You can look at the documentation (OAuth 2.0 & OpenID Connect) for setting up a resource server in IRIS.

You could use the SearchAndFetchGeneral API of the Access Gateway. See the documentation at API to Generate an EPR

You can also look at the ExportAllPatients API of the Access Gateway (API to Search and Fetch Patients).