← Technical API reference

Backend resource · STATIC DECLARATIONS

Hcx Gateway API reference · mansoq-hcx

Static source contract for Hcx Gateway: 5 declared or inherited operation mappings, schema/field evidence and authorization/refusal references. Deployment and behavioral review remain explicit.

Static API contract — behavior review pending. Source baseline f6e9f05f76d4.

Enable JavaScript to inspect structured operation, parameter, schema and permission evidence. Download this reference and its evidence.

Declared route and availability

This resource is declared in mansoq-hcx at /api/{installed_plugin_prefix}//. plugin/local mount; actual prefix and enablement require deployment verification A registered path and an indexed handler do not prove deployment availability, user permission or production readiness.

Operation map

Method Path Action Evidence
POST /api/{installed_plugin_prefix}/check_eligibility/ check_eligibility @action declaration
POST /api/{installed_plugin_prefix}/make_claim/ make_claim @action declaration
POST /api/{installed_plugin_prefix}/send_communication/ send_communication @action declaration
GET /api/{installed_plugin_prefix}/payors/ payors @action declaration
GET /api/{installed_plugin_prefix}/pmjy_packages/ pmjy_packages @action declaration

check_eligibility · POST

POST /api/{installed_plugin_prefix}/check_eligibility/ — action check_eligibility. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location Parameter Type Required
deployment mount installed_plugin_prefix deployment-selected mount prefix true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location Field Declared/inferred read type Requiredness evidence
body policy not declared at read site direct indexing; validation may be upstream

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Class policy declarations: permission_classes: IsAuthenticated.

Explicit response statuses in observed code: status.HTTP_200_OK. Other branches/framework exception handling may differ.

make_claim · POST

POST /api/{installed_plugin_prefix}/make_claim/ — action make_claim. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location Parameter Type Required
deployment mount installed_plugin_prefix deployment-selected mount prefix true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location Field Declared/inferred read type Requiredness evidence
body claim not declared at read site direct indexing; validation may be upstream

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Class policy declarations: permission_classes: IsAuthenticated.

Explicit response statuses in observed code: status.HTTP_200_OK. Other branches/framework exception handling may differ.

send_communication · POST

POST /api/{installed_plugin_prefix}/send_communication/ — action send_communication. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location Parameter Type Required
deployment mount installed_plugin_prefix deployment-selected mount prefix true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location Field Declared/inferred read type Requiredness evidence
body communication not declared at read site direct indexing; validation may be upstream

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Class policy declarations: permission_classes: IsAuthenticated.

Explicit response statuses in observed code: status.HTTP_200_OK. Other branches/framework exception handling may differ.

payors · GET

GET /api/{installed_plugin_prefix}/payors/ — action payors. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location Parameter Type Required
deployment mount installed_plugin_prefix deployment-selected mount prefix true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location Field Declared/inferred read type Requiredness evidence
query query not declared at read site not established

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Class policy declarations: permission_classes: IsAuthenticated.

Explicit response statuses in observed code: status.HTTP_200_OK. Other branches/framework exception handling may differ.

pmjy_packages · GET

GET /api/{installed_plugin_prefix}/pmjy_packages/ — action pmjy_packages. static contract extracted; runtime/permission/payload behavior review pending.

Path and deployment-context parameters:

Location Parameter Type Required
deployment mount installed_plugin_prefix deployment-selected mount prefix true

Directly observed request reads (these do not constitute a complete accepted-payload or requiredness guarantee):

Location Field Declared/inferred read type Requiredness evidence
query query not declared at read site not established
query limit not declared at read site not established

Authorization: no literal permission name was resolved in the bounded handler/helper traversal. Authentication, inherited policies, object/facility scoping and middleware still require review; this does not mean public access.

Class policy declarations: permission_classes: IsAuthenticated.

Integration review checklist

Confirm the installed route and full schema; review authentication, organization/facility scoping, all accepted fields, value-state and date/time semantics, idempotency, pagination, response/exception branches and the allowed correction/reversal workflow. Test positive and negative cases with synthetic data. This source reference does not establish external certification or replace an illustrated user procedure.

Pinned source evidence

Links require access to the private source repository.