Clinic resources ยท Connect ยท Nookal
Nookal ยท Setup guideConnect Nookal to Zelix Labs
Generate a Nookal API key for the booking system, limited to the locations we serve.
Prefer us to set it up with you?See the two ways to set it upWhat an API key is
How Nookal limits access
The Nookal help articles we checked describe limiting a key by location: you choose which of your locations the key can reach. They don't describe limiting it to chosen actions, so the action limits come from our code's fixed list of allowed actions (see What we keep).
Nookal also has a newer API v3.0. If your project lead says your project uses it, follow step 2b instead of 2a.
Steps
-
Open Connections
In Nookal, go to Setup and expand Connections.
-
Create the key (2a: API Keys)
Click API Keys, then Generate API Key. Add a note naming the service,
Zelix Labs booking.Select only the locations the booking system covers, switch the key's status on, save, and copy the key.
-
Or create a client (2b: API v3.0)
If your project uses API v3.0, choose API v3.0 under Connections and create a new client named
Zelix Labs booking.Nookal shows the key once, so copy it before leaving the screen. If API v3.0 isn't listed, Nookal support can enable it for your account.
-
Send us the key
Send the key to us through the one-time link your project lead gives you. Please don't send keys by email or chat message: the one-time link can be opened once and then stops working.
-
Keep the off switch in mind
To stop our access, switch the key's status off or delete it on the same page.
Leave these off
| Access | Why we don't need it |
|---|---|
| Locations we don't serve | Leave them unselected so the key can't reach them. |
| Clinical notes, invoices and payments | Our code never requests them. If a project needs package balances, your project lead will agree it with you first. |
What we keep
Every patient record is cut down to name, phone and status the moment it reaches our system. Everything else, including date of birth, address, email, notes and medical alerts, is discarded before any other part of the system sees it.
On top of the limits you set here, our code carries its own fixed list of allowed actions, so a request for anything else is refused before it leaves our system. Read the full clinic security standard.
Sources
Checked against Nookal's help documentation on 25 Oct 2026. Nookal sometimes moves menus between releases. If your screens differ, contact your project lead and we'll go through it with you. The API v3.0 steps come from an integration partner's guide rather than Nookal's own help centre.