Skip to main content
Developers manage credentials and webhooks under Settings → Developers: Neutron · Photon. Credentials come with every Neutron sandbox account. In production they come with Launch and above. Indie has none, because everything on Indie runs on the prescriber’s own sign-in. If you can’t see them on a paid account, ask your organization’s administrator.

​
API credentials

See Authentication for the tokens each one gets.

​
Allowed URLs

An Application credential only works on the domains in its allowed URLs. Add:
  • Every domain your app runs on, including http://localhost:5173 or wherever you develop
  • Every domain that shows the iframe
  • The Prescribe app’s domain: rx.neutron.health, or rx.new in production

​
Rotate a secret

If a client_secret leaks, rotate it under Developers, then update your backend.

​
MCP clients

To let another MCP client, such as a scribe, act for a prescriber, it must be allowlisted on your Application credential. Ask your Photon contact. See Connect a client.

​
Webhooks

Webhooks tell your backend when prescriptions and orders change. Add one under Developers with an HTTPS URL, the events you want and a shared secret. See Webhooks.
Last modified on October 11, 2026