aid: aerin-medical name: Aerin Medical description: 'Aerin Medical, Inc. is a privately held medical-device company at 2565 Leghorn Street, Mountain View, California, with a Singapore entity at 60 Albert Street. It develops temperature-controlled radiofrequency devices that let ear, nose and throat physicians treat chronic nasal conditions in the office under local anesthetic, without incisions: the VivAer Stylus for nasal airway obstruction and the RhinAer Stylus for chronic rhinitis, both FDA-cleared and delivered through the Aerin Console. More than 200,000 patients have been treated as of March 2026. Aerin Medical operates no developer API programme — no portal, no documentation, no keys, no SDKs, no MCP server, no agent card and no status page. Its corporate site does serve an anonymously readable WordPress REST API, and one namespace of it is a genuinely useful first-party dataset: the doctor finder behind aerinmedical.com/find-ent-doctor/, which returns 1,012 treating ENT locations with coordinates and supports free-text, proximity, product and Center of Excellence filters. The company also publishes a real Coordinated Vulnerability Disclosure Policy for the Aerin Console, though it is not advertised at /.well-known/security.txt.' image: https://aerinmedical.com/wp-content/uploads/2020/02/Aerin_Logo-01.png url: https://raw.githubusercontent.com/api-evangelist/aerin-medical/refs/heads/main/apis.yml x-type: company x-source: harvest:secondary-market x-tier: profiled x-tier-reason: enrichment-pipeline-2026-07-31 x-sector: medical-devices x-api-posture: no-product-api specificationVersion: '0.20' created: '2026-07-31' modified: '2026-07-31' tags: - Company - Medical Devices - Healthcare - ENT - Otolaryngology - Rhinology - Radiofrequency Ablation - Nasal Airway Obstruction - Chronic Rhinitis - Physician Locator - Private Company apis: - name: Aerin Medical Site API (WordPress REST) description: 'Anonymously readable REST surface served by aerinmedical.com at /wp-json — 321 routes across 15 namespaces. The substantive part is Aerin Medical''s own doctor-finder plugin (em-locator/v1): 1,012 ENT practice locations trained on VivAer or RhinAer, each with name, formatted address, phone, latitude/longitude and a public permalink, filterable by free text, by lat/lng proximity, by product (RhinAer 783 locations, VivAer 920) and by Center of Excellence designation (60 locations). Site search (wp/v2/search, 2,242 items), oEmbed and the route-discovery documents also answer anonymously, while every standard wp/v2 content collection returns 401. This is an incidental site surface, not an API product: Aerin Medical publishes no documentation, keys, SDKs, support channel, rate-limit policy, status page or terms of use for it.' humanURL: https://aerinmedical.com/find-ent-doctor/ baseURL: https://aerinmedical.com/wp-json tags: - Physician Locator - Geospatial Search - Content - WordPress - CMS properties: - type: OpenAPI url: openapi/aerin-medical-site-openapi.yml - type: Overlay url: overlays/aerin-medical-site-overlay.yaml - type: Authentication url: authentication/aerin-medical-authentication.yml - type: Conventions url: conventions/aerin-medical-conventions.yml - type: ErrorCatalog url: errors/aerin-medical-problem-types.yml - type: DataModel url: data-model/aerin-medical-data-model.yml - type: Lifecycle url: lifecycle/aerin-medical-lifecycle.yml - type: Conformance url: conformance/aerin-medical-conformance.yml - type: AgentSkill url: skills/_index.yml maintainers: - FN: Kin Lane email: kin@apievangelist.com - FN: APIs.json email: info@apis.io common: - type: Website url: https://aerinmedical.com/ - type: About url: https://aerinmedical.com/company/about-us/ - type: Blog url: https://aerinmedical.com/company/news-and-media/ - type: News url: https://aerinmedical.com/company/news-and-media/ - type: Support url: https://aerinmedical.com/contact-us/ - type: Contact url: https://aerinmedical.com/contact-us/ - type: Careers url: https://aerinmedical.com/company/careers/ - type: Leadership url: https://aerinmedical.com/company/leadership/ - type: TermsOfService url: https://aerinmedical.com/general-terms-of-use/ - type: PrivacyPolicy url: https://aerinmedical.com/privacy-policy/ - type: Security url: https://aerinmedical.com/cybersecurity/ - type: Compliance url: https://aerinmedical.com/compliance/ - type: Patents url: https://aerinmedical.com/patents/ - type: Documentation url: https://aerinmedical.com/ifu/ - type: SafetyInformation url: https://aerinmedical.com/important-safety-information/ - type: GitHubOrganization url: https://github.com/AerinMedical - type: LinkedIn url: https://www.linkedin.com/company/aerin-medical - type: Twitter url: https://twitter.com/AerinMedical - type: Facebook url: https://www.facebook.com/aerinmedical - type: Instagram url: https://www.instagram.com/aerinmedical/ - type: SecondaryMarket url: https://forgeglobal.com/aerin-medical_stock/ - type: WellKnown url: well-known/aerin-medical-well-known.yml - type: DomainSecurity url: security/aerin-medical-domain-security.yml - type: VulnerabilityDisclosure url: security/aerin-medical-vulnerability-disclosure.yml - type: Authentication url: authentication/aerin-medical-authentication.yml - type: AgentSkill url: skills/_index.yml - type: LLMsTxt url: llms/aerin-medical-llms.txt x-enrichment: date: '2026-07-31' status: enriched artifacts_added: 15 pass: local-v1 notes: >- No product API. Contract discovery probed aerinmedical.com, vivaer.com and rhinaer.com for OpenAPI on the host root, GraphQL, MCP tools/list, A2A agent cards at both the canonical and legacy well-known paths, and the full /.well-known/ set — every one 404. The one real machine-readable contract is the site's anonymous WordPress REST API at https://aerinmedical.com/wp-json (15 namespaces, 321 routes), whose access posture is inverted: the standard wp/v2 content collections are 401-blocked by iThemes Security while the company's own em-locator/v1 doctor finder is wide open with CORS *, returning 1,012 treating ENT locations. An OpenAPI 3.1 with 15 verified anonymous operations was derived from that route index plus direct probing; the seven aerin-namespace POST form routes are listed without request bodies because they declare no args and have side effects, so they were not invoked. Searched and found a real Coordinated Vulnerability Disclosure Policy (security@aerinmedical.com, 5-business-day SLA, safe harbour) and a published corporate compliance programme. The locator endpoint was observed over-returning a Maps API key and internal CRM fields; recorded as an exposure without reproducing the values. No packages, MCP server, agent card, OAuth scopes, sandbox, CLI, changelog, webhooks or trust center exist; those artifacts were deliberately not written rather than stubbed. No idempotency contract exists, so no Idempotency pointer was emitted.