> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.rebateright.com.au/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.rebateright.com.au/_mcp/server.

# Authorisation

POST https://api.rebateright.com.au/AIR/v1/authorisation/access/list
Content-Type: application/json

Check which Australian Immunisation Register (AIR) capabilities an information provider is authorised for. Returns an `accessList` of codes, each with `hasAccess: true` or `false`. Use it to decide which AIR actions to expose in your interface.

The **information provider** is the entity sending data to AIR — not necessarily the immunisation provider who administered the vaccine. A provider can be registered for AIR but not authorised for every capability (recording natural immunity, for example, is granted separately from recording encounters).

Call this once on first connection, and again if the provider's authorisations change at Services Australia.

#### Capability Codes

| Code | Capability | Display label |
|---|---|---|
| `IDV` | Identify individual details | Identify Individual |
| `IDGST` | Update Indigenous status | Indigenous Status |
| `ADINDT` | Add or remove additional vaccine indicator | Additional Vaccines Required |
| `NATIMM` | Record natural immunity | Natural Immunity |
| `MEDCON` | Record medical contraindication | Medical Contraindication |
| `RECUPD` | Update vaccination encounter | Update Encounter |
| `RECENC` | Record encounter | Record Encounter |
| `NXTDUE` | Record planned catch-up date | Planned Catch Up |
| `IHSPDS` | Get immunisation history statement (PDF) | Immunisation History Statement |
| `GETIHS` | Get immunisation history details | Immunisation History |
| `GETMEDCON` | Get medical contraindication history | Medical Contraindication History |
| `GETNATIMM` | Get natural immunity history | Natural Immunity History |
| `GETVACTRL` | Get vaccine trial history | Vaccine Trial History |
| `GETCOV19PDF` | Get COVID-19 digital certificate (PDF) | — |

<Note>
  Show the **Display label** in your interface for any capability returning `hasAccess: true`. Services Australia certification (NOI) requires the exact wording.
</Note>

#### Status Codes

Returns `AIR-I-1100` on success or `AIR-E-1005` on validation errors. See [AIR Integration](/air) for the response envelope, the full code tables, and the HTTP 200 / verbatim-display rules that apply to every AIR endpoint.


Reference: https://docs.rebateright.com.au/api-reference/air/authorisation/authorisation

