Billing Bridge API reference · mansoq-core

Declared route and availability

This resource is declared in mansoq-core at /api/v1/facility/{facility_external_id}/rcm/bridge/. verified core mount in config/urls.py A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Cross-navigation between MANSOQ Billing and the Saudi RCM subsystem.

Read-only by construction. Every action resolves its subject inside the facility in the URL, so an account, invoice, encounter or patient from another tenant is a 404 rather than a composed view of somebody else's money.

Operation map

list · GET

The five directions, so the surface is discoverable rather than told.

GET /api/v1/facility/{facility_external_id}/rcm/bridge/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records.

account · GET

One billing account, joined to everything RCM knows about it.

GET /api/v1/facility/{facility_external_id}/rcm/bridge/account/ — action account. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records; ValidationError (dynamic detail; inspect source); ValidationError: bridge_subject_required.

encounter · GET

Charge → claim line for one encounter, with the receivable counted once.

GET /api/v1/facility/{facility_external_id}/rcm/bridge/encounter/ — action encounter. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records; ValidationError: bridge_subject_required.

invoice · GET

Invoice ↔ claims ↔ encounters, plus tax and the legal recipient.

GET /api/v1/facility/{facility_external_id}/rcm/bridge/invoice/ — action invoice. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records; ValidationError: bridge_subject_required.

patient · GET

Registration's coverages, with the rung that established each one.

GET /api/v1/facility/{facility_external_id}/rcm/bridge/patient/ — action patient. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records; ValidationError: bridge_subject_required; ValidationError (dynamic detail; inspect source).

remittance · GET

Billing's reconciliations beside the advice and cash ledgers.

GET /api/v1/facility/{facility_external_id}/rcm/bridge/remittance/ — action remittance. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records; ValidationError: bridge_subject_required.

liability_split · GET

Collectable patient debt and unresolved insurance shortfall, apart.

GET /api/v1/facility/{facility_external_id}/rcm/bridge/liability-split/ — action liability_split. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records; ValidationError: bridge_subject_required.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.