Denial Workbench API reference · mansoq-core

Declared route and availability

This resource is declared in mansoq-core at /api/v1/facility/{facility_external_id}/rcm/denials/. verified core mount in config/urls.py A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Denials: category, team, evidence, deadlines, remedies and disposition.

Operation map

list · GET

GET /api/v1/facility/{facility_external_id}/rcm/denials/ — action list. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records.

retrieve · GET

GET /api/v1/facility/{facility_external_id}/rcm/denials/{external_id}/ — action retrieve. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records.

remedies · GET

The four remedies, with their mechanisms and their payloads.

Published as a catalogue so a client renders four actions. There is no fifth entry and there is no resubmit.

GET /api/v1/facility/{facility_external_id}/rcm/denials/remedies/ — action remedies. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records.

deadlines · GET

Every instrument's window for this denial, with the strictest named.

GET /api/v1/facility/{facility_external_id}/rcm/denials/{external_id}/deadlines/ — action deadlines. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: ValidationError (dynamic detail; inspect source); PermissionDenied: Cannot read revenue-cycle records.

remedy · POST

Record one of the four remedies. Each carries its own payload.

The endpoint refuses an unnamed or unlisted remedy rather than falling back to a generic action, and it refuses a line-level appeal because the extension three guides instruct the use of does not exist in the published profiles.

POST /api/v1/facility/{facility_external_id}/rcm/denials/{external_id}/remedy/ — action remedy. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_manage_rcm_claims_in_facility, can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Explicit response statuses in observed code: status_code. Other branches/framework exception handling may differ.

Declared refusal/error evidence: ValidationError: unknown_remedy; remedy must be one of correction, information_response, reconsideration or appeal. There is no resubmission transaction.; ValidationError: remedy_payload_incomplete; ValidationError: line_level_remedy_unavailable; This remedy is claim-level only: the claim-item-sequence extension used for line-level linkage is not in the published profiles.; PermissionDenied: Cannot submit, adjudicate or settle claims; ValidationError: remedy_request_key_reused; This request key already recorded a different remedy. Use a new key.; PermissionDenied: Cannot read revenue-cycle records.

dispute_routes · GET

The three destinations, and which subject belongs to each.

GET /api/v1/facility/{facility_external_id}/rcm/denials/dispute-routes/ — action dispute_routes. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records.

route_dispute · POST

Record the applicable route and authority — never a single "send to CHI".

An unrecognised subject is refused with the three routes named, because the point of the mapping is that the wrong body will not act on it.

POST /api/v1/facility/{facility_external_id}/rcm/denials/{external_id}/route-dispute/ — action route_dispute. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_manage_rcm_claims_in_facility, can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Explicit response statuses in observed code: 201. Other branches/framework exception handling may differ.

Declared refusal/error evidence: ValidationError: dispute_subject_unrouted; Disputes have three destinations. Name the subject so the applicable authority can be recorded.; PermissionDenied: Cannot submit, adjudicate or settle claims; PermissionDenied: Cannot read revenue-cycle records.

queues · GET

Denial desks, with their owners, aging, escalation and outage rules.

GET /api/v1/facility/{facility_external_id}/rcm/denials/queues/ — action queues. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Observed authorization checks: can_read_account_in_facility. Helper/queryset evidence is included; this is not proof of complete security review.

Declared refusal/error evidence: PermissionDenied: Cannot read revenue-cycle records.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.