## OpenAPI Specification

```yaml
openapi: 3.1.0
info:
  title: collection
  version: 1.0.0
paths:
  /AIR/v1/authorisation/access/list:
    post:
      operationId: authorisation
      summary: Authorisation
      description: >
        Check which Australian Immunisation Register (AIR) capabilities an
        information provider is authorised for. Returns an `accessList` of
        codes, each with `hasAccess: true` or `false`. Use it to decide which
        AIR actions to expose in your interface.


        The **information provider** is the entity sending data to AIR — not
        necessarily the immunisation provider who administered the vaccine. A
        provider can be registered for AIR but not authorised for every
        capability (recording natural immunity, for example, is granted
        separately from recording encounters).


        Call this once on first connection, and again if the provider's
        authorisations change at Services Australia.


        #### Capability Codes


        | Code | Capability | Display label |

        |---|---|---|

        | `IDV` | Identify individual details | Identify Individual |

        | `IDGST` | Update Indigenous status | Indigenous Status |

        | `ADINDT` | Add or remove additional vaccine indicator | Additional
        Vaccines Required |

        | `NATIMM` | Record natural immunity | Natural Immunity |

        | `MEDCON` | Record medical contraindication | Medical Contraindication
        |

        | `RECUPD` | Update vaccination encounter | Update Encounter |

        | `RECENC` | Record encounter | Record Encounter |

        | `NXTDUE` | Record planned catch-up date | Planned Catch Up |

        | `IHSPDS` | Get immunisation history statement (PDF) | Immunisation
        History Statement |

        | `GETIHS` | Get immunisation history details | Immunisation History |

        | `GETMEDCON` | Get medical contraindication history | Medical
        Contraindication History |

        | `GETNATIMM` | Get natural immunity history | Natural Immunity History
        |

        | `GETVACTRL` | Get vaccine trial history | Vaccine Trial History |

        | `GETCOV19PDF` | Get COVID-19 digital certificate (PDF) | — |


        <Note>
          Show the **Display label** in your interface for any capability returning `hasAccess: true`. Services Australia certification (NOI) requires the exact wording.
        </Note>


        #### Status Codes


        Returns `AIR-I-1100` on success or `AIR-E-1005` on validation errors.
        See [AIR Integration](/air) for the response envelope, the full code
        tables, and the HTTP 200 / verbatim-display rules that apply to every
        AIR endpoint.
      tags:
        - subpackage_air.subpackage_air/authorisation
      parameters:
        - name: x-api-key
          in: header
          required: true
          schema:
            type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: >-
                  #/components/schemas/AIR_Authorisation_Authorisation_Response_200
      requestBody:
        content:
          application/json:
            schema:
              type: object
              properties:
                informationProvider:
                  $ref: >-
                    #/components/schemas/AirV1AuthorisationAccessListPostRequestBodyContentApplicationJsonSchemaInformationProvider
              required:
                - informationProvider
servers:
  - url: https://api.rebateright.com.au
    description: Production
  - url: https://test-api.rebateright.com.au
    description: Test
components:
  schemas:
    AirV1AuthorisationAccessListPostRequestBodyContentApplicationJsonSchemaInformationProvider:
      type: object
      properties:
        providerNumber:
          type: string
          description: >-
            Medicare provider number or AIR provider number of the information
            provider. Must be current at the request date.
        hpioNumber:
          type: string
          description: >-
            Optional. Healthcare Provider Identifier — Organisation (HPI-O). 16
            digits.
        hpiiNumber:
          type: string
          description: >-
            Optional. Healthcare Provider Identifier — Individual (HPI-I). 16
            digits.
      required:
        - providerNumber
      title: >-
        AirV1AuthorisationAccessListPostRequestBodyContentApplicationJsonSchemaInformationProvider
    AirV1AuthorisationAccessListPostResponsesContentApplicationJsonSchemaAccessListItems:
      type: object
      properties:
        code:
          type: string
          description: Capability code. See the *Capability Codes* table.
        name:
          type: string
          description: Capability description as returned by AIR.
        hasAccess:
          type: boolean
          description: >-
            `true` if this provider is authorised for this capability; `false`
            otherwise.
      title: >-
        AirV1AuthorisationAccessListPostResponsesContentApplicationJsonSchemaAccessListItems
    AirV1AuthorisationAccessListPostResponsesContentApplicationJsonSchemaErrorsItems:
      type: object
      properties:
        code:
          type: string
          description: AIR validation code. See [Validation codes](/air#validation-codes).
        field:
          type: string
          description: Human-readable name of the field that failed validation.
        message:
          type: string
          description: >-
            Plain-language description of the validation problem, including the
            offending value.
      title: >-
        AirV1AuthorisationAccessListPostResponsesContentApplicationJsonSchemaErrorsItems
    AIR_Authorisation_Authorisation_Response_200:
      type: object
      properties:
        statusCode:
          type: string
          description: >-
            AIR status code. `AIR-I-*` indicates success; `AIR-E-*` indicates a
            validation error. See the *Status Codes* table.
        codeType:
          type: string
          description: >-
            Code-type category. `AIRIBU` on success; `AIREBU` on validation
            errors.
        message:
          type: string
          description: Status message from AIR.
        accessList:
          type: array
          items:
            $ref: >-
              #/components/schemas/AirV1AuthorisationAccessListPostResponsesContentApplicationJsonSchemaAccessListItems
          description: >-
            Capabilities available to this information provider on AIR. Present
            on success (`AIR-I-1100`).
        errors:
          type: array
          items:
            $ref: >-
              #/components/schemas/AirV1AuthorisationAccessListPostResponsesContentApplicationJsonSchemaErrorsItems
          description: >-
            One entry per field-level problem with the request. Present on
            validation errors (`AIR-E-1005`).
        correlationId:
          type: string
          description: >-
            Unique request identifier. Format `urn:uuid:{MinorId}{16 hex
            chars}`. Include in support tickets so we can trace the request.
      title: AIR_Authorisation_Authorisation_Response_200
  securitySchemes:
    apiKeyAuth:
      type: apiKey
      in: header
      name: x-api-key
    minorId:
      type: apiKey
      in: header
      name: x-minor-id

