Cadmus API

Every API call requires a JSON Web Token (JWT). Obtain one by posting your credentials to /auth/login. The token is valid for 8 hours.

{
  "email": "you@example.com",
  "password": "your-password"
}

curl -s -X POST https://api.cadmuslabs.nl/auth/login \
     -H "Content-Type: application/json" \
     -d '{"email":"you@example.com","password":"your-password"}'

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expiresAt": "2026-03-09T18:30:00Z"
}

Copy the token value. You will pass it as Authorization: Bearer <token> on every subsequent request.

Orders are exposed through the /unified-cases resource. Every order is mapped to a single consistent schema — scan files, dentist, worktypes, and patient data always appear in the same place regardless of which IOS portal the order came from.

curl -s https://api.cadmuslabs.nl/unified-cases \
     -H "Authorization: Bearer <token>"

{
  "items": [
    {
      "guid": "16ad2e12-fb26-4931-ba16-321285d74550",
      "organizationGuid": "8f3d2c1a-9b4e-4f7d-b2e8-1a5c6d7e8f90",
      "status": "new",
      "acceptedData": {
        "uid": "16ad2e12-fb26-4931-ba16-321285d74550",
        "source": "DSCore",
        "externalId": "abc-123",
        "receivedDate": "2026-03-08T09:14:00Z",
        "deliveryDate": "2026-03-10",
        "sentTo": "Cadmus Lab",
        "customer": {
          "clinic": { "name": "SmileCo Dental", "city": "Amsterdam" },
          "dentist": { "fullName": "Dr. A. Smith" }
        },
        "patient": { "fullName": "J. Doe", "referenceNo": "P-001" },
        "remark": "",
        "scanFiles": [
          { "type": "preparationScan", "filename": "upper.stl", "jaw": "upper", "fileType": "stl", "fileLink": "gs://..." }
        ],
        "worktypes": [
          { "categoryId": "Fixed", "restorationTypeId": "Crown", "materialId": "Zirconia", "fdi": "16", "jaw": "Upper" }
        ],
        "administrative": { "priority": false, "remake": false, "contactRequired": false, "additionalInfo": false }
      }
    }
  ],
  "page": 1,
  "pageSize": 20,
  "total": 183
}

Supported query parameters: page, pageSize, from (YYYY-MM-DD), to (YYYY-MM-DD), status (new | accepted).

All files (scan files and the order form PDF) are stored in cloud object storage (Google Cloud Storage) — they are not served directly from the database. The fileLink fields in acceptedData are internal storage paths, not public URLs.

Request a pre-authenticated signed URL from the API. Signed URLs are valid for 15 minutes and can be used directly in a browser, a 3D viewer, or a download client — no extra headers needed.

curl -s "https://api.cadmuslabs.nl/unified-cases/16ad2e12-fb26-4931-ba16-321285d74550/files/upper.stl?fileType=stl" \
     -H "Authorization: Bearer <token>"

{
  "url": "https://storage.googleapis.com/cadmus_collector_bucket/...&X-Goog-Signature=...",
  "filename": "upper.stl",
  "fileType": "stl",
  "expiresAt": "2026-03-09T10:45:00Z"
}

The order form is a single PDF attached to the case (acceptedData.orderForm). Use the dedicated endpoint to get a signed URL for it — no fileType parameter needed.

curl -s "https://api.cadmuslabs.nl/unified-cases/16ad2e12-fb26-4931-ba16-321285d74550/order-form" \
     -H "Authorization: Bearer <token>"

{
  "url": "https://storage.googleapis.com/cadmus_collector_bucket/...&X-Goog-Signature=...",
  "filename": "DS Core_orderform.pdf",
  "expiresAt": "2026-03-09T10:45:00Z"
}

Miscellaneous files are additional non-scan attachments — photos, X-rays, shade or margin-line images, implant reports, and similar supporting files (acceptedData.miscellaneousFiles). Match by the filename at the end of the path, same as scan files.

curl -s "https://api.cadmuslabs.nl/unified-cases/16ad2e12-fb26-4931-ba16-321285d74550/miscellaneous-files/Measurement%201.png" \
     -H "Authorization: Bearer <token>"

{
  "url": "https://storage.googleapis.com/cadmus_collector_bucket/...&X-Goog-Signature=...",
  "filename": "Measurement 1.png",
  "expiresAt": "2026-03-09T10:45:00Z"
}

Pass the url directly to a PDF viewer or trigger a download. Request a fresh URL if the link has expired.

Use these endpoints to resolve portals to human-readable names.