---
title: "Get a contract's service catalog"
description: "Every service of one of the clinic's contracts at a cost centre, in one answer, as SIIPS lists them: for a backend that searches the whole catalog itself. A contract may list hundreds of services; people and agents page with visoft.services.list instead. Cached for 6 hours; refresh reads SIIPS again.\n\n- **Scopes:** any one of `visoft:appointments:read`, `visoft:appointments:write`\n- **Credentials:** an API key, a client-credentials token or a person's access token\n- **Effect:** read-only; safe to retry\n- **Limits:** response up to 1 MB\n- **CLI:** `arbol visoft service-catalogs get` · not available on MCP"
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.getarbol.com/llms.txt
> Use this file to discover all available pages before exploring further.

Path: Visoft API › Service catalogs

`GET /v1/visoft/service-catalogs`

Every service of one of the clinic's contracts at a cost centre, in one answer, as SIIPS lists them: for a backend that searches the whole catalog itself. A contract may list hundreds of services; people and agents page with visoft.services.list instead. Cached for 6 hours; refresh reads SIIPS again.

- **Scopes:** any one of `visoft:appointments:read`, `visoft:appointments:write`
- **Credentials:** an API key, a client-credentials token or a person's access token
- **Effect:** read-only; safe to retry
- **Limits:** response up to 1 MB
- **CLI:** `arbol visoft service-catalogs get` · not available on MCP

## Authentication

Requires one of the following:

- `arbolHuman`, oauth2, scopes: `visoft:appointments:read`
- `arbolHuman`, oauth2, scopes: `visoft:appointments:write`
- `arbolMachine`, oauth2, scopes: `visoft:appointments:read`
- `arbolMachine`, oauth2, scopes: `visoft:appointments:write`
- `arbolApiKey`, http, header `Authorization`

## Query parameters

- `contractCode` (`visoft.serviceCatalogs.get.query.contractCode`; string, required) — The contract, by the code visoft.contracts.list answers.
  - minLength 1; maxLength 40; pattern `^[A-Za-z0-9_-]+$`
- `connectionId` (`visoft.serviceCatalogs.get.query.connectionId`; string, optional) — The connection to run on. Optional when the organization has one Visoft connection; required when it has several. Another organization's connection is CONNECTION_NOT_FOUND.
  - minLength 5; maxLength 68; pattern `^con_[0-9A-Za-z]+$`
- `agencyCode` (`visoft.serviceCatalogs.get.query.agencyCode`; string, optional) — One of the clinic's cost centres, as visoft.clinic.get lists them. Optional when the clinic has a default one.
  - pattern `^\d{3}$`
- `refresh` (`visoft.serviceCatalogs.get.query.refresh`; boolean, optional) — Read SIIPS again instead of the connection's cache (contracts 12 h, services 6 h, professionals 1 h, a patient 5 min).

## Code samples

### cURL

```bash
curl "https://api.getarbol.com/v1/visoft/service-catalogs?contractCode=<contractCode>" \
  --header "Authorization: Bearer $ARBOL_API_KEY"
```

### TypeScript

```typescript
import { createClient } from "@arbol-ai/sdk";

const arbol = createClient({
  baseUrl: "https://api.getarbol.com",
  token: process.env.ARBOL_API_KEY!,
});

const { data } = await arbol.visoft.serviceCatalogs.get({
  contractCode: "<contractCode>",
});
```

### Rust

```rust
use arbol_sdk::{types, Client, Credential};

let arbol = Client::new(Credential::ApiKey(std::env::var("ARBOL_API_KEY")?))?;

let data = arbol
    .visoft()
    .service_catalogs()
    .get(&types::VisoftServiceCatalogsGetInput {
        contract_code: "<contractCode>".into(),
        connection_id: None,
        agency_code: None,
        refresh: None,
    })
    .await?;
```

### CLI

```bash
arbol visoft service-catalogs get --contract-code '<contractCode>'
```

## Responses

### 200

Successful operation.

