This is the core of the permission model: your key identifies a group, the group contains
pharmacies, and you may act on behalf of any pharmacy in it. Nothing else.
Seeing your pharmacies
Adding pharmacies
POST /api/v1/groups/npi-update takes a list of NPIs to add to your group.
Already registered
Added to your group immediately, and available to act for straight away.
Not yet registered
Held as pending. The pharmacy joins your group automatically once it registers with
InStockRx.
pharmacies/search right away. Re-read the group rather than assuming the write landed.
Acting for a pharmacy
Once a pharmacy is in your group, you name it by NPI on each call. The field differs by operation —sellingPharmacyNpi when creating a listing, buyingPharmacyNpi when creating
a cash offer, pharmacyNpi when searching. The API reference gives the
exact field per endpoint.
Naming an NPI outside your group returns 403.