> ## Documentation Index
> Fetch the complete documentation index at: https://docs.arlohealth.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Search Care Prices

> Nearby in-network care options with estimated negotiated prices under
the user's plan, for about 150 common outpatient services. This is
area discovery ("what does this cost around here"), not a clinic
directory: for any NAMED clinic, brand, or provider call
POST /api/pricing/network-status first, because the same brand bills
under different legal entities at very different rates.

The plan resolves from the user's linked insurance; `planHints`
sharpen it when the response asks (`needsMoreInfo`). `code` is a
catalog CPT/HCPCS code: omit it to receive the catalog as
`supportedServices` and pick the closest code. Free: never charges the
user and never starts a consultation. Same request and response fields
as the public pricing.v1 API on api.arlohealth.ai. Always relay the
response's `disclaimer`; `inNetwork: false` means "not found in the
published files", never a hard out-of-network verdict.




## OpenAPI

````yaml api-reference/openapi.yaml POST /api/pricing/search
openapi: 3.1.0
info:
  title: Arlo Health MCP Server
  version: 1.0.0
  description: |
    Healthcare infrastructure for AI agents. Everything an agent needs
    to act in healthcare for its user.

    ## Overview

    This server exposes two interfaces:
    - **MCP** (Model Context Protocol) over streamable HTTP at `/` for AI agents
    - **REST API** at `/api/*` for bots, skills, and direct HTTP clients

    Both interfaces use the same tool handlers and authentication.

    ## Authentication

    OAuth 2.1 with PKCE. All `/api/*` endpoints require a Bearer token.

    Discovery endpoints (no auth required):
    - `/.well-known/oauth-protected-resource`
    - `/.well-known/oauth-authorization-server`
    - `/.well-known/mcp.json` (MCP Server Card)

    ## Service Regions

    Care is licensed by where the patient is physically located when they
    request it, so every conversation carries an ISO 3166-2 `region` code.
    Arlo currently serves California, United States (`US-CA`); an unsupported
    region is refused with `REGION_NOT_SUPPORTED`, whose payload names the
    regions Arlo serves at that moment.
  contact:
    name: Arlo Health
    url: https://arlohealth.ai
  license:
    name: Proprietary
    url: https://arlohealth.ai/tos
servers:
  - url: https://mcp.arlohealth.ai
    description: Production MCP Server
security:
  - oauth2:
      - openid
      - profile
      - email
      - offline_access
tags:
  - name: Discovery
    description: MCP and OAuth discovery endpoints (no auth required)
  - name: Profile
    description: User profile and patient information
  - name: Consultations
    description: Healthcare consultation management
  - name: Messaging
    description: Conversation messaging and media
  - name: Prescriptions
    description: Prescription orders (read-only; Photon Health fulfills them)
  - name: Health Records
    description: The user's connected insurance and health records (US)
  - name: Care Pricing
    description: Free price transparency under the user's plan (US)
  - name: Care Jobs
    description: >-
      Real-world care actions Arlo's care team executes after the patient
      approves (US)
  - name: Payment
    description: Billing and pay-per-use payment management
  - name: Webhooks
    description: Webhook registration and status
paths:
  /api/pricing/search:
    post:
      tags:
        - Care Pricing
      summary: Search care prices
      description: |
        Nearby in-network care options with estimated negotiated prices under
        the user's plan, for about 150 common outpatient services. This is
        area discovery ("what does this cost around here"), not a clinic
        directory: for any NAMED clinic, brand, or provider call
        POST /api/pricing/network-status first, because the same brand bills
        under different legal entities at very different rates.

        The plan resolves from the user's linked insurance; `planHints`
        sharpen it when the response asks (`needsMoreInfo`). `code` is a
        catalog CPT/HCPCS code: omit it to receive the catalog as
        `supportedServices` and pick the closest code. Free: never charges the
        user and never starts a consultation. Same request and response fields
        as the public pricing.v1 API on api.arlohealth.ai. Always relay the
        response's `disclaimer`; `inNetwork: false` means "not found in the
        published files", never a hard out-of-network verdict.
      operationId: searchCarePrices
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PricingSearchInput'
      responses:
        '200':
          description: >-
            Facilities with estimated rates, or the catalog when no usable code
            was given
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PricingResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '502':
          $ref: '#/components/responses/PricingUnavailable'
components:
  schemas:
    PricingSearchInput:
      type: object
      properties:
        code:
          type: string
          description: >-
            CPT/HCPCS code from the supported catalog. Omit it (or pass an
            unsupported one) to receive the catalog as supportedServices and
            pick the closest code.
        latitude:
          type: number
          description: Preferred when available. Pair with longitude.
        longitude:
          type: number
        zip:
          type: string
          description: 5-digit US ZIP when coordinates are unavailable
        radiusKm:
          type: number
          description: Search radius in km (default 40)
        limit:
          type: number
          description: Max facilities to return (default 25)
        planHints:
          $ref: '#/components/schemas/PricingPlanHints'
        patientId:
          type: string
          description: >-
            Family-member patient id exactly as returned by GET /api/profile
            (defaults to the account holder)
    PricingResponse:
      type: object
      description: |
        Self-describing. Identical to the public pricing.v1 response for the
        same route (see the Pricing API reference for every field). Read
        plan.basis before quoting anything, relay every note-style field as
        written (any key ending in Note, plus note, rateAssessment,
        statusNote, disclaimer), and answer needsMoreInfo asks.
      properties:
        disclaimer:
          type: string
        needsMoreInfo:
          type: array
          items:
            type: object
        plan:
          type: object
        supportedServices:
          type: array
          description: Present instead of prices when no usable code was given
          items:
            type: object
      additionalProperties: true
    PricingPlanHints:
      type: object
      description: |
        Insurance identifiers from the user, used when the response asks for
        them (needsMoreInfo). The plan otherwise resolves from linked
        insurance. employerName / planName upgrade range estimates to the
        exact plan's rates; groupNumber is matched for Blue Cross Blue Shield
        of IL/TX/OK/NM/MT only. Set unavailable=true when the user cannot
        provide identifiers, which stops the asks.
      properties:
        payerName:
          type: string
          description: >-
            Insurer as the user names it (Anthem, Blue Shield of California,
            UnitedHealthcare, Cigna, Aetna, any Blue Cross Blue Shield plan,
            Original Medicare). Pins another coverage when several are linked.
        employerName:
          type: string
        planName:
          type: string
        groupNumber:
          type: string
        unavailable:
          type: boolean
  responses:
    Unauthorized:
      description: Missing or invalid authentication
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              needsAuth:
                type: boolean
    PricingUnavailable:
      description: >-
        The pricing lookup is temporarily unavailable. Tell the user and offer
        to retry shortly; never invent prices, network status, or evidence.
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
                description: What failed
              agentInstructions:
                type: string
  securitySchemes:
    oauth2:
      type: oauth2
      description: OAuth 2.1 with PKCE
      flows:
        authorizationCode:
          authorizationUrl: /oauth/authorize
          tokenUrl: /oauth/token
          scopes:
            openid: OpenID Connect
            profile: User profile
            email: Email address
            offline_access: Refresh tokens

````