyukvllh\",
    \"family_name\": \"ybfycvgzpu\",
    \"date_of_birth\": \"2021-12-03\",
    \"sex\": \"unknown\",
    \"address\": {
        \"street\": \"i\",
        \"city\": \"yqbgdbpny\",
        \"region\": \"pyqwp\",
        \"postcode\": \"kpndmhpztbgeodpuc\",
        \"country\": \"h\"
    }
}"

Delete a patient record.

DELETE
https://region.aurabox.cloud
/api/v1/patients/{id}
requires authentication

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

id
string
required

The ID of the patient.

Example:
ad
Example request:
curl --request DELETE \
    "https://region.aurabox.cloud/api/v1/patients/ad" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json"

Studies

APIs for managing imaging studies

List studies for a patient.

GET
https://region.aurabox.cloud
/api/v1/patients/{patient_id}/studies
requires authentication

Returns a paginated list of DICOM studies associated with the patient's person record. Supports filtering by modality and date range.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
ut

Body Parameters

Example request:
curl --request GET \
    --get "https://region.aurabox.cloud/api/v1/patients/ut/studies" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"per_page\": 11,
    \"modality\": \"mgtscehavixjttrdhdc\",
    \"date_from\": \"2026-02-18T22:47:20\",
    \"date_to\": \"2038-07-23\",
    \"sort\": \"study_date\",
    \"direction\": \"desc\"
}"
Example response:
{
    "data": [
        {
            "id": "9a1b2c3d-4e5f-6a7b-8c9d-0e1f2a3b4c5d",
            "study_instance_uid": "1.2.840.113619.2.55.3.604688119",
            "study_description": "CT CHEST W CONTRAST",
            "study_date": "2025-01-10",
            "study_time": "143022",
            "accession_no": "ACC001234",
            "modalities": [
                "CT"
            ],
            "institution_name": "Sydney Radiology",
            "referring_physician_name": "Dr Smith",
            "series_count": 3,
            "instance_count": 156,
            "availability": "dicom",
            "status": "viewable",
            "notes": null,
            "series": [
                {
                    "id": "b2c3d4e5-f6a7-b8c9-d0e1-f2a3b4c5d6e7",
                    "series_instance_uid": "1.2.840.113619.2.55.3.604688119.1",
                    "series_number": 1,
                    "series_description": "Axial 5mm",
                    "modality": "CT",
                    "body_part_examined": "CHEST",
                    "instance_count": 52
                }
            ],
            "reports": [],
            "created_at": "2025-01-10T15:30:00.000000Z",
            "updated_at": "2025-01-10T15:30:00.000000Z"
        }
    ],
    "links": {
        "first": "https://region.aurabox.cloud/api/v1/patients/003fb6c7/studies?page=1",
        "last": "https://region.aurabox.cloud/api/v1/patients/003fb6c7/studies?page=1",
        "prev": null,
        "next": null
    },
    "meta": {
        "current_page": 1,
        "from": 1,
        "last_page": 1,
        "per_page": 25,
        "to": 1,
        "total": 1
    }
}

Create a study for a patient.

POST
https://region.aurabox.cloud
/api/v1/patients/{patient_id}/studies
requires authentication

Creates a new imaging study record associated with the patient's person. Defaults to a record-type study. To create a DICOM study, set availability to "dicom" and provide a study_instance_uid.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
ratione

Body Parameters

Example request:
curl --request POST \
    "https://region.aurabox.cloud/api/v1/patients/ratione/studies" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"study_description\": \"cwxdpaoj\",
    \"study_date\": \"qivrudfykbwrqkkpjyf\",
    \"study_time\": \"jogsghuouke\",
    \"accession_no\": \"dydqkwnhuiqcajnicy\",
    \"institution_name\": \"czpzvpxrwzyzsbetppnlzxml\",
    \"referring_physician_name\": \"akhybaujjxnbvvamuds\",
    \"notes\": \"xjdbzgnekvpwqhzszbmpiups\",
    \"availability\": \"digital\",
    \"study_instance_uid\": \"nhvqctbppmg\"
}"
Example response:
{
    "data": {
        "id": "f47ac10b-58cc-4372-a567-0e02b2c3d479",
        "study_instance_uid": null,
        "study_description": "CT CHEST W CONTRAST",
        "study_date": "20250110",
        "study_time": null,
        "accession_no": "ACC001234",
        "modalities": [],
        "institution_name": "Sydney Radiology",
        "referring_physician_name": "Dr Smith",
        "series_count": null,
        "instance_count": null,
        "availability": "record",
        "status": "viewable",
        "notes": "External study record",
        "series": [],
        "reports": [],
        "created_at": "2025-02-18T10:30:00.000000Z",
        "updated_at": "2025-02-18T10:30:00.000000Z"
    }
}

Retrieve a single study.

