Developers · API

Generative AI API for Healthcare.

Outperforms GPT-5, GPT-4o, GPT-4.1, o3, and Gemini 3 Pro for healthcare applications while maintaining full HIPAA compliance. Purpose-built for therapy, clinical, and healthcare workflows.

  • 30-day free developer trial
  • 99.9% uptime guarantee
  • 500K token context window
100+
Deployed API customers
500K
Token context window
2M/min
Token throughput
99.9%
Uptime SLA
About the API

Build healthcare applications on the same engine our 10,000+ customers use every day.

This page outlines the necessary details to integrate with the BastionGPT API, including input parameters, output structure, pricing, limitations, and usage examples. To get started, sign up for BastionGPT Plus to explore our capabilities through the same API you'll receive access to. If you have additional questions or would like to apply for access, complete the access request form or schedule a consultation to review your use case and receive your API key.

Key Benefits

Frontier AI, with the controls healthcare actually requires.

HIPAA-compliant by design

Full compliance with healthcare regulations. Patient data stays secure with enterprise-grade encryption. Your data is never sold or used to train our AI models. Licensed for secure use with PHI and PII, with OpenAI having no access to your data.

Superior healthcare performance

Utilizes a pool of the leading AI models, fine-tuned for healthcare and mental health professionals. Expertly trained on thousands of clinical documentation standards and clinical workflows, such as SOAP notes, prior authorizations and appeal letters.

Enterprise-ready infrastructure

99.9% uptime SLA, 800 requests/minute, 2M tokens/minute. Built to support the next generation of powerful healthcare applications, with multi-region deployment in US, Canada (Quebec), and Australia for data residency compliance.

Features

Everything you need to ship a clinical product.

Advanced chat completion

500,000 token context window for detailed patient histories and complex clinical scenarios. Handle long encounters, prior auth packets, and multi-document reviews in a single call.

Speech-to-text transcription

Medical transcription at $0.73 / hour for therapy sessions and ambient patient scribing. Built for clinical accuracy on names, medications, and dosages, without sacrificing the ability to handle accents.

Reduced content filtering

Reduced consumer-style content filters so clinicians can discuss substance use, sexual health, end-of-life care, and other adult topics in a healthcare context, without dead ends.

Multi-region deployment

Available in US, Canada (Quebec), and Australia for data residency compliance. Pick the region that matches your patients and regulatory footprint.

Pricing

Simple, predictable pricing.

Start with a flat monthly subscription that includes credits, then pay-as-you-go beyond. No enterprise minimums.

On the roadmap
Coming soon
New capabilities
Shipping over the next two quarters
  • May 2026  Native image and PDF ingestion
  • Q4 2026  Image generation
Get Started

From signup to your first API call in 4 simple steps.

Sign up for BastionGPT Professional Plus

Explore our capabilities over your 30-day developer trial through the same UI powered by the API you'll receive access to.

Submit your use case for review

Schedule a 15-minute consultation or complete the access form below. Our technical and safety teams will review to confirm eligibility and ask any follow-up questions.

Receive your API key

Get your key and full documentation shortly after the meeting, typically the same business day.

Start building

Make your first API call. Our team is on chat, email, or video whenever you'd like a hand.

Schedule a consultation Or complete the access form
API Reference

API URLs and example usage.

One endpoint, OpenAI-style request/response shape. If you've integrated with mainstream LLM APIs before, you'll feel right at home.

API Endpoint

The single base URL for all chat completion requests.

POST Endpoint
https://api.bastiongpt.com/v1/ChatCompletion

HTTPS Request Example

Send messages, get a structured chat completion back.

REQUEST application/json
POST /v1/ChatCompletion HTTP/1.1
Host: api.bastiongpt.com
Content-Type: application/json
Key: ab12345678901234567890123456

{
  "messages": [{"role": "user", "content": "What is a normal BP?"}],
  "max_tokens": 1000,
  "temperature": 0,
  "user": "C0001"
}

HTTPS Response Example

Familiar choices/usage shape, with a BastionGPT-specific environment field.

