AuthenticationAll requests require a Bearer token. Tokens always start with isei_pk_live_. Issued by Mohala platform admins; only the SHA-256 hash is stored.
Authorization: Bearer isei_pk_live_xxxxxxxxxxxxxxxx
Rate limitsEnforcement endpoints share a global limit of 60 requests / minute and 10,000 requests / day per API key. All responses include the headers below; on 429 the response body is { error: "rate_limit_exceeded" }.
| X-RateLimit-Limit | 60 | Per-minute ceiling |
| X-RateLimit-Remaining | 0–60 | Calls left in the current minute window |
| X-RateLimit-Reset | unix s | Epoch seconds until the per-minute window rolls over |
| X-RateLimit-Daily-Limit | 10000 | Per-day ceiling |
| X-RateLimit-Daily-Remaining | 0–10000 | Calls left in the current 24-hour window |
| Retry-After | seconds | Sent on 429 — minimum wait before retry |
GET/api/v1/enforcement/recentenforcement:read
Most recent enforcement actions across OIG LEIE, CMS PSL, Hawaiʻi DCCA, and Hawaiʻi AG.
Parameters
| Name | Type | Required | Notes |
|---|
| limit | integer | no | 1–500, default 100 |
| since | ISO-8601 date | no | Filter to actions on or after this date |
| agency | string | no | OIG | CMS | HI_DCCA | HI_AG |
| action_type_normalized | string | no | revocation | surrender | suspension | probation | settlement | fine | reprimand | exclusion | other |
Example request
GET /api/v1/enforcement/recent?limit=25&agency=HI_DCCA&action_type_normalized=revocation
Sample 200 response
{
"data": [
{
"id": "uuid",
"source_agency": "HI_DCCA",
"action_type": "License Revocation and $5,000 Fine",
"action_type_normalized": "revocation",
"action_date": "2026-04-12",
"subject_name": "John Doe MD",
"subject_npi": null,
"license_number": "MD-12345",
"monetary_penalty": 5000,
"severity": "critical",
"status": "active",
"source_url": "https://cca.hawaii.gov/rico/disciplinary-actions/",
"source_document_url": "hi_dcca/2026-04-12/john_doe_md.pdf",
"violation_summary": "Improper prescribing of controlled substances"
}
]
}GET/api/v1/enforcement/searchenforcement:read
Full-text search across subject_name and violation_summary; agency and normalized type filters supported.
Parameters
| Name | Type | Required | Notes |
|---|
| q | string | yes | Search term (≥2 chars). Matches subject and violation summary. |
| limit | integer | no | 1–500, default 100 |
| agency | string | no | OIG | CMS | HI_DCCA | HI_AG |
| since | ISO-8601 date | no | Filter to actions on or after this date |
| action_type_normalized | string | no | revocation | surrender | suspension | probation | settlement | fine | reprimand | exclusion | other |
Example request
GET /api/v1/enforcement/search?q=opioid&action_type_normalized=fine&since=2025-01-01
Sample 200 response
{
"data": [
{
"id": "uuid",
"source_agency": "HI_AG",
"action_type": "Settlement and Civil Penalty",
"action_type_normalized": "settlement",
"action_date": "2026-03-08",
"subject_name": "ABC Clinic LLC",
"monetary_penalty": 125000,
"violation_summary": "Medicaid billing fraud — opioid diversion",
"source_url": "https://ag.hawaii.gov/news-releases/2026-abc-clinic-settlement/",
"source_document_url": "hi_ag/2026-03-08/abc_clinic_llc.pdf"
}
]
}GET/api/v1/enforcement/by-npi/{npi}enforcement:read
All enforcement actions linked to a specific 10-digit NPI. Returns 404 when nothing is on file.
Parameters
| Name | Type | Required | Notes |
|---|
| npi (path) | string | yes | Exactly 10 digits |
Example request
GET /api/v1/enforcement/by-npi/1234567890
Sample 200 response
{
"data": [
{
"id": "uuid",
"source_agency": "OIG",
"action_type": "LEIE Exclusion (1128a1)",
"action_type_normalized": "exclusion",
"action_date": "2026-04-12",
"subject_name": "ACME PROVIDER LLC",
"subject_npi": "1234567890",
"severity": "high",
"status": "active",
"source_url": "https://oig.hhs.gov/exclusions/exclusions_list.asp",
"source_document_url": "oig_leie/2026-04-12/UPDATED.csv"
}
]
}