```

## Examples

### Provider Number Only



**Request**

```json
{
  "informationProvider": {
    "providerNumber": "T39126X"
  }
}
```

**Response**

```json
{
  "statusCode": "AIR-I-1100",
  "codeType": "AIRIBU",
  "message": "Your request was successfully processed.",
  "accessList": [
    {
      "code": "IDV",
      "name": "Identify individual details",
      "hasAccess": true
    },
    {
      "code": "IDGST",
      "name": "Update Indigenous status",
      "hasAccess": true
    },
    {
      "code": "ADINDT",
      "name": "Add/Remove additional vaccine indicator",
      "hasAccess": true
    },
    {
      "code": "NATIMM",
      "name": "Record natural immunity",
      "hasAccess": false
    },
    {
      "code": "MEDCON",
      "name": "Record medical contraindication",
      "hasAccess": false
    },
    {
      "code": "RECUPD",
      "name": "Update vaccination encounter",
      "hasAccess": true
    },
    {
      "code": "RECENC",
      "name": "Record encounter",
      "hasAccess": true
    },
    {
      "code": "NXTDUE",
      "name": "Record planned catchup date",
      "hasAccess": true
    },
    {
      "code": "IHSPDS",
      "name": "Get immunisatiom history statement in PDF",
      "hasAccess": true
    },
    {
      "code": "GETIHS",
      "name": "Get immunisation history details",
      "hasAccess": true
    },
    {
      "code": "GETMEDCON",
      "name": "Get medical contraindication history",
      "hasAccess": true
    },
    {
      "code": "GETNATIMM",
      "name": "Get natural immunity history",
      "hasAccess": true
    },
    {
      "code": "GETVACTRL",
      "name": "Get vaccine trial history",
      "hasAccess": true
    },
    {
      "code": "GETCOV19PDF",
      "name": "Get COVID-19 digital certificate in PDF",
      "hasAccess": true
    }
  ],
  "correlationId": "urn:uuid:MDE00000a74e9d1a52d34c66"
}
```

**SDK Code**

```python Provider Number Only
import requests

url = "https://api.rebateright.com.au/AIR/v1/authorisation/access/list"

payload = { "informationProvider": { "providerNumber": "T39126X" } }
headers = {
    "x-api-key": "<apiKey>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.json())
```

```javascript Provider Number Only
const url = 'https://api.rebateright.com.au/AIR/v1/authorisation/access/list';
const options = {
  method: 'POST',
  headers: {'x-api-key': '<apiKey>', 'Content-Type': 'application/json'},
  body: '{"informationProvider":{"providerNumber":"T39126X"}}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go Provider Number Only
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.rebateright.com.au/AIR/v1/authorisation/access/list"

	payload := strings.NewReader("{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-api-key", "<apiKey>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby Provider Number Only
require 'uri'
require 'net/http'

url = URI("https://api.rebateright.com.au/AIR/v1/authorisation/access/list")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<apiKey>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\"\n  }\n}"

response = http.request(request)
puts response.read_body
```

```java Provider Number Only
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.post("https://api.rebateright.com.au/AIR/v1/authorisation/access/list")
  .header("x-api-key", "<apiKey>")
  .header("Content-Type", "application/json")
  .body("{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\"\n  }\n}")
  .asString();
```

```php Provider Number Only
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('POST', 'https://api.rebateright.com.au/AIR/v1/authorisation/access/list', [
  'body' => '{
  "informationProvider": {
    "providerNumber": "T39126X"
  }
}',
  'headers' => [
    'Content-Type' => 'application/json',
    'x-api-key' => '<apiKey>',
  ],
]);

echo $response->getBody();
```

```csharp Provider Number Only
using RestSharp;

var client = new RestClient("https://api.rebateright.com.au/AIR/v1/authorisation/access/list");
var request = new RestRequest(Method.POST);
request.AddHeader("x-api-key", "<apiKey>");
request.AddHeader("Content-Type", "application/json");
request.AddParameter("application/json", "{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\"\n  }\n}", ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
```

```swift Provider Number Only
import Foundation

let headers = [
  "x-api-key": "<apiKey>",
  "Content-Type": "application/json"
]
let parameters = ["informationProvider": ["providerNumber": "T39126X"]] as [String : Any]

let postData = JSONSerialization.data(withJSONObject: parameters, options: [])

let request = NSMutableURLRequest(url: NSURL(string: "https://api.rebateright.com.au/AIR/v1/authorisation/access/list")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "POST"
request.allHTTPHeaderFields = headers
request.httpBody = postData as Data

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```

### With Healthcare Identifiers



**Request**

```json
{
  "informationProvider": {
    "providerNumber": "T39126X",
    "hpioNumber": "8003623233370062",
    "hpiiNumber": "8003611566712356"
  }
}
```

**Response**

