OIG exclusions recorded with an NPI
GET /v1/providers/{npi}/exclusions
GET https://api.healthcare.dev/v1/providers/{npi}/exclusionsExclusions from the HHS OIG List of Excluded Individuals/Entities (LEIE) recorded with this NPI, matched by NPI as listed in the OIG file: exclusion type and authority, exclusion date, reinstatement date and waiver. exclusion_recorded is true when the current file lists an exclusion in effect with this NPI. Most LEIE records carry no NPI, so exclusion_recorded: false means no exclusion recorded with this NPI, never that the provider is not excluded: search by name (/v1/exclusions?q=) and confirm identity with OIG's online search, which verifies SSN or EIN. note says this in words; show it with the answer.
Requires an API key: Authorization: Bearer hdev_live_.... See Authentication.
Path parameters
| Name | Type | Required | Description | Example |
|---|---|---|---|---|
npi | string | yes | 10-digit National Provider Identifier | 1881018208 |
Query parameters
| Name | Type | Required | Description | Example |
|---|---|---|---|---|
view | "compact" | "standard" | "full" | no | How much of each record to return (default full). compact: id, npi, entity_type, name, exclusion_type, exclusion_date, reinstatement_date, status, match_score (search results) (fewest tokens, for agents). standard: every field except replaced_by. full: every field. | compact |
fields | string | no | Comma-separated fields to return instead of a view. Valid fields: id, npi, upin, entity_type, name, general, specialty, address, exclusion_type, exclusion_authority, exclusion_category, exclusion_date, reinstatement_date, waiver_date, waiver_state, status, effective_start, effective_end, replaced_by, match_score (search results). | id,npi,entity_type |
Examples
curl
curl "https://api.healthcare.dev/v1/providers/1881018208/exclusions" \
-H "Authorization: Bearer $HDEV_API_KEY"TypeScript
const res = await fetch("https://api.healthcare.dev/v1/providers/1881018208/exclusions", {
headers: { Authorization: `Bearer ${process.env.HDEV_API_KEY}` },
});
const { data, meta } = await res.json();Python
import os
import requests
res = requests.get("https://api.healthcare.dev/v1/providers/1881018208/exclusions", headers={"Authorization": f"Bearer {os.environ['HDEV_API_KEY']}"})
body = res.json()Try it
Response
Exclusions recorded with the NPI
{
"data": {
"npi": "string",
"exclusion_recorded": true,
"matched_by": "npi_as_listed",
"note": "string",
"exclusions": [
{
"id": "string",
"npi": "string",
"upin": "string",
"entity_type": "individual",
"name": {
"display": null,
"last": null,
"first": null,
"middle": null,
"business": null
},
"general": "string",
"specialty": "string",
"address": {
"line1": null,
"city": null,
"state": null,
"postal_code": null
},
"exclusion_type": "string",
"exclusion_authority": "string",
"exclusion_category": "mandatory",
"exclusion_date": "2026-10-01",
"reinstatement_date": "2026-10-01",
"waiver_date": "2026-10-01",
"waiver_state": "string",
"status": "active",
"effective_start": "2026-10-01",
"effective_end": "2026-10-01",
"replaced_by": [
null
]
}
]
},
"meta": {
"source": "cms-icd10",
"data_version": "2026.1",
"retrieved_at": "2026-10-24T12:00:00Z",
"license": "Public domain (CMS). Reference data, not medical advice."
},
"links": {
"self": "/v1/providers/1881018208/exclusions",
"next": null
}
}Fields
| Field | Type | Always present | Description |
|---|---|---|---|
npi | string | yes | |
exclusion_recorded | boolean | yes | Whether the current OIG file lists an exclusion in effect with this NPI. false means none is recorded with this NPI, not that the provider is not excluded. |
matched_by | "npi_as_listed" | yes | Exclusions are matched by the NPI OIG lists |
note | string | yes | How the answer was matched, in plain words: show it with the data |
exclusions | OigExclusion[] | yes |
Errors
Errors are application/problem+json (RFC 9457). Branch on type, not on title. See Errors.
| Status | type | When |
|---|---|---|
| 400 | invalid-request | A parameter or the body failed validation; errors lists each field. |
| 401 | unauthorized | Missing, malformed or revoked API key. |
| 404 | not-found | No record with that id (retired records are still returned). |
| 429 | rate-limited / quota-exceeded | Too many requests per second (retry after Retry-After), or the monthly quota is used up. |
| 503 | dataset-unavailable / unavailable | The dataset has no published version yet, or the service is degraded. |