# Mantra Health

> Mantra Health, Inc. is a digital mental health company that partners with colleges and universities
> to extend campus counseling centers with tele-mental health care. It is NOT a developer-facing API
> company: it operates a first-party API, but publishes no developer portal, no API reference, no SDK
> and no machine-readable specification. This file is generated by API Evangelist from probed
> evidence, not copied from a provider-published llms.txt (Mantra Health serves none).

## What Mantra Health is

Mantra Health sells institutional contracts to higher-education institutions. Its platform pairs a
partner clinic of licensed psychiatrists, therapists and wellness coaches with software used by
students, campus counseling staff and clinicians. Products named on its own site and status page:

- Mantra Hub — the student-facing application (hub.mantrahealth.com)
- Mantra Collaboration Portal — used by campus counseling staff to co-manage care with Mantra
  providers; described as an extension of Mantra's proprietary EHR (mcp.mantrahealth.com)
- Provider Portal / Patient Portal / Management Portal — role-specific surfaces
- Beacon — https://mantrahealth.com/our-solutions/beacon/
- ConnectNow — 24/7/365 crisis and on-demand emotional support

## API surface

- Mantra Health GraphQL API — https://api.mantrahealth.com/graphql
  The host root returns the plain-text banner "Mantra Health API". The endpoint is served by Apollo
  Server, is reachable anonymously, and answers the meta field {__typename} with "Query". Schema
  introspection is DISABLED: a full introspection query and an unknown field both return HTTP 400
  {"errors":[{"message":"Invalid request.","extensions":{"code":"GRAPHQL_VALIDATION_FAILED"}}]}.
  No schema, operation list or type system is publicly readable. Apollo CSRF prevention is enforced.
  There is no public documentation for this API.

- Mantra Health WordPress Content API — https://mantrahealth.com/wp-json/
  The unauthenticated WordPress REST API behind the marketing and resource site. This is the website
  CMS, NOT the clinical product API. Namespaces include wp/v2, oembed/1.0, yoast/v1, jetpack/v4.

- Status API — https://mantrahealth.statuspage.io/api/v2/summary.json
  Atlassian Statuspage v2 JSON, available anonymously. Its component list is the clearest public
  evidence that Mantra operates an API at all: components include API (listed twice), SSO,
  3rd Party Integrations, Mantra Hub, Mantra Collaboration Portal, Patient Portal, Provider Portal,
  Management Portal, End User Experiences and Services.

## Runtime conventions observed on api.mantrahealth.com

- Rate limiting: X-RateLimit-Limit (observed 35), X-RateLimit-Remaining, X-RateLimit-Reset (Unix
  epoch seconds). Legacy X-RateLimit-* form, not RFC 9331. Window length is not documented.
- Request tracing: every response carries X-Mantra-Request-Id, a distinct UUID per request.
- Errors: GraphQL errors[] envelope with Apollo extensions.code. Not RFC 9457.
- Transport: HSTS max-age 31536000 with includeSubDomains, a restrictive Content-Security-Policy,
  X-Frame-Options DENY, X-Content-Type-Options nosniff.

## Compliance

From https://mantrahealth.com/security-and-privacy/ — HIPAA adherence, SOC 1 and SOC 2 external
audit, and stated alignment with TX-RAMP. No report, certificate, auditor or date is published, and
there is no trust portal from which to request one. FERPA is not mentioned.

## What does NOT exist

Verified absent by direct probe on 2026-08-25, on every Mantra Health host:

- No OpenAPI, Swagger, AsyncAPI, WSDL or Protobuf contract
- No readable GraphQL SDL (introspection disabled)
- No MCP server. NOTE: mcp.mantrahealth.com is the Mantra Collaboration Portal, a React SPA — it is
  NOT a Model Context Protocol server, and a tools/list POST to it returns 404.
- No A2A agent card at /.well-known/agent-card.json or /.well-known/agent.json on any host
- No /.well-known/ document of any kind, including security.txt and api-catalog
- No provider-published llms.txt
- No SDK or client library in npm, PyPI, RubyGems or on GitHub (the mantrahealth GitHub org exists
  but has zero public repositories)
- No CLI, no sandbox, no changelog, no Postman collection, no pricing page, no developer portal

## Links

- Website: https://mantrahealth.com/
- Solutions: https://mantrahealth.com/our-solutions/
- Blog: https://mantrahealth.com/blog/
- Resources: https://mantrahealth.com/resources/
- Security and Privacy: https://mantrahealth.com/security-and-privacy/
- Status: https://mantrahealth.statuspage.io/
- Contact: https://mantrahealth.com/get-in-touch/ (hi@mantrahealth.com)
- Student login: https://hub.mantrahealth.com/
- Privacy Policy: https://mantrahealth.com/privacy-policy/
- Terms and Conditions: https://mantrahealth.com/terms-and-conditions/
- Careers: https://job-boards.greenhouse.io/mantrahealth