```json
{
  "statusCode": "AIR-I-1100",
  "codeType": "AIRIBU",
  "message": "Your request was successfully processed.",
  "accessList": [
    {
      "code": "IDV",
      "name": "Identify individual details",
      "hasAccess": true
    },
    {
      "code": "IDGST",
      "name": "Update Indigenous status",
      "hasAccess": true
    },
    {
      "code": "ADINDT",
      "name": "Add/Remove additional vaccine indicator",
      "hasAccess": true
    },
    {
      "code": "NATIMM",
      "name": "Record natural immunity",
      "hasAccess": false
    },
    {
      "code": "MEDCON",
      "name": "Record medical contraindication",
      "hasAccess": false
    },
    {
      "code": "RECUPD",
      "name": "Update vaccination encounter",
      "hasAccess": true
    },
    {
      "code": "RECENC",
      "name": "Record encounter",
      "hasAccess": true
    },
    {
      "code": "NXTDUE",
      "name": "Record planned catchup date",
      "hasAccess": true
    },
    {
      "code": "IHSPDS",
      "name": "Get immunisatiom history statement in PDF",
      "hasAccess": true
    },
    {
      "code": "GETIHS",
      "name": "Get immunisation history details",
      "hasAccess": true
    },
    {
      "code": "GETMEDCON",
      "name": "Get medical contraindication history",
      "hasAccess": true
    },
    {
      "code": "GETNATIMM",
      "name": "Get natural immunity history",
      "hasAccess": true
    },
    {
      "code": "GETVACTRL",
      "name": "Get vaccine trial history",
      "hasAccess": true
    },
    {
      "code": "GETCOV19PDF",
      "name": "Get COVID-19 digital certificate in PDF",
      "hasAccess": true
    }
  ],
  "correlationId": "urn:uuid:MDE000009d7daae92c184ee5"
}
```

**SDK Code**

```python With Healthcare Identifiers
import requests

url = "https://api.rebateright.com.au/AIR/v1/authorisation/access/list"

payload = { "informationProvider": {
        "providerNumber": "T39126X",
        "hpioNumber": "8003623233370062",
        "hpiiNumber": "8003611566712356"
    } }
headers = {
    "x-api-key": "<apiKey>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.json())
```

```javascript With Healthcare Identifiers
const url = 'https://api.rebateright.com.au/AIR/v1/authorisation/access/list';
const options = {
  method: 'POST',
  headers: {'x-api-key': '<apiKey>', 'Content-Type': 'application/json'},
  body: '{"informationProvider":{"providerNumber":"T39126X","hpioNumber":"8003623233370062","hpiiNumber":"8003611566712356"}}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go With Healthcare Identifiers
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.rebateright.com.au/AIR/v1/authorisation/access/list"

	payload := strings.NewReader("{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\",\n    \"hpioNumber\": \"8003623233370062\",\n    \"hpiiNumber\": \"8003611566712356\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-api-key", "<apiKey>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby With Healthcare Identifiers
require 'uri'
require 'net/http'

url = URI("https://api.rebateright.com.au/AIR/v1/authorisation/access/list")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<apiKey>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\",\n    \"hpioNumber\": \"8003623233370062\",\n    \"hpiiNumber\": \"8003611566712356\"\n  }\n}"

response = http.request(request)
puts response.read_body
```

```java With Healthcare Identifiers
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.post("https://api.rebateright.com.au/AIR/v1/authorisation/access/list")
  .header("x-api-key", "<apiKey>")
  .header("Content-Type", "application/json")
  .body("{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\",\n    \"hpioNumber\": \"8003623233370062\",\n    \"hpiiNumber\": \"8003611566712356\"\n  }\n}")
  .asString();
```

```php With Healthcare Identifiers
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('POST', 'https://api.rebateright.com.au/AIR/v1/authorisation/access/list', [
  'body' => '{
  "informationProvider": {
    "providerNumber": "T39126X",
    "hpioNumber": "8003623233370062",
    "hpiiNumber": "8003611566712356"
  }
}',
  'headers' => [
    'Content-Type' => 'application/json',
    'x-api-key' => '<apiKey>',
  ],
]);

echo $response->getBody();
```

```csharp With Healthcare Identifiers
using RestSharp;

var client = new RestClient("https://api.rebateright.com.au/AIR/v1/authorisation/access/list");
var request = new RestRequest(Method.POST);
request.AddHeader("x-api-key", "<apiKey>");
request.AddHeader("Content-Type", "application/json");
request.AddParameter("application/json", "{\n  \"informationProvider\": {\n    \"providerNumber\": \"T39126X\",\n    \"hpioNumber\": \"8003623233370062\",\n    \"hpiiNumber\": \"8003611566712356\"\n  }\n}", ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
```

