> ## Documentation Index
> Fetch the complete documentation index at: https://docs.maxcare.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Get prior authorization by ID

> Returns a single prior authorization by ID. Requires read:prior_authorizations scope.



## OpenAPI

````yaml /openapi-v4.json get /prior-authorizations/{id}
openapi: 3.0.0
info:
  title: Max AI Public API
  description: API for third-party marketplace apps
  version: '4.0'
  contact: {}
servers:
  - url: https://api.maxcare.ai/v4
security: []
tags: []
paths:
  /prior-authorizations/{id}:
    get:
      tags:
        - Prior Authorizations
      summary: Get prior authorization by ID
      description: >-
        Returns a single prior authorization by ID. Requires
        read:prior_authorizations scope.
      operationId: PriorAuthorizationsPublicController_getPriorAuthorization
      parameters:
        - name: id
          required: true
          in: path
          description: Prior authorization ID
          schema:
            type: string
        - name: X-Organization-Id
          in: header
          required: true
          schema:
            type: string
          description: Target clinic organization ID
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetPriorAuthorizationSuccessResponseV4'
        '400':
          description: Missing or invalid request parameter
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PublicApiBadRequestResponse'
        '401':
          description: Invalid or missing API key
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PublicApiUnauthorizedResponse'
        '403':
          description: Insufficient scope
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PublicApiForbiddenResponse'
        '404':
          description: Resource not found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PublicApiNotFoundResponse'
        '429':
          description: Rate limit exceeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PublicApiRateLimitResponse'
      security:
        - api-key: []
components:
  schemas:
    GetPriorAuthorizationSuccessResponseV4:
      type: object
      properties:
        code:
          type: string
          description: Response code
          example: success
        data:
          $ref: '#/components/schemas/ExternalPriorAuthorizationResponseV4'
      required:
        - code
        - data
    PublicApiBadRequestResponse:
      type: object
      properties:
        code:
          type: string
          description: Error code
          example: bad_request
        message:
          type: string
          description: Human-readable error message
          example: '''id'' must be a valid UUID'
        trace_id:
          type: string
          description: Trace ID for debugging
          example: 550e8400-e29b-41d4-a716-446655440000
      required:
        - code
        - message
        - trace_id
    PublicApiUnauthorizedResponse:
      type: object
      properties:
        code:
          type: string
          description: Error code
          example: unauthorized
        message:
          type: string
          description: Human-readable error message
          example: Invalid or missing API key
        trace_id:
          type: string
          description: Trace ID for debugging
          example: 550e8400-e29b-41d4-a716-446655440000
      required:
        - code
        - message
        - trace_id
    PublicApiForbiddenResponse:
      type: object
      properties:
        code:
          type: string
          description: Error code
          example: forbidden
        message:
          type: string
          description: Human-readable error message
          example: Insufficient scope
        trace_id:
          type: string
          description: Trace ID for debugging
          example: 550e8400-e29b-41d4-a716-446655440000
      required:
        - code
        - message
        - trace_id
    PublicApiNotFoundResponse:
      type: object
      properties:
        code:
          type: string
          description: Error code
          example: not_found
        message:
          type: string
          description: Human-readable error message
          example: Resource not found
        trace_id:
          type: string
          description: Trace ID for debugging
          example: 550e8400-e29b-41d4-a716-446655440000
      required:
        - code
        - message
        - trace_id
    PublicApiRateLimitResponse:
      type: object
      properties:
        code:
          type: string
          description: Error code
          example: rate_limit_exceeded
        message:
          type: string
          description: Human-readable error message
          example: Rate limit exceeded. Maximum 1000 requests per 60 seconds.
        trace_id:
          type: string
          description: Trace ID for debugging
          example: 550e8400-e29b-41d4-a716-446655440000
      required:
        - code
        - message
        - trace_id
    ExternalPriorAuthorizationResponseV4:
      type: object
      properties:
        id:
          type: string
          description: Prior authorization unique identifier
          example: pra_a1b2c3d456784abc9def0123456789ab
        authorizationNumber:
          type: string
          description: Payer-issued authorization number
          example: AUTH123456
        insurancePolicyId:
          type: string
          description: Insurance policy ID this authorization belongs to
          nullable: true
          example: pol_b2c3d4e567894bcdaef0123456789abc
        startDate:
          type: string
          description: Authorization window start date
          nullable: true
          example: '2026-01-01T00:00:00.000Z'
        endDate:
          type: string
          description: Authorization window end date
          nullable: true
          example: '2026-12-31T00:00:00.000Z'
        numVisits:
          type: number
          description: Approved number of visits
          nullable: true
          example: 12
        numRemaining:
          type: number
          description: Remaining number of visits
          nullable: true
          example: 7
        active:
          type: boolean
          description: Whether the authorization is currently active/valid in the EHR
          example: true
        cptCodes:
          description: >-
            CPT codes the authorization covers (drug/procedure linkage).
            Populated for EZDerm; null for ModMed.
          nullable: true
          example:
            - J0178
            - '67028'
          type: array
          items:
            type: string
        authType:
          type: string
          description: >-
            Authorization type as reported by the EHR (ModMed only, e.g.
            'Authorization', 'Referral')
          nullable: true
          example: Authorization
        description:
          type: string
          description: Free-text description / note
          nullable: true
        terminatedAt:
          type: string
          description: When the authorization disappeared from the EHR (soft delete)
          nullable: true
          example: null
        source:
          type: string
          description: EHR source
          nullable: true
          enum:
            - modmed
            - ezderm
        createdAt:
          type: string
          description: Created timestamp
          example: '2026-03-20T18:35:10.209Z'
        updatedAt:
          type: string
          description: Last updated timestamp
          example: '2026-03-23T03:15:47.285Z'
        patient:
          description: Patient this authorization belongs to
          nullable: true
          allOf:
            - $ref: '#/components/schemas/ExternalPatientResponseV3'
      required:
        - id
        - authorizationNumber
        - insurancePolicyId
        - startDate
        - endDate
        - numVisits
        - numRemaining
        - active
        - cptCodes
        - authType
        - description
        - terminatedAt
        - source
        - createdAt
        - updatedAt
        - patient
    ExternalPatientResponseV3:
      type: object
      properties:
        id:
          type: string
          description: Patient unique identifier
          example: pat_c56103bcd39c46d39f3138dd2b5e05f6
        mrn:
          type: string
          description: Medical record number
          nullable: true
          example: MRN-10042
        firstName:
          type: string
          description: First name
          nullable: true
          example: Sarah
        lastName:
          type: string
          description: Last name
          nullable: true
          example: Johnson
        middleName:
          type: string
          description: Middle name
          nullable: true
          example: Marie
        gender:
          type: string
          description: Gender
          nullable: true
          example: Female
        dateOfBirth:
          type: string
          description: Date of birth (YYYY-MM-DD)
          nullable: true
          example: '1985-03-15'
        email:
          type: string
          description: Email address
          nullable: true
          example: sarah.johnson@email.com
        phone:
          type: string
          description: Phone number
          nullable: true
          example: (555) 123-4567
        createdAt:
          type: string
          description: Created timestamp
          example: '2024-08-15T09:30:00.000Z'
        updatedAt:
          type: string
          description: Last updated timestamp
          example: '2025-01-20T14:22:00.000Z'
      required:
        - id
        - mrn
        - firstName
        - lastName
        - middleName
        - gender
        - dateOfBirth
        - email
        - phone
        - createdAt
        - updatedAt
  securitySchemes:
    api-key:
      scheme: bearer
      bearerFormat: JWT
      type: http
      description: Marketplace API key

````