Skip to main content
Your app runs as an iframe embedded directly inside the Max AI platform. When a clinic installs your app, it appears in their sidebar under Apps — and clicking it loads your app’s URL in an iframe within the Max AI dashboard.
Your app running as an iframe inside the Max AI dashboard

Architecture Overview

Your app communicates with two systems:
  1. App Bridge (@max-ai/app-bridge) — A client-side SDK that connects your iframe to the Max AI platform. It provides context about the current user and organization, and enables UI interactions with the host application.
  2. Public API (api.maxcare.ai) — A REST API your backend calls to read clinic data (patients, appointments, bills, claims, inventory). Authenticated with API keys and scoped permissions.

Key Building Blocks

App Bridge

The @max-ai/app-bridge SDK runs in your frontend and provides:
  • Organization context — The Organization ID of the clinic using your app, so your backend knows which clinic to query data for
  • User context — Information about the current logged-in user
  • Platform communication — Navigate, notify, and interact with the Max AI host

Component Library

The @max-ai/components package provides pre-built UI components styled to match the Max AI platform, so your app looks native.

Public API

The REST API at api.maxcare.ai gives your backend access to clinic data:
  • Patients — Demographics, contact info, MRN
  • Appointments — Schedule, status, provider assignments
  • Bills — Charges, coding groups, diagnoses, line items
  • Claims — Submission status, insurance, amounts
  • Inventory — Stock levels, products, receiving sessions
  • Providers & Facilities — Clinic staff and locations
Every API call requires your API key (Bearer token) and the Organization ID (from the App Bridge or /v1/marketplace/me).

Data Flow

  1. A clinic installs your app from the Max AI Marketplace
  2. They grant your app the scopes it requested (e.g., read:patients, read:appointments)
  3. When a user opens your app, the App Bridge provides the Organization ID
  4. Your frontend sends that Organization ID to your backend
  5. Your backend calls api.maxcare.ai with your API key and the Organization ID
  6. Max AI returns the clinic’s data, filtered to only the scopes your app was granted

Next Steps