GET
https://region.aurabox.cloud
/api/v1/patients/{patient_id}/studies/{id}
requires authentication

Returns detailed information about a specific DICOM study, including its series and reports.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
veniam
id
string
required

The ID of the study.

Example:
corporis
Example request:
curl --request GET \
    --get "https://region.aurabox.cloud/api/v1/patients/veniam/studies/corporis" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json"
Example response:
{
    "data": {
        "id": "9a1b2c3d-4e5f-6a7b-8c9d-0e1f2a3b4c5d",
        "study_instance_uid": "1.2.840.113619.2.55.3.604688119",
        "study_description": "CT CHEST W CONTRAST",
        "study_date": "2025-01-10",
        "study_time": "143022",
        "accession_no": "ACC001234",
        "modalities": [
            "CT"
        ],
        "institution_name": "Sydney Radiology",
        "referring_physician_name": "Dr Smith",
        "series_count": 3,
        "instance_count": 156,
        "availability": "dicom",
        "status": "viewable",
        "notes": null,
        "series": [
            {
                "id": "b2c3d4e5-f6a7-b8c9-d0e1-f2a3b4c5d6e7",
                "series_instance_uid": "1.2.840.113619.2.55.3.604688119.1",
                "series_number": 1,
                "series_description": "Axial 5mm",
                "modality": "CT",
                "body_part_examined": "CHEST",
                "instance_count": 52
            }
        ],
        "reports": [
            {
                "id": "c3d4e5f6-a7b8-c9d0-e1f2-a3b4c5d6e7f8",
                "title": "CT Chest Report",
                "type": "radiology",
                "date": "2025-01-10"
            }
        ],
        "created_at": "2025-01-10T15:30:00.000000Z",
        "updated_at": "2025-01-10T15:30:00.000000Z"
    }
}

Update a study.

PUT
https://region.aurabox.cloud
/api/v1/patients/{patient_id}/studies/{id}
requires authentication

Updates metadata on an existing imaging study. Only descriptive fields can be modified — the study's person ownership and availability type cannot be changed.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
et
id
string
required

The ID of the study.

Example:
id

Body Parameters

Example request:
curl --request PUT \
    "https://region.aurabox.cloud/api/v1/patients/et/studies/id" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json" \
    --data "{
    \"study_description\": \"ldwulmntpc\",
    \"study_date\": \"sxyqumoqmqmnc\",
    \"study_time\": \"nmndyvkhfsyyqfztnepjuq\",
    \"accession_no\": \"dauseaiphbtpvlq\",
    \"institution_name\": \"elldeigws\",
    \"referring_physician_name\": \"qxmxofvjfehniqqojhgtzpca\",
    \"notes\": \"ud\"
}"
Example response:
{
    "data": {
        "id": "9a1b2c3d-4e5f-6a7b-8c9d-0e1f2a3b4c5d",
        "study_instance_uid": "1.2.840.113619.2.55.3.604688119",
        "study_description": "CT CHEST W CONTRAST - UPDATED",
        "study_date": "2025-01-10",
        "study_time": "143022",
        "accession_no": "ACC001234",
        "modalities": [
            "CT"
        ],
        "institution_name": "Sydney Radiology",
        "referring_physician_name": "Dr Jones",
        "series_count": 3,
        "instance_count": 156,
        "availability": "dicom",
        "status": "viewable",
        "notes": "Updated notes",
        "series": [],
        "reports": [],
        "created_at": "2025-01-10T15:30:00.000000Z",
        "updated_at": "2025-02-18T12:00:00.000000Z"
    }
}

Delete a study.

DELETE
https://region.aurabox.cloud
/api/v1/patients/{patient_id}/studies/{id}
requires authentication

Permanently deletes an imaging study and all associated series. File cleanup is handled asynchronously.

Headers

Authorization
Example:
Bearer {YOUR_AUTH_KEY}
Content-Type
Example:
application/json
Accept
Example:
application/json

URL Parameters

patient_id
string
required

The ID of the patient.

Example:
harum
id
string
required

The ID of the study.

Example:
est
Example request:
curl --request DELETE \
    "https://region.aurabox.cloud/api/v1/patients/harum/studies/est" \
    --header "Authorization: Bearer {YOUR_AUTH_KEY}" \
    --header "Content-Type: application/json" \
    --header "Accept: application/json"
Example response:
[Empty response]