OZO FHIR implementation guide
0.6.3 - ci-build
OZO FHIR implementation guide - Local Development build (v0.6.3) built by the FHIR (HL7® FHIR® Standard) Build Tools. See the Directory of published versions
| Official URL: http://ozoverbindzorg.nl/fhir/CapabilityStatement/OZO-Server | Version: 0.6.3 | |||
| Active as of 2026-03-27 | Computable Name: OZOServerCapabilityStatement | |||
The OZO FHIR API provides healthcare communication services for the OZO platform, connecting care professionals with informal caregivers. This base CapabilityStatement is returned for unauthenticated requests. Authenticate with Nuts credentials to receive a role-specific CapabilityStatement detailing your permitted interactions.
Raw OpenAPI-Swagger Definition file | Download
json, xmlNote to Implementers: FHIR Capabilities
Any FHIR capability may be 'allowed' by the system unless explicitly marked as 'SHALL NOT'. A few items are marked as MAY in the Implementation Guide to highlight their potential relevance to the use case.
serverThe OZO FHIR API requires authentication via the Nuts protocol with DPoP tokens. Access is role-based: system, practitioner, related person, or patient. Each role has a specific CapabilityStatement describing permitted interactions. The proxy enforces notify-then-pull for Subscriptions (no payload in notifications) as required in Dutch healthcare.
Authentication via Nuts Verifiable Credentials with DPoP proof-of-possession tokens. mTLS required for system-to-system communication. See the Authentication and Authorization sections of this Implementation Guide for details.
The summary table lists the resources that are part of this configuration, and for each resource it lists:
_include_revincludePatient care teams. See also OZOOrganizationalCareTeam for department/organization teams.
Subscriptions use the notify-then-pull pattern: notifications contain no resource payload. The subscriber must fetch the resource after receiving the notification.