# ROOK (slim)

> ROOK Connect, from Rookeries Development Corp., collects health data from wearables and phone health stores, normalises it into sleep, physical and body summaries and events, and sends it by webhook or a REST API.

- Full: https://www.anchorterminal.com/tools/rook.md (~6,300 tokens) · this version ~1,630 tokens · JSON https://www.anchorterminal.com/tools/rook.json · canonical https://www.anchorterminal.com/tools/rook
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-14

**C · 54.9/100 · rank #718 of 1076 · #8 in Health records & wellness data · not agent-ready · confidence medium**


Assessment: Graded on the REST API. A public OpenAPI file, a free Sandbox from the self-serve portal, published plan prices and a dated changelog. Credentials are one client UUID and secret per environment with no scopes, 429 handling isn't documented, the API is meant for occasional queries rather than bulk reads, and no SOC 2 report or security contact was found.

## Facts

- Kind: HTTP API · vendor: Rookeries Development Corp. · category: Health records & wellness data · legal entity: Rookeries Development Corp. · provenance 58/100
- Local only (HTTP): npm `react-native-rook-sdk`, npm `capacitor-rook-sdk`
- Auth: API key · pricing: Paid · x402: no · licence: Proprietary service under ROOK's Terms and Conditions for ROOK services
- Probe metrics: not measured yet (probes haven't run)
- API: REST, OpenAPI 3.0.3, version 2.0.1, 29 operations under /api/v1, /api/v2 and /v2/processed_data. Production https://api.rook-connect.com, Sandbox https://api.rook-connect.review
- Data: Sleep, physical and body health summaries and events (heart rate, steps, oxygenation, stress, nutrition, hydration, blood glucose, blood pressure, temperature, mood), from API sources such as Garmin, Fitbit, Oura, Polar, Withings, Whoop and Dexcom and SDK sources such as Apple Health, Health Connect and Samsung Health
- Credentials: Client UUID and secret key per environment from the ROOK Portal, sent by HTTP Basic auth. The secret is shown once. No scopes found
- Rate limits: Typical 60 requests a minute and 10,000 a day, varying by plan. No 429 or Retry-After behaviour documented
- Webhooks: Data webhook configured in the portal with X-ROOK-HASH HMAC validation and staggered retries. Notification webhook set up by support
- Consent: Users authorise each source through ROOK's authoriser links, the SDKs or the ROOK App. A revoke endpoint ends a connection
- SDKs: iOS, Android, Flutter, React Native (react-native-rook-sdk 5.2.0, 2 October 2026) and Capacitor (capacitor-rook-sdk 4.2.1, 8 October 2026). SDK 4.2.0 LTS has six months of support
- Pricing: Core $399 a month (750 active users), Core+ $999 (5,000), Business $1,999 (15,000), Enterprise custom. Add-ons $79 to $499 a month. Lab Data API from $249 a month for 300 files
- Status: rook.statuspage.io with components for the API, the connections page and each authorisation source
- Compliance: HIPAA-aligned security programme, BAAs with covered entities, GDPR as processor, per tryrook.io. Data stored in AWS in the United States per the privacy policy
- Prices: Core plan, up to 750 active users $399 per month (plan); Business plan, up to 15,000 active users, all add-ons $1999 per month (plan)

- Scores: Reliability 75, Performance pending, Schema & documentation 74, Agent ergonomics 49, Security & auth 32, Payments & pricing 25, Task success pending, Maintenance & community 73, Transparency & trust 55 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines and scored on the REST API. · Schema & documentation, OpenAPI 3.0.3 file with 29 operations linked from the Redoc reference (25). · Agent ergonomics, Summaries and per-type event endpoints size responses by date, with no field selection found (12 of 25). · Security & auth, One client UUID and secret per environment over Basic auth, secret shown once, no scopes, expiry or rotation found (12 of 30). · Payments & pricing, Read with the hosted rubric. · Maintenance & community, Changelog entry dated 7 October 2026 and capacitor-rook-sdk 4.2.1 published on 8 October (30). · Transparency & trust, Closed service with public services terms dated August 2026 (15 of 30).
- Sources: 17, open questions: 6, both in the full twin
- Capabilities: health.wearables, health.consent, health.fhir
- JSON: https://www.anchorterminal.com/api/v1/tools/rook.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/rook.svg` or a link to https://www.anchorterminal.com/tools/rook from a page on tryrook.io or one of its subdomains, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Send HTTP Basic auth with client_uuid as the username and the secret key as the password, plus a User-Agent header, or the WAF returns 403
2. Use https://api.rook-connect.review for Sandbox and https://api.rook-connect.com for production. Each has its own credentials
3. Read health data from the data webhook. Use the API only for occasional queries, and stay under 60 requests a minute
4. Deduplicate summaries on document_version and datetime. ROOK resends a summary with a higher document_version when it changes
5. Call POST /api/v1/user_id/{user_id}/data_sources/revoke_auth to end a connection. Some providers take hours to stop sending data

## Connect

```bash
curl https://api.rook-connect.review/api/v1/client/users/status \
  -u <client_uuid>:<secret_key> \
  -H 'User-Agent: MyApp/1.0.0'
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/rook

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Terra API | B | 65.9 | health.wearables, health.consent, health.fhir | https://www.anchorterminal.com/tools/terra.min.md |
| Aidbox | B | 64.2 | health.fhir, health.consent | https://www.anchorterminal.com/tools/aidbox.min.md |
| Health Gorilla | C | 59.3 | health.fhir, health.consent | https://www.anchorterminal.com/tools/health-gorilla.min.md |
| Validic Inform | C | 57.9 | health.wearables, health.consent | https://www.anchorterminal.com/tools/validic.min.md |
| Zus Health | C | 56.6 | health.fhir, health.consent | https://www.anchorterminal.com/tools/zus-health.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)