List Authorizations¶

Lists the authorizations on one of a case's coverages.

Endpoint¶

GET /v2/cases/{spry_case_id}/coverages/{coverage_id}/authorizations

Path Parameters¶

Parameter	Type	Required	Description
`spry_case_id`	string	Yes	The case's business key.
`coverage_id`	string	Yes	One of the patient's coverages, from `GET /v2/patients/{patient_id}/coverages`.

Request¶

curl --location '{base_url}/v2/cases/SPRY-63120-2/coverages/90455/authorizations' \
  --header 'Authorization: Bearer JWT_TOKEN'

Response¶

Success Response¶

Code: 200 OK

[
  {
    "id": "auth-5512",
    "spry_case_id": "SPRY-63120-2",
    "coverage_id": "90455",
    "reference_number": "REF-88213",
    "status": "ACTIVE",
    "payer": {
      "id": "auth-5512",
      "name": "Example Therapy \u2014 Riverside"
    },
    "authorized_visit_count": 24,
    "used_visit_count": 6,
    "remaining_visit_count": 18,
    "effective_from": "2026-08-27T14:30:00Z",
    "effective_to": null,
    "plan_start_date": "2026-08-27T14:30:00Z",
    "plan_end_date": "2026-08-27T14:30:00Z",
    "cpt_codes": [
      {
        "code": "97110",
        "authorized_visit_count": 24,
        "used_visit_count": 6
      }
    ],
    "icd_codes": [
      "M25.562"
    ],
    "contact": {
      "phone": "+1-555-0143",
      "fax": null
    },
    "comments": null,
    "created_at": "2026-08-27T14:30:00Z",
    "updated_at": "2026-08-27T14:30:00Z"
  }
]

Error Response¶

Code: 400 Bad Request

{
  "code": "bad_request",
  "message": "Validation failed",
  "errors": [
    {
      "field": "patient_id",
      "message": "must be a string"
    }
  ]
}

Every error has the same shape — a machine-readable code, a message, and an errors[] array that's empty when there's nothing field-specific to report. The HTTP status is authoritative.

Status	`code`	Meaning
`400 Bad Request`	`bad_request`	The request body or parameters failed validation. `errors[]` names the offending fields.
`401 Unauthorized`	`unauthorized`	The access token is missing, malformed or expired.
`403 Forbidden`	`forbidden`	The request references a resource outside the token's organisation or clinic scope.
`404 Not Found`	`not_found`	No such resource, or it's outside your scope.
`429 Too Many Requests`	`rate_limited`	Rate limit exceeded. Back off and retry.
`500 Internal Server Error`	`internal_error`	Unexpected server error.
`502 Bad Gateway`	`upstream_error`	Upstream service failed or timed out.