Naar hoofdinhoud gaan

InBody Integration

Partnership (NDA-gated)

The InBody Partnership API is not publicly documented. Access requires an executed NDA and partner onboarding through InBody. vitalera holds partner credentials; tenants enable per-organisation via the connected_accounts:inbody entitlement.

InBody devices are clinical-grade bioelectrical impedance analysers widely used in hospitals, dialysis clinics, and sports medicine. The Partnership API exposes InBody Cloud scans via an API-key + OTP authentication model (not OAuth).


Data types

Every InBody scan returns a multi-segment body composition report. vitalera exposes the key metrics as individual observations:

MetricUnitLOINC
Weightkg29463-7
Body fat percentage%41982-0
Skeletal muscle masskgcustom inbody-smm
BMI39156-5
BMRkcal60842-4
Total body waterLcustom inbody-tbw
Visceral fat levelcustom inbody-vfl

Authentication

  • API key: long-lived partnership credential
  • OTP: one-time 6-digit code generated per session, valid for a short TTL

vitalera orchestrates the key + OTP handshake internally. Users scan at a physical InBody device; results surface via the partner API within minutes.

Backfill

Up to 365 days of historical scans can be backfilled per user upon initial link.


Connection

curl -X POST https://api.vitalera.io/api/connected-accounts/inbody/oauth/initiate/ \
-H "Authorization: Bearer <user_token>"

(The endpoint name keeps the /oauth/initiate/ shape for consistency, even though the underlying auth is API-key-based.)


Next steps