# Who owns the facilities an NPI belongs to

URL: https://docs.healthcare.dev/reference/providers/who-owns-the-facilities-an-npi-belongs-to

```http
GET https://api.healthcare.dev/v1/providers/{npi}/ownership
```

Pro plan and up (403 `plan-upgrade-required` below Pro). The owners and controlling parties of the Medicare-enrolled facilities (hospitals, skilled nursing facilities, FQHCs, rural health clinics, hospices, home health agencies) this NPI belongs to, from CMS's PECOS All Owners files: each owner's type (individual or organization), role, ownership percentage, association date and organization-type flags (`private_equity`, `reit`, `holding_company`, `investment_firm` and more). The NPI is linked through CMS's public enrollment file: the enrollments listing it (as their NPI or an additional NPI), or, when none of those has ownership disclosures, other enrollments of the same organization (PECOS associate id); at most 20 facilities, by enrollment id (`facilities_total` counts them all). Where an owner is itself an organization that lists its own owners, `upstream` follows the chain up to `depth` levels (default 3, at most 5), each organization once, and `chain.cycles` names where it loops back. `ownership_completeness` says what public ownership data leaves out: show it with the answer. Individual NPIs (physicians) are not linked to the groups they bill through. An NPI with no linked facility answers 200 with `listed: false`. Each account (all its keys together) can look up a limited number of different NPIs a day; repeats and failed lookups don't count (429 `enumeration-limit` past it, until 00:00 UTC). 503 until the ownership and enrollment data are published.

Requires an API key: `Authorization: Bearer hdev_live_...`. See [Authentication](/authentication).

## Path parameters

| Name | Type | Required | Description | Example |
| --- | --- | --- | --- | --- |
| `npi` | string | yes | 10-digit National Provider Identifier of the facility (organization NPI) | `1154392231` |

## Query parameters

| Name | Type | Required | Description | Example |
| --- | --- | --- | --- | --- |
| `depth` | integer \| null | no | Levels of owner organizations to follow up the chain, 0 to 5 (default 3); 0 lists the facilities' own owners only | `3` |
| `view` | "compact" \| "standard" \| "full" | no | How much of each record to return (default `full`). `compact`: `npi`, `listed`, `facilities_total`, `ownership_completeness`, `as_of`, `facilities` (fewest tokens, for agents). `standard`: every field except `source`. `full`: every field. | `compact` |
| `fields` | string | no | Comma-separated fields to return instead of a view. Valid fields: `npi`, `listed`, `note`, `ownership_completeness`, `derivation`, `as_of`, `source`, `facilities_total`, `facilities`. | `npi,listed,facilities_total` |

## Examples

**curl**

```sh
curl "https://api.healthcare.dev/v1/providers/1154392231/ownership" \
  -H "Authorization: Bearer $HDEV_API_KEY"
```

**TypeScript**

```ts
const res = await fetch("https://api.healthcare.dev/v1/providers/1154392231/ownership", {
  headers: { Authorization: `Bearer ${process.env.HDEV_API_KEY}` },
});
const { data, meta } = await res.json();
```

**Python**

```python
import os
import requests

res = requests.get("https://api.healthcare.dev/v1/providers/1154392231/ownership", headers={"Authorization": f"Bearer {os.environ['HDEV_API_KEY']}"})
body = res.json()
```

## Response

The facilities linked to the NPI with their owners and ownership chains

```json
{
  "data": {
    "npi": "string",
    "listed": true,
    "note": "string",
    "ownership_completeness": "string",
    "derivation": "source_stated",
    "as_of": "2026-10-01",
    "source": {
      "dataset": "string",
      "source": "string",
      "source_url": "string",
      "source_sha256": "string",
      "data_version": "string",
      "pipeline_version": "string",
      "license": "string",
      "license_terms": {
        "display": "string",
        "attribution": "string",
        "url": "string"
      },
      "as_of": "2026-10-01",
      "published_at": "2026-10-24T12:00:00Z"
    },
    "facilities_total": 1,
    "facilities": [
      {
        "enrollment_id": "string",
        "associate_id": "string",
        "organization_name": "string",
        "facility_type": null,
        "linked_by": "enrollment",
        "owners": [
          null
        ],
        "upstream": [
          null
        ],
        "chain": {
          "depth_limit": null,
          "truncated": null,
          "cycles": null
        },
        "summary": {
          "owners": null,
          "private_equity": null,
          "reit": null,
          "holding_company": null,
          "investment_firm": null
        }
      }
    ]
  },
  "meta": {
    "source": "cms-icd10",
    "data_version": "2026.1",
    "retrieved_at": "2026-10-24T12:00:00Z",
    "license": "Public domain (CMS). Reference data, not medical advice."
  },
  "links": {
    "self": "/v1/providers/1154392231/ownership",
    "next": null
  }
}
```

### Fields

| Field | Type | Always present | Description |
| --- | --- | --- | --- |
| `npi` | string | yes |  |
| `listed` | boolean | yes | Some facility linked to this NPI has ownership disclosures in CMS's current All Owners files |
| `note` | string | yes | How the NPI was linked, in plain words: show it with the data |
| `ownership_completeness` | string | yes | What public ownership data does not tell you: show it with the data |
| `derivation` | "source_stated" | yes | Owners, roles, shares and flags are what facilities disclosed to CMS |
| `as_of` | string (date) | yes | Date of the All Owners files consulted |
| `source` | object | yes | The ownership dataset version consulted |
| `facilities_total` | integer | yes | How many facilities are linked; `facilities` lists the first 20 by enrollment id |
| `facilities` | OwnershipFacility[] | yes | The facilities with ownership disclosures linked to the NPI (at most 20); empty when none (`listed: false`) |

## Errors

Errors are `application/problem+json` ([RFC 9457](https://www.rfc-editor.org/rfc/rfc9457)). Branch on `type`, not on `title`. See [Errors](/errors).

| Status | `type` | When |
| --- | --- | --- |
| 400 | `invalid-request` | A parameter or the body failed validation; `errors` lists each field. |
| 401 | `unauthorized` | Missing, malformed or revoked API key. |
| 403 | `plan-upgrade-required` | The plan doesn't include this feature; `required_plan` names the plan that does. |
| 404 | `not-found` | No record with that id (retired records are still returned). |
| 429 | `rate-limited / quota-exceeded` | Too many requests per second (retry after `Retry-After`), or the monthly quota is used up. |
| 503 | `dataset-unavailable / unavailable` | The dataset has no published version yet, or the service is degraded. |