# Sensely

> Conversational-AI healthcare company. An empathy-driven avatar assistant guides health-plan members
> and patients through symptom assessment, care navigation, mental-health check-ins, enrollment and
> chronic-condition management. Licensed to payers, providers, pharmaceutical companies and employers
> and embedded by partners through first-party iOS, Android and Web SDKs. Clinical content is licensed
> from Mayo Clinic and the NHS. Acquired by Mediktor, announced 5 June 2024.

This file was generated by API Evangelist from publicly reachable Sensely material on 2026-08-26.
It is not published by Sensely. Sensely serves no /llms.txt (https://sensely.com/llms.txt returns 404).

## What an agent should know first

- There is no public API reference and no OpenAPI, AsyncAPI, GraphQL SDL or Postman collection.
  Full SDK and API documentation is released only to partners with an executed Partner Agreement.
- The integration surface most partners use is a client-side widget, not a server API: a UMD
  JavaScript bundle mounted into a host page, or the iOS/Android SDKs.
- The platform API host is https://apis.sensely.com (AWS API Gateway). Every request without an
  x-api-key header returns HTTP 403 ForbiddenException, including requests to paths that do not exist,
  so a 403 is not evidence that an endpoint is real.
- There is no MCP server, no agent card, and no /.well-known/ document on any Sensely host.
- There is no published pricing. Access begins with a request-access form.

## APIs

- [Sensely Platform API](https://apis.sensely.com): Partner authentication, token refresh, member
  password reset, program-code verification and avatar audio generation. No published contract.

## Observed public endpoints

- POST https://apis.sensely.com/authenticate/authenticate — partner username/password to token pair
- POST https://apis.sensely.com/authenticate/refresh — refresh token exchange, optional region
- POST https://apis.sensely.com/pub/reset-password — member password reset (x-api-key required)
- GET  https://apis.sensely.com/pub/verify-program-code?program_code= — (x-api-key required)
- GET  https://apis.sensely.com/cdn/getAvatarAudio?mode=gen.php&orgID= — avatar speech audio

Regional conversation-service paths referenced by the SDK but not reachable unauthenticated:
/proc/conversations/, /proc/assessmentData, /proc/getDynamicState,
/proc/get_symptom_checker_outcome_result/, /proc/patient/current/conversations,
/proc/patient/current/settings

## SDKs

- [iOS SDK](https://github.com/Sensely/SenselySDK-iOS): Swift Package, current 3.14.4 (2024-11-27).
  Binary XCFramework hosted on nexus.sense.ly. CocoaPods channel is frozen at 3.9.4 (2021-05-25).
- [Android SDK](https://github.com/Sensely/SDK-Android): source only, no registry artifact, no version.
- [Web SDK](https://github.com/Sensely/SDK-Web): UMD bundle at an unpinned CDN path
  https://clinician-web.sense.ly/latest/sensely.umd.js.min — consumers cannot pin a version.

## Web widget

- Global: SenselyWidget. Mount: <div id="sensely-widget">. Init: SenselyWidget.init(config, onReady).
- Events on the mount element: onSenselyWidgetResults, onSenselyWidgetSessionTimeout,
  onSenselyWidgetExit.
- Live demo: https://clinician-web.sense.ly/latest/ — drawer variant https://clinician-web.sense.ly/nhs/

## Authentication

- Partner credentials (username/password) exchanged for a token pair at apis.sensely.com.
- AWS API Gateway x-api-key on /pub/* endpoints.
- Member identity is an Amazon Cognito user pool; its OIDC discovery document is public:
  https://cognito-idp.us-west-1.amazonaws.com/us-west-1_pMO3JfnoS/.well-known/openid-configuration
  Scopes advertised: openid, email, phone, profile.
- UK/NHS deployments federate to NHS login via nhslogin.sense.ly.

## Company

- [Website](https://sensely.com/)
- [Solutions](https://sensely.com/solutions/)
- [News](https://sensely.com/news/)
- [About](https://sensely.com/about/)
- [Customer portal](https://sensely.com/customer-portal/)
- [System status](https://status.sense.ly/) — UptimeRobot; landing page at
  https://sensely.com/sensely-system-status/
- [GitHub organization](https://github.com/Sensely)
- [Terms of Use](https://sensely.com/terms-of-use/)
- [Privacy Policy](https://sensely.com/privacy-policy/)
- [Privacy Centre (UK/NHS)](https://sensely.com/privacy-centre/)
- [Parent company: Mediktor](https://www.mediktor.com/)

## Known gaps

- No OpenAPI or any machine-readable contract.
- No error reference; errors are the stock AWS API Gateway {"message":...} envelope with the type in
  the x-amzn-errortype header. Not RFC 9457.
- No documented rate limits and no rate-limit response headers.
- No idempotency keys, while the Web SDK auto-retries failed POSTs — writes are at-least-once.
- No documented reversal path or window for any write, including recorded assessments.
- No versioning policy, deprecation policy, Sunset/Deprecation headers or SLA.
- No certifications published: no SOC 2, ISO 27001, HITRUST or NHS DSPT claim; the Terms of Use
  reference a Business Associate Agreement by an unfilled template placeholder.
- Not FHIR. Symptom-assessment output and the patient record are proprietary shapes, so every payer
  or provider integration needs a bespoke connector.