Access

This API is user-restricted, meaning an end user must be present and authenticated to use it.

The end user must be:

• a patient
• authenticated with NHS login to P9 identity verification level

The API uses OpenID Connect to authenticate the end user and OAuth 2.0 to authorise the calling system. It supports the following security pattern using NHS login:

• User-restricted RESTful APIs - NHS login separate authentication and authorisation