Staff

Endpoints

List providers

GET /api/staff/providers returns the clinic members who can act as a patient's primary provider — used to populate provider pickers. Any member can call it.

List staff

GET /api/staff returns all clinic members with their usernames and roles. Admin/owner only.

Create a staff account

Provision an account directly (no email invitation round-trip). The new member signs in with username + password.

curl -b cookies.txt -X POST http://localhost:4000/api/staff \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Front Desk",
    "username": "frontdesk1",
    "password": "a-long-secure-password",
    "role": "reception"
  }'

Returns 201 with the created member. To add someone with their own existing account instead, use an organization invitation.