Skip to main content
GET

Overview

Fetches one appointment by its id. Access is owner-only: the appointment’s doctor_id must match the authenticated caller, otherwise a 403 Forbidden is returned.

Authentication

string
required
Bearer token for authenticated access.

Path Parameters

string
required
Appointment ObjectId. Must be a 24-character hex ObjectId — a malformed value fails with a 400 cast error.

Response

boolean
Whether the request succeeded.
object
The appointment object.
Additional fields may appear on the appointment object depending on how it was created. Treat any field not documented here as opaque.

Example Request

Example Response

Error Responses

403 Forbidden is returned when the appointment exists but is owned by a different doctor. A missing or invalid Bearer token returns 401 with a message key. A session revoked by a sign-in elsewhere returns 401 with "code": "SESSION_REVOKED".