```swift With Healthcare Identifiers
import Foundation

let headers = [
  "x-api-key": "<apiKey>",
  "Content-Type": "application/json"
]
let parameters = ["informationProvider": [
    "providerNumber": "T39126X",
    "hpioNumber": "8003623233370062",
    "hpiiNumber": "8003611566712356"
  ]] as [String : Any]

let postData = JSONSerialization.data(withJSONObject: parameters, options: [])

let request = NSMutableURLRequest(url: NSURL(string: "https://api.rebateright.com.au/AIR/v1/authorisation/access/list")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "POST"
request.allHTTPHeaderFields = headers
request.httpBody = postData as Data

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```

### Invalid Provider Number



**Request**

```json
{
  "informationProvider": {
    "providerNumber": "INVALID1"
  }
}
```

**Response**

```json
{
  "statusCode": "AIR-E-1005",
  "codeType": "AIREBU",
  "message": "The request contains validation errors.",
  "errors": [
    {
      "code": "AIR-E-1016",
      "field": "Information Provider Number",
      "message": "Invalid format for field Information Provider Number, for data item with value INVALID1."
    }
  ],
  "correlationId": "urn:uuid:MDE0000000a8055e0fd043c5"
}
```

**SDK Code**

```python Invalid Provider Number
import requests

url = "https://api.rebateright.com.au/AIR/v1/authorisation/access/list"

payload = { "informationProvider": { "providerNumber": "INVALID1" } }
headers = {
    "x-api-key": "<apiKey>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.json())
```

```javascript Invalid Provider Number
const url = 'https://api.rebateright.com.au/AIR/v1/authorisation/access/list';
const options = {
  method: 'POST',
  headers: {'x-api-key': '<apiKey>', 'Content-Type': 'application/json'},
  body: '{"informationProvider":{"providerNumber":"INVALID1"}}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}
```

```go Invalid Provider Number
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.rebateright.com.au/AIR/v1/authorisation/access/list"

	payload := strings.NewReader("{\n  \"informationProvider\": {\n    \"providerNumber\": \"INVALID1\"\n  }\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-api-key", "<apiKey>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(res)
	fmt.Println(string(body))

}
```

```ruby Invalid Provider Number
require 'uri'
require 'net/http'

url = URI("https://api.rebateright.com.au/AIR/v1/authorisation/access/list")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<apiKey>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"informationProvider\": {\n    \"providerNumber\": \"INVALID1\"\n  }\n}"

response = http.request(request)
puts response.read_body
```

```java Invalid Provider Number
import com.mashape.unirest.http.HttpResponse;
import com.mashape.unirest.http.Unirest;

HttpResponse<String> response = Unirest.post("https://api.rebateright.com.au/AIR/v1/authorisation/access/list")
  .header("x-api-key", "<apiKey>")
  .header("Content-Type", "application/json")
  .body("{\n  \"informationProvider\": {\n    \"providerNumber\": \"INVALID1\"\n  }\n}")
  .asString();
```

```php Invalid Provider Number
<?php
require_once('vendor/autoload.php');

$client = new \GuzzleHttp\Client();

$response = $client->request('POST', 'https://api.rebateright.com.au/AIR/v1/authorisation/access/list', [
  'body' => '{
  "informationProvider": {
    "providerNumber": "INVALID1"
  }
}',
  'headers' => [
    'Content-Type' => 'application/json',
    'x-api-key' => '<apiKey>',
  ],
]);

echo $response->getBody();
```

```csharp Invalid Provider Number
using RestSharp;

var client = new RestClient("https://api.rebateright.com.au/AIR/v1/authorisation/access/list");
var request = new RestRequest(Method.POST);
request.AddHeader("x-api-key", "<apiKey>");
request.AddHeader("Content-Type", "application/json");
request.AddParameter("application/json", "{\n  \"informationProvider\": {\n    \"providerNumber\": \"INVALID1\"\n  }\n}", ParameterType.RequestBody);
IRestResponse response = client.Execute(request);
```

```swift Invalid Provider Number
import Foundation

let headers = [
  "x-api-key": "<apiKey>",
  "Content-Type": "application/json"
]
let parameters = ["informationProvider": ["providerNumber": "INVALID1"]] as [String : Any]

let postData = JSONSerialization.data(withJSONObject: parameters, options: [])

let request = NSMutableURLRequest(url: NSURL(string: "https://api.rebateright.com.au/AIR/v1/authorisation/access/list")! as URL,
                                        cachePolicy: .useProtocolCachePolicy,
                                    timeoutInterval: 10.0)
request.httpMethod = "POST"
request.allHTTPHeaderFields = headers
request.httpBody = postData as Data

let session = URLSession.shared
let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in
  if (error != nil) {
    print(error as Any)
  } else {
    let httpResponse = response as? HTTPURLResponse
    print(httpResponse)
  }
})

dataTask.resume()
```