> ## Documentation Index
> Fetch the complete documentation index at: https://api.vitarelay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Pharmacy API overview

> Push order fulfillment status, tracking, and inventory into VitaRelay from your pharmacy system.

The Pharmacy API is a single **inbound webhook**: your pharmacy system calls VitaRelay to report order progress and keep inventory current. Orders are dispatched **to** your system through a separate pharmacy-specific onboarding channel arranged with your VitaRelay contact — that channel is not part of this API.

<CardGroup cols={2}>
  <Card title="Status updates" icon="truck">
    Move an assigned order through <code>accepted → delivered</code> and attach tracking.
  </Card>

  <Card title="Inventory updates" icon="boxes-stacked">
    Keep stock availability and wholesale cost current for your products.
  </Card>
</CardGroup>

## Endpoint

```
POST https://vitarelay.com/api/public/pharmacy-webhook/{orgId}
```

`{orgId}` is your pharmacy's VitaRelay organization UUID, issued by a VitaRelay admin.

## Authentication

Every request is signed with your **inbound webhook secret** (issued and rotated by a VitaRelay admin, shown once):

* Header: `x-vitarelay-signature`
* Value: HMAC-SHA256 of the **exact raw request body bytes**, keyed with your secret
* Encoding: hex or base64; a leading `sha256=` prefix is tolerated

See the **API Reference** in this section for the full request/response schema and the two event types, and the [Pharmacy Integration guide](/guides/pharmacy-integration) for signing code samples.