API Info and Metadata

API Versioning

The HTTP header api-version is required. Use it to specify which version of the API you are making the request to.

Supported values:

• 3 Default version (as of 2026-08-20).
• 2 Deprecated version - will be decommisioned in early 2027.

Example: "api-version: 3"

Source System

The HTTP header nhn-source-system is required. Use it to specify which clinical system you are making the API calls from, and possibly which version.

Norsk Helsenett wants all API calls from external actors (that's you!) to be enriched with information about the system that produced the call. It also helps when troubleshooting complex integrations when the sender of the API call identifies itself as accurately as possible.

Example: "nhn-source-system": "My-EPJ, v1.0.2"

Authentication

Authentication is performed via two required HTTP headers:

• Authorization: Write the text DPoP (note the trailing space) followed by the encoded JWT token from HelseID.
• DPoP: Write the encoded DPoP proof from HelseID.

URL for Environments