Custom drug catalog API — new
Partners can now read and manage an organization’s custom drug catalog directly over the external API, instead of relying on a clinician to maintain it in the Parchment app.- Single-item endpoints: create, read, update and delete.
- Bulk endpoints: create, read and delete.
- A custom drug can be pre-selected on the prescription form with the
custom_drug_idquery parameter.
Webhooks
- Two new events:
prescription.ceasedandprescription.cancelled. See the Webhook Events reference for payloads. Endpoints that switch onevent_typeshould ignore unrecognised values rather than error. - Reserved pass-through metadata.
reserved_1,reserved_2andreserved_3are now delivered in the top-levelmetadataobject, echoing the values supplied on the SSOredirect_path. Absent fields arrive asnull. Use them to reconcile an event against your own order or session identifier. - Every delivery is signed. Webhook requests carry an HMAC signature — validate it before trusting a payload. See Webhook Verification.
Embedded iframe and prescription form
- Can now pass through autofill fields via iFrame query parameters.
- See Query Parameters for the full parameter table and constraints.
Patient API
- Address field aliasing. Create patient
and update patient now accept either
australian_street_addressoraustralian_addressand normalise internally. - Create failures now return the underlying cause rather than a generic error message.
- Creating a patient that already exists remains idempotent — it returns
200with the existing patient record.
Single sign-on
- Returning users are signed in noticeably faster

