Sandbox & synthetic FHIR
List catalogs, fetch connection-scoped patient fixtures, and read FHIR R4 resources without writing boilerplate `fetch` calls.
Open source / SDKs
SDKs (Node.js + Python)
Typed clients for the Hebrah control plane API and webhook signature verification.
MIT-licensed, strict types, native fetch / httpx, and zero credential persistence. The same packages we ship to our own integrators.
Install
Node.js 18+ or Python 3.10+. Both packages ship TypeScript types and py.typed.
npm
npm install @hebrah/sdkimport { HebrahClient, verifyWebhookSignature } from '@hebrah/sdk'
const client = new HebrahClient({
apiKey: process.env.HEBRAH_API_KEY!,
})
const catalog = await client.sandbox.catalog()
const patientId = catalog.sample_patient_ids[0]
const patient = await client.sandbox.resource('Patient', patientId)
// Verify an inbound webhook
verifyWebhookSignature(
rawBody,
req.headers['x-hebrah-signature'],
process.env.HEBRAH_WEBHOOK_SECRET!
)PyPI
pip install hebrahimport os
from hebrah import HebrahClient, verify_webhook_signature
with HebrahClient(
api_key=os.environ["HEBRAH_API_KEY"],
) as client:
catalog = client.sandbox.catalog()
patient_id = catalog["sample_patient_ids"][0]
patient = client.sandbox.resource("Patient", patient_id)
# Verify an inbound webhook
verify_webhook_signature(
request.get_data(),
request.headers.get("X-Hebrah-Signature"),
webhook_secret,
)What’s inside
HL7 inject + scenarios
Trigger HL7 v2 templates and run multi-step scenarios (prior auth, claims, ADT) from one typed call.
Webhook delivery ops
List deliveries, replay stored envelopes, and verify the `X-Hebrah-Signature` HMAC locally with constant-time compare.
SMART on FHIR (Phase 4)
Launch, exchange tokens, and read `Patient` resources with patient-scoped SMART tokens — all built in.
When to reach for the SDK
- You are integrating against hebrah-api from a Node.js or Python service.
- You want typed wrappers around `/v1/sandbox/*`, `/v1/webhooks/*`, and the SMART endpoints.
- You need constant-time HMAC verification for `X-Hebrah-Signature` in your webhook receiver.