Hi @defcon,
VDUI’s web API is basically this: VisitDocumentsController.
It’s pretty simple: one URL to upload a visit document, and one URL to download a visit document.
There is a plan to refactor this module into Patient Attachments UI and while doing so make it RESTful. But that has not yet been prioritised yet. Another note about this topic here.