Skip to main content
Developers manage credentials and webhooks under Settings → Developers: Neutron · Photon. Credentials come with every Neutron sandbox account. In production they come with Launch and above. Indie has none, because everything on Indie runs on the prescriber’s own sign-in. If you can’t see them on a paid account, ask your organization’s administrator.

​
API credentials

See Authentication for the tokens each one gets.

​
Allowed URLs

An Application credential only works on the domains in its allowed URLs. Add:
  • Every domain your app runs on, including http://localhost:5173 or wherever you develop
  • Every domain that shows the iframe
  • The Prescribe app’s domain: rx.neutron.health, or rx.new in production

​
Rotate a secret

If a client_secret leaks, rotate it under Developers, then update your backend.

​
MCP clients

Production MCP currently supports approved ChatGPT and Claude OAuth clients. To whitelist another client, email support@photon.health with its name, use case and CIMD metadata URL. Neutron allows compatible clients through dynamic CIMD. Existing API credentials can also supply bearer tokens for your own agent. See Connect a client.

​
Webhooks

Webhooks tell your backend when prescriptions and orders change. Add one under Developers with an HTTPS URL, the events you want and a shared secret. See Webhooks.
Last modified on November 1, 2026