Update Appointment

curl -X POST "https://app.medisync.me/api/appointments/update/65f8a1b2c3d4e5f6789012ef" \
  -H "Authorization: Bearer <JWT>" \
  -H "Content-Type: application/json" \
  -d '{
    "status": "finished",
    "notes": "Konsultation abgeschlossen"
  }'

{
  "success": true,
  "data": {
    "_id": "65f8a1b2c3d4e5f6789012ef",
    "name": "Allgemeine Beratung",
    "date": "2026-07-15T00:00:00.000Z",
    "time": "14:30",
    "status": "finished",
    "error_reason": null,
    "doctor_id": "65f0a1b2c3d4e5f678901234",
    "notes": "Konsultation abgeschlossen",
    "language": "de",
    "notes_type": null,
    "appointment_type": "in_person",
    "room": null,
    "duration_minutes": 30,
    "deletionDate": "2026-07-29T00:00:00.000Z",
    "booking_status": "none",
    "booking": null,
    "createdAt": "2026-07-02T09:12:00.000Z",
    "updatedAt": "2026-07-02T10:20:00.000Z",
    "__v": 0
  }
}

POST

appointments

update

{id}

curl -X POST "https://app.medisync.me/api/appointments/update/65f8a1b2c3d4e5f6789012ef" \
  -H "Authorization: Bearer <JWT>" \
  -H "Content-Type: application/json" \
  -d '{
    "status": "finished",
    "notes": "Konsultation abgeschlossen"
  }'

{
  "success": true,
  "data": {
    "_id": "65f8a1b2c3d4e5f6789012ef",
    "name": "Allgemeine Beratung",
    "date": "2026-07-15T00:00:00.000Z",
    "time": "14:30",
    "status": "finished",
    "error_reason": null,
    "doctor_id": "65f0a1b2c3d4e5f678901234",
    "notes": "Konsultation abgeschlossen",
    "language": "de",
    "notes_type": null,
    "appointment_type": "in_person",
    "room": null,
    "duration_minutes": 30,
    "deletionDate": "2026-07-29T00:00:00.000Z",
    "booking_status": "none",
    "booking": null,
    "createdAt": "2026-07-02T09:12:00.000Z",
    "updatedAt": "2026-07-02T10:20:00.000Z",
    "__v": 0
  }
}

Overview

Updates an existing appointment. Access is owner-only: the appointment’s doctor_id must match the caller, otherwise a 403 Forbidden is returned. Ownership cannot be changed — any doctor_id sent in the body is ignored.

Most fields use a fallback assignment (value || existing), so sending an empty or falsy value does not overwrite the current value — for example notes cannot be cleared with "". Only room, error_reason and doctor_note can be explicitly cleared.

Authentication

string

required

Bearer token for authenticated access.

Authorization: Bearer <JWT>

Path Parameters

string

required

Appointment ObjectId to update. Owner-only.

Body Parameters

string

New title. A falsy value is ignored.

string

New date. Blocked with 409 on externally-synced appointments.

string

New time. Blocked with 409 on externally-synced appointments.

number

Duration in minutes, 5–480; otherwise 400. Blocked with 409 on externally-synced appointments.

string

Recording lifecycle status. Status transitions are timestamped internally.

string

Failure reason. Unlike most fields, this can be explicitly cleared to null or an empty string.

string

Recording id. A falsy value is ignored.

string

Recording URL. A falsy value is ignored.

string

Recording storage key. A falsy value is ignored.

string

Private clinical notes. A falsy value is ignored (cannot be cleared with "").

string

Language code. A falsy value is ignored.

string

Notes template key. A falsy value is ignored.

string

Appointment type. A falsy value is ignored.

string

Room / location label. An empty string clears it to null. Independent of the external-readonly guard.

string

Patient-facing note. Only applied when the appointment already has a booking.

Response

boolean

Whether the request succeeded.

object

The updated appointment object (same shape as Get Appointment).

Show Appointment Object

string

Unique appointment identifier (ObjectId).

string

Appointment title.

string

Appointment date, serialized as a full ISO datetime.

string

Wall-clock time, HH:mm.

string

Recording lifecycle status.

string | null

Human-readable failure reason, or null.

string

Owning doctor’s user id.

string

Private clinical notes.

string

Language code.

string | null

Notes template key.

string

Free-form appointment type.

string | null

Room / location label, or null.

number | null

Duration in minutes, or null.

string

ISO datetime for automatic deletion.

string

Booking lifecycle state. Default none.

object | null

Booking subdocument, or null.

string

ISO creation timestamp.

string

ISO last-update timestamp.

number

Internal document version.

Additional fields may appear on the appointment object. Treat any field not documented here as opaque.

Example Request

curl -X POST "https://app.medisync.me/api/appointments/update/65f8a1b2c3d4e5f6789012ef" \
  -H "Authorization: Bearer <JWT>" \
  -H "Content-Type: application/json" \
  -d '{
    "status": "finished",
    "notes": "Konsultation abgeschlossen"
  }'

Example Response

{
  "success": true,
  "data": {
    "_id": "65f8a1b2c3d4e5f6789012ef",
    "name": "Allgemeine Beratung",
    "date": "2026-07-15T00:00:00.000Z",
    "time": "14:30",
    "status": "finished",
    "error_reason": null,
    "doctor_id": "65f0a1b2c3d4e5f678901234",
    "notes": "Konsultation abgeschlossen",
    "language": "de",
    "notes_type": null,
    "appointment_type": "in_person",
    "room": null,
    "duration_minutes": 30,
    "deletionDate": "2026-07-29T00:00:00.000Z",
    "booking_status": "none",
    "booking": null,
    "createdAt": "2026-07-02T09:12:00.000Z",
    "updatedAt": "2026-07-02T10:20:00.000Z",
    "__v": 0
  }
}

Error Responses

{
  "success": false,
  "error": "Appointment not found"
}

{
  "success": false,
  "error": "Forbidden"
}

{
  "success": false,
  "code": "EXTERNAL_APPOINTMENT_READONLY",
  "error": "Externally synced appointments cannot be rescheduled here"
}

{
  "success": false,
  "error": "duration_minutes must be between 5 and 480"
}

{
  "success": false,
  "message": "Unauthorized"
}

EXTERNAL_APPOINTMENT_READONLY is returned when the appointment was synced from an external booking system and the request tries to change its date, time or duration_minutes. 403 Forbidden is returned when the appointment is owned by a different doctor. A missing or invalid Bearer token returns 401 with a message key.

Getting Started

API Reference

Authentication

User

Appointments

Recordings

Transcriptions

Notes

Documents

Overview

Authentication

Path Parameters

Body Parameters

Response

Example Request

Example Response

Error Responses

​Overview

​Authentication

​Path Parameters

​Body Parameters

​Response

​Example Request

​Example Response

​Error Responses

Overview

Authentication

Path Parameters

Body Parameters

Response

Example Request

Example Response

Error Responses