Create session package

Use the organization gMedic account. No automatic write retries; reconcile an unknown outcome before repeating.

Scope: gmedic:sessions:write
Credentials: an API key, a client-credentials token or a person's access token
Effect: writes; not idempotent: check the outcome before you retry
Limits: request body up to 32 KB, response up to 256 KB
CLI: arbol gmedic session-packages create · MCP tool: gmedic_session_packages_create

POST

https://api.getarbol.com/v1/gmedic/session-packages

Authorization

Authorization
string
required
Bearer <token>, where the token is an API key, a client-credentials token or a person's access token with the scope gmedic:sessions:write. Get an API key.

Request body JSON required

data
object
required
- authorizationNumber
  string
  required
  maxLength: 255
- issueDate
  string
  required
  maxLength: 20000 · pattern: ^[0-9]{8}$
- expirationDate
  string
  required
  maxLength: 20000 · pattern: ^[0-9]{8}$
- maxSessions
  integer
  required
  maximum: 9007199254740991 · minimum: 1
- patientId
  optional
  string
  pattern: ^[1-9][0-9]{0,14}$
- billingServiceId
  optional
  string
  pattern: ^[1-9][0-9]{0,14}$
- active
  optional
  boolean
- defaultSessionsByAtention
  optional
  integer
  maximum: 9007199254740991 · minimum: 1
- invoiceId
  optional
  string
  pattern: ^[1-9][0-9]{0,14}$
- externalInvoice
  optional
  string
  maxLength: 255
}
connectionId
optional
string
pattern: ^con_[0-9A-Za-z]{26}$

Returns

200

Successful operation.

JSON

success
true
required
data
object
required
- id
  string
  required
  pattern: ^[1-9][0-9]{0,14}$
- key
  optional
  string | null
  maxLength: 20000
- createdAt
  optional
  string | null
  maxLength: 20000
- creationDate
  deprecated
  string | null
  Deprecated: use createdAt. Answered until 2027-01-28.
  
  maxLength: 20000
- updatedAt
  optional
  string | null
  maxLength: 20000
- modificationDate
  deprecated
  string | null
  Deprecated: use updatedAt. Answered until 2027-01-28.
  
  maxLength: 20000
- number
  optional
  string | null
  maxLength: 20000
- healthPartner
  optional
  string | null
  maxLength: 20000
- patientId
  optional
  string | null
  pattern: ^[1-9][0-9]{0,14}$
- patientDocumentType
  optional
  object | null
  id
  string
  required
  pattern: ^[1-9][0-9]{0,14}$
  name
  optional
  string | null
  maxLength: 20000
  label
  optional
  string | null
  maxLength: 20000
  value
  optional
  string | null
  maxLength: 20000
- patientDocumentNumber
  optional
  string | null
  maxLength: 20000
- patientFirstName
  optional
  string | null
  maxLength: 20000
- patientLastName
  optional
  string | null
  maxLength: 20000
- billingService
  optional
  string | null
  maxLength: 20000
- billingServiceId
  optional
  string | null
  pattern: ^[1-9][0-9]{0,14}$
- issueDate
  optional
  string | null
  maxLength: 20000
- expirationDate
  optional
  string | null
  maxLength: 20000
- active
  optional
  boolean | null
- maxSessions
  optional
  integer | null
  maximum: 9007199254740991 · minimum: 0
- currentSessions
  optional
  integer | null
  maximum: 9007199254740991 · minimum: 0
- availableSessions
  optional
  integer | null
  maximum: 9007199254740991 · minimum: 0
- invoice
  optional
  string | null
  maxLength: 20000
- invoiceId
  optional
  string | null
  pattern: ^[1-9][0-9]{0,14}$
- documentId
  optional
  string | null
  pattern: ^[1-9][0-9]{0,14}$
}
error
unknown
required
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

400

INVALID_INPUT: The request does not match the published schema.

JSON

success
false
required
data
unknown
required
error
object
required
The request does not match the published schema.
- code
  INVALID_INPUT
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  issues
  optional
  array of
  object
  path
  string
  required
  RFC 6901 JSON Pointer to the refused field; empty for the whole input.
  
  maxLength: 256
  message
  string
  required
  maxLength: 256
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

401

UNAUTHORIZED: A valid access token is required.

JSON

success
false
required
data
unknown
required
error
object
required
A valid access token is required.
- code
  UNAUTHORIZED
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

403

FORBIDDEN: The token does not authorize this operation.

JSON

success
false
required
data
unknown
required
error
object
required
The token does not authorize this operation.
- code
  FORBIDDEN
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

404

CONNECTION_NOT_FOUND: This organization has no gMedic connection with this id.
RECORD_NOT_FOUND: gMedic has no record with one of the ids sent.

