Skip to main content
The Pharmacy API is a single inbound webhook: your pharmacy system calls VitaRelay to report order progress and keep inventory current. Orders are dispatched to your system through a separate pharmacy-specific onboarding channel arranged with your VitaRelay contact — that channel is not part of this API.

Status updates

Move an assigned order through accepted → delivered and attach tracking.

Inventory updates

Keep stock availability and wholesale cost current for your products.

​
Endpoint

{orgId} is your pharmacy’s VitaRelay organization UUID, issued by a VitaRelay admin.

​
Authentication

Every request is signed with your inbound webhook secret (issued and rotated by a VitaRelay admin, shown once):
  • Header: x-vitarelay-signature
  • Value: HMAC-SHA256 of the exact raw request body bytes, keyed with your secret
  • Encoding: hex or base64; a leading sha256= prefix is tolerated
See the API Reference in this section for the full request/response schema and the two event types, and the Pharmacy Integration guide for signing code samples.