Quickstart

The HASP AI API lets you send HIPAA-compliant AI requests from any backend. It is a separate surface from the App Builder SDK — it uses API keys instead of session cookies, and it calls a different base URL.

Base URL

https://api.usehasp.com

Authentication

Every request requires an Authorization header with a Bearer token:

Authorization: Bearer hasp_api_live_<key>

API keys are created in API → Keys → Create Key in your HASP dashboard (/developers/keys/new), or via the API Keys endpoint. The key prefix hasp_api_live_ identifies a live key. Keys are shown in plaintext exactly once on creation — copy it before closing the modal. Requests from a paid organization also require an active Business Associate Agreement (BAA). Without one, every request returns 402 BAA_REQUIRED. Sign the BAA in Settings → Compliance. Free Evaluation organizations are not BAA-gated — and are not covered by a BAA, so never send real PHI from one. See BAA Gating.

Your first request

curl https://api.usehasp.com/v1/ai/chat \
  -H "Authorization: Bearer hasp_api_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "message": "Summarize the HIPAA minimum necessary standard in one paragraph.",
    "stream": false
  }'

Response:

{
  "success": true,
  "data": {
    "id": "msg_01JQMSG000000000000000000",
    "model": "claude-sonnet-4-6",
    "role": "assistant",
    "content": [
      { "type": "text", "text": "The HIPAA minimum necessary standard requires..." }
    ],
    "stop_reason": "end_turn",
    "usage": {
      "input_tokens": 18,
      "output_tokens": 74,
      "cache_creation_input_tokens": 0,
      "cache_read_input_tokens": 0
    }
  },
  "meta": {
    "request_id": "req_01JQREQ000000000000000000"
  }
}

Drop-in Anthropic SDK

If you already use @anthropic-ai/sdk, change one line:

import Anthropic from '@anthropic-ai/sdk';

const client = new Anthropic({
  baseURL: 'https://api.usehasp.com',  // only this line changes
  apiKey: 'hasp_api_live_...',
});

const stream = await client.messages.stream({
  model: 'claude-sonnet-4-6',
  messages: [{ role: 'user', content: 'Hello' }],
  max_tokens: 256,
});

for await (const event of stream) {
  process.stdout.write(event.type === 'content_block_delta' ? event.delta.text : '');
}

Your existing code, tools, and types all continue to work. See POST /v1/messages for the full compat surface.

API surfaces

Surface	Path prefix	Use when
Native	`/v1/ai/*`	New integrations — full HASP features (PHI guard metadata, `store` flag, future tool use)
Anthropic-compat	`/v1/messages`	Existing code using `@anthropic-ai/sdk` — drop-in replacement
OpenAI-compat	`/v1/chat/completions`	Existing code using the `openai` SDK — drop-in replacement
Control plane	`/v1/*`	Manage API keys, webhooks, and inspect usage

Every inference surface reaches the same Anthropic and OpenAI models — see Model Selection.

What’s next

POST /v1/ai/chat — native streaming chat, full event taxonomy
POST /v1/messages — Anthropic SDK drop-in
POST /v1/chat/completions — OpenAI SDK drop-in
PHI Guard — how PHI detection and redaction work
API Keys — create and revoke keys programmatically

AI Studio

Platform

AI API

Data API

App Builder SDK

Base URL

Authentication

Your first request

Drop-in Anthropic SDK

API surfaces

What’s next

​Base URL

​Authentication

​Your first request

​Drop-in Anthropic SDK

​API surfaces

​What’s next

Base URL

Authentication

Your first request

Drop-in Anthropic SDK

API surfaces

What’s next