Access & authentication
The API is public and read-only. Here's what that means.
The API is public
Every endpoint requires no authentication. There's no API key to manage, no
Authorization header to send, and no BAA to sign. You can call them directly
from a browser — every response sends permissive CORS headers.
# No key. This just works.
curl https://api.mymenopauserx.com/v1/providers?state=CAThis is by design: the API exposes only information we already publish on our public "find a provider" pages. It never returns patient data.
Rate limits
Reads may be rate-limited per client IP. If you're throttled you'll get a
429 Too Many Requests; back off and honor the Retry-After header when one is
present. For high-volume server-side use, cache responses — the data changes
infrequently.
Caching
Provider profiles are safe to cache for minutes to hours. Cache by slug for
detail pages and revalidate in the background.