Analyse a photo into an unsaved review draft
Requires the current category notice ID, its version and explicit acceptance. Only JPEG/PNG base64 is accepted, up to 4 MiB encoded image bytes and 16 megapixels. The advertised notice identifies the configured recipient: a private self-hosted health service, or explicitly enabled OpenRouter with Azure (US). Auto detects food/BP/glucose in one call and requires consent for all three. Identified meter photos are retained encrypted for up to 30 days; food photos are never persisted. Reuse captureId and identical input after network failure; an existing processing receipt never creates a second provider call. Unsupported, mixed, ambiguous or unreadable results require a retake. Identity documents and lab reports are not supported.
Authorization
bearer In: header
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/v1/me/captures" \ -H "Content-Type: application/json" \ -d '{ "captureId": "255ed88a-e063-46f6-943a-5ff3e0fe79ed", "category": "auto", "image": { "mimeType": "image/jpeg", "base64": "string" }, "consent": { "noticeId": "string", "version": "2026-09-09", "accepted": true } }'{ "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "status": "draft", "reviewRequired": true, "createdAt": "2019-08-24T14:15:22Z", "expiresAt": "2019-08-24T14:15:22Z", "model": "string", "notice": { "id": "string", "version": "2026-09-09", "purpose": "health_image_analysis", "recipient": "string", "en": "string", "ms": "string", "evidenceRetentionDays": 0 }, "category": "bp", "evidenceId": "84c8ea22-9959-4357-9a32-7546d09a0037", "readings": [ { "code": "8480-6", "valueNum": 0, "unit": "string", "confidence": 0, "displayedValue": 0, "displayedUnit": "mm[Hg]" } ]}Record at most one consented app-active event for the current Malaysia day POST
The server derives the authenticated owner and current time. No event is stored without analytics consent. Send an empty object; no health, device, session or client-time fields are accepted.
Cancel your unconfirmed capture and discard its photo and draft DELETE
Idempotent for cancelled UUIDs. In-flight provider responses cannot restore a cancelled capture or its evidence. Confirmed passport records are not deleted through this route.