200 OK application/json
{
  "id": "s7RzpHeOFnpM",
  "created": 1709442176,
  "model": "bastiongpt",
  "choices": [
    {
      "finish_reason": "stop",
      "message": {
        "content": "A normal blood pressure (BP) for an adult is generally considered to be in the range of 90/60 mmHg to 120/80 mmHg..."
      }
    }
  ],
  "usage": {
    "prompt_tokens": 30,
    "completion_tokens": 383,
    "total_tokens": 413
  },
  "environment": "development"
}
API Inputs

Request parameters.

What to send with every ChatCompletion call. Content-Type, Key, and Content are required; everything else is optional with sensible defaults.

Parameter Type Required Default Description
Content-Type string Yes application/json Specifies the media type of the resource. This is typically application/json.
Key string Yes n/a A unique 32-digit alphanumeric API key provided to users for authentication.
Function string No general Used to specify specialty functions. As of the current version, only the general function is supported.
Temperature number No 0.5 A floating-point number between 0 and 1 indicating the level of creativity desired in the response. A lower value means less creativity but increased data accuracy.
Content string Yes n/a The actual content or prompt you wish to submit to BastionGPT.
Max Tokens number No 1000 Maximum amount of data (expressed in tokens) that BastionGPT should generate in the response.
API Outputs

Response fields.

Every successful response returns these fields. finish_reason tells you whether the call completed normally or was blocked by content filtering.

Parameter Type Default Description
id string n/a A unique identifier for the generated response.
created number n/a A timestamp indicating when the prompt was created.
content string n/a The generated response to the submitted prompt.
prompt_tokens number n/a Number of tokens consumed by the prompt.
completion_tokens number n/a Number of tokens consumed by the response.
total_tokens number n/a Total number of tokens consumed by both the prompt and the response.
finish_reason string stop Indicates the status of the prompt. Normal completion is indicated by stop. A content_filter status means the content was blocked due to detection of suspected unapproved use cases.
Request API Access

Tell us about your use case.

Submit the form and our technical and safety teams will review for eligibility. We typically respond within one business day. Prefer a live conversation? Schedule a 15-minute consultation instead.

Fast turnaround. Most reviews completed within one business day.
Confidential. Submissions are reviewed only by our internal technical and safety teams.
No commitment. A submission is a request for access, not a purchase.

Submitted. Your request is in.

Our technical and safety teams will review your submission and reply by email, typically within one business day. If your use case is a fit, we'll send your API key and documentation right after.

Enterprise-grade security

How your API connections are protected.

We prioritize the security and integrity of your data. Our API infrastructure is built with robust security measures, ensuring every interaction is protected using industry best practices.

Top-tier encryption

Data in transit is protected by the latest, most secure encryption protocols. We exclusively support TLS 1.3 and TLS 1.2, disabling outdated and vulnerable protocols like SSLv3, TLS 1.0, and TLS 1.1.

Advanced cipher suites

Strong, authenticated cipher suites including AES-GCM (up to 256-bit) for high performance and the highest level of confidentiality and integrity for your API calls.

Forward secrecy

ECDHE key exchange ensures that even if a server's long-term private key were ever compromised, past communication sessions remain secure and cannot be decrypted.

Trusted & verified identity

Our API endpoint uses a certificate from GeoTrust / DigiCert, signed with a strong SHA-256 algorithm, verifying our server identity and establishing a trusted channel.

Hardened against vulnerabilities

Configuration is actively hardened against known SSL/TLS vulnerabilities including BEAST, POODLE, Heartbleed, and ROBOT. We continuously monitor and update against emerging threats.

Independently verified

Our endpoint configuration consistently achieves a top 'A' rating from independent SSL/TLS assessment tools.

Ready to build

Take the first step.

Start your trial, request access, or talk to our team. Whichever path fits, we'll have you making your first call within days, not quarters.