generated: '2026-07-18'
method: derived
source: openapi/department-of-better-technology-screendoor-openapi.yml + https://dobtco.github.io/screendoor-api-docs/
notes: >-
  Derived from the Screendoor OpenAPI and published API reference. No SOC 2 / ISO 27001 /
  PCI / HIPAA / FedRAMP compliance program is published by DOBT, so no `Compliance` pointer
  is emitted.
standards:
  - id: oauth2
    conforms: false
    evidence: securityScheme is apiKey (query api_key), not oauth2.
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: >-
      Errors use a plain JSON envelope ({ "error": "..." }) with application/json, not
      application/problem+json.
  - id: rfc5988-web-linking
    conforms: true
    evidence: Pagination uses Link headers with first/last/next/prev relations.
  - id: pagination
    conforms: true
    evidence: Offset pagination via page and per_page (max 100) query parameters.
  - id: json-api
    conforms: false
  - id: fhir-r4
    conforms: false
  - id: scim
    conforms: false
  - id: odata
    conforms: false