JSON

success
false
required
data
unknown
required
error
required
One of the following:
GmedicConnectionNotFoundFailure
CONNECTION_NOT_FOUND
code
CONNECTION_NOT_FOUND
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
false
required
Whether repeating the same request may succeed.

data
object
required
No fields.

GmedicRecordNotFoundFailure
RECORD_NOT_FOUND
code
RECORD_NOT_FOUND
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
false
required
Whether repeating the same request may succeed.

data
object
required
No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

409

NOT_CONFIGURED: This organization has no verified gMedic connection.

JSON

success
false
required
data
unknown
required
error
object
required
This organization has no verified gMedic connection.
- code
  NOT_CONFIGURED
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

413

REQUEST_TOO_LARGE: The request exceeds the allowed size.

JSON

success
false
required
data
unknown
required
error
object
required
The request exceeds the allowed size.
- code
  REQUEST_TOO_LARGE
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

415

UNSUPPORTED_MEDIA_TYPE: The request content type is not supported.

JSON

success
false
required
data
unknown
required
error
object
required
The request content type is not supported.
- code
  UNSUPPORTED_MEDIA_TYPE
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

422

PROVIDER_INPUT_REJECTED: gMedic rejected the supplied fields.

JSON

success
false
required
data
unknown
required
error
object
required
gMedic rejected the supplied fields.
- code
  PROVIDER_INPUT_REJECTED
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

429

RATE_LIMITED: The request rate limit was exceeded. Try again later.

JSON

success
false
required
data
unknown
required
error
object
required
The request rate limit was exceeded. Try again later.
- code
  RATE_LIMITED
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  true
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

500

INTERNAL_ERROR: The service could not complete the operation.

JSON

success
false
required
data
unknown
required
error
object
required
The service could not complete the operation.
- code
  INTERNAL_ERROR
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  false
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

502

OUTCOME_UNKNOWN: The operation may have been applied; check its result before repeating it.
PROVIDER_ACCESS_REJECTED: The configured gMedic account did not authorize this operation.
PROVIDER_RESPONSE_INVALID: gMedic returned an unexpected response.

JSON

success
false
required
data
unknown
required
error
required
One of the following:
OutcomeUnknownFailure
OUTCOME_UNKNOWN
code
OUTCOME_UNKNOWN
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
false
required
Whether repeating the same request may succeed.

data
object
required
No fields.

GmedicProviderAccessRejectedFailure
PROVIDER_ACCESS_REJECTED
code
PROVIDER_ACCESS_REJECTED
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
false
required
Whether repeating the same request may succeed.

data
object
required
No fields.

GmedicProviderResponseInvalidFailure
PROVIDER_RESPONSE_INVALID
code
PROVIDER_RESPONSE_INVALID
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
false
required
Whether repeating the same request may succeed.

data
object
required
No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

503

UPSTREAM_UNAVAILABLE: The upstream service could not complete the request.
CATALOG_SEARCH_INCOMPLETE: The service catalog search could not be completed within its limits. Service absence cannot be concluded.
PROVIDER_UNAVAILABLE: gMedic is temporarily unavailable.

JSON

success
false
required
data
unknown
required
error
required
One of the following:
UpstreamUnavailableFailure
UPSTREAM_UNAVAILABLE
code
UPSTREAM_UNAVAILABLE
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
true
required
Whether repeating the same request may succeed.

data
object
required
No fields.

GmedicCatalogSearchIncompleteFailure
CATALOG_SEARCH_INCOMPLETE
code
CATALOG_SEARCH_INCOMPLETE
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
false
required
Whether repeating the same request may succeed.

data
object
required
No fields.

GmedicProviderUnavailableFailure
PROVIDER_UNAVAILABLE
code
PROVIDER_UNAVAILABLE
required
The failure code, stable across releases.

message
string
required
What went wrong, for people; it never contains input values.

retryable
true
required
Whether repeating the same request may succeed.

data
object
required
No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}

504

UPSTREAM_TIMEOUT: The upstream service did not respond before its deadline.

JSON

success
false
required
data
unknown
required
error
object
required
The upstream service did not respond before its deadline.
- code
  UPSTREAM_TIMEOUT
  required
  The failure code, stable across releases.
- message
  string
  required
  What went wrong, for people; it never contains input values.
- retryable
  true
  required
  Whether repeating the same request may succeed.
- data
  object
  required
  No fields.
}
metadata
object
required
What every answer carries besides its data or error.
- requestId
  string
  required
  Request correlation identifier, also sent as X-Request-Id.
}