#### Example

```json
{
  "success": true,
  "data": {
    "agencyCode": "string",
    "contractCode": "string",
    "services": [
      {
        "code": "string",
        "codeSystem": "string",
        "codeValue": "string",
        "name": "string",
        "price": 0
      }
    ]
  },
  "error": null,
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.200.success`; boolean, required)
  - one of `true`
- `data` (`visoft.serviceCatalogs.get.response.200.data`; object, required)
  - `agencyCode` (`visoft.serviceCatalogs.get.response.200.data.agencyCode`; string, required) — The cost centre the contract is listed under.
  - `contractCode` (`visoft.serviceCatalogs.get.response.200.data.contractCode`; string, required) — The contract.
  - `services` (`visoft.serviceCatalogs.get.response.200.data.services`; array<object>, required) — Every service of the contract, in SIIPS's order. Possibly empty: some contracts list none.
    - `code` (`visoft.serviceCatalogs.get.response.200.data.services.code`; string, required) — The full service code: its code system, a hyphen and its value.
    - `codeSystem` (`visoft.serviceCatalogs.get.response.200.data.services.codeSystem`; string, required) — The code system: CUPS, PROPIO…
    - `codeValue` (`visoft.serviceCatalogs.get.response.200.data.services.codeValue`; string, required) — The code within its system.
    - `name` (`visoft.serviceCatalogs.get.response.200.data.services.name`; string, required) — The service's name, as SIIPS spells it.
    - `price` (`visoft.serviceCatalogs.get.response.200.data.services.price`; number | null, required) — The price SIIPS lists, when it lists one.
- `error` (`visoft.serviceCatalogs.get.response.200.error`; unknown, required)
- `metadata` (`visoft.serviceCatalogs.get.response.200.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.200.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 400

`INVALID_INPUT`: The request does not match the published schema.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "INVALID_INPUT",
    "message": "string",
    "retryable": false,
    "data": {
      "issues": [
        {
          "path": "string",
          "message": "string"
        }
      ]
    }
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.400.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.400.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.400.error`; object, required) — The request does not match the published schema.
  - `code` (`visoft.serviceCatalogs.get.response.400.error.code`; string, required) — The failure code, stable across releases.
    - one of `"INVALID_INPUT"`
  - `message` (`visoft.serviceCatalogs.get.response.400.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.400.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `false`
  - `data` (`visoft.serviceCatalogs.get.response.400.error.data`; object, required)
    - `issues` (`visoft.serviceCatalogs.get.response.400.error.data.issues`; array<object>, optional)
      - `path` (`visoft.serviceCatalogs.get.response.400.error.data.issues.path`; string, required) — RFC 6901 JSON Pointer to the refused field; empty for the whole input.
        - maxLength 256
      - `message` (`visoft.serviceCatalogs.get.response.400.error.data.issues.message`; string, required)
        - maxLength 256
- `metadata` (`visoft.serviceCatalogs.get.response.400.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.400.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 401

`UNAUTHORIZED`: A valid access token is required.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "string",
    "retryable": false,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.401.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.401.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.401.error`; object, required) — A valid access token is required.
  - `code` (`visoft.serviceCatalogs.get.response.401.error.code`; string, required) — The failure code, stable across releases.
    - one of `"UNAUTHORIZED"`
  - `message` (`visoft.serviceCatalogs.get.response.401.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.401.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `false`
  - `data` (`visoft.serviceCatalogs.get.response.401.error.data`; object, required) — No fields.
- `metadata` (`visoft.serviceCatalogs.get.response.401.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.401.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 403

`FORBIDDEN`: The token does not authorize this operation.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "FORBIDDEN",
    "message": "string",
    "retryable": false,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.403.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.403.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.403.error`; object, required) — The token does not authorize this operation.
  - `code` (`visoft.serviceCatalogs.get.response.403.error.code`; string, required) — The failure code, stable across releases.
    - one of `"FORBIDDEN"`
  - `message` (`visoft.serviceCatalogs.get.response.403.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.403.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `false`
  - `data` (`visoft.serviceCatalogs.get.response.403.error.data`; object, required) — No fields.
- `metadata` (`visoft.serviceCatalogs.get.response.403.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.403.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 404

- `CONNECTION_NOT_FOUND`: The organization has no such connection.
- `CONTRACT_NOT_FOUND`: The clinic's cost centre has no current contract with that code.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "CONNECTION_NOT_FOUND",
    "message": "string",
    "retryable": false,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.404.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.404.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.404.error`; one of, required)
  - one of: `ConnectionNotFoundFailure`, `VisoftContractNotFoundFailure`
  - discriminator: `code`
- `metadata` (`visoft.serviceCatalogs.get.response.404.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.404.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 409

`CONNECTION_NOT_CONFIGURED`: The organization has no active Visoft connection for this call; an administrator connects Visoft in Account.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "CONNECTION_NOT_CONFIGURED",
    "message": "string",
    "retryable": false,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.409.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.409.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.409.error`; object, required) — The organization has no active Visoft connection for this call; an administrator connects Visoft in Account.
  - `code` (`visoft.serviceCatalogs.get.response.409.error.code`; string, required) — The failure code, stable across releases.
    - one of `"CONNECTION_NOT_CONFIGURED"`
  - `message` (`visoft.serviceCatalogs.get.response.409.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.409.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `false`
  - `data` (`visoft.serviceCatalogs.get.response.409.error.data`; object, required) — No fields.
- `metadata` (`visoft.serviceCatalogs.get.response.409.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.409.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 422

- `CREDENTIALS_REJECTED`: The organization's connection to this integration couldn't complete the request. Don't retry it automatically; if it keeps happening, contact your Arbol team.
- `AGENCY_NOT_SERVED`: The cost centre is not one of the connection's clinic: use one visoft.clinic.get lists.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "CREDENTIALS_REJECTED",
    "message": "string",
    "retryable": false
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.422.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.422.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.422.error`; one of, required)
  - one of: `VisoftCredentialsRejectedFailure`, `VisoftAgencyNotServedFailure`
  - discriminator: `code`
- `metadata` (`visoft.serviceCatalogs.get.response.422.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.422.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 429

`RATE_LIMITED`: The request rate limit was exceeded. Try again later.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "RATE_LIMITED",
    "message": "string",
    "retryable": true,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.429.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.429.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.429.error`; object, required) — The request rate limit was exceeded. Try again later.
  - `code` (`visoft.serviceCatalogs.get.response.429.error.code`; string, required) — The failure code, stable across releases.
    - one of `"RATE_LIMITED"`
  - `message` (`visoft.serviceCatalogs.get.response.429.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.429.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `true`
  - `data` (`visoft.serviceCatalogs.get.response.429.error.data`; object, required) — No fields.
- `metadata` (`visoft.serviceCatalogs.get.response.429.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.429.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 500

`INTERNAL_ERROR`: The service could not complete the operation.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "INTERNAL_ERROR",
    "message": "string",
    "retryable": false,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.500.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.500.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.500.error`; object, required) — The service could not complete the operation.
  - `code` (`visoft.serviceCatalogs.get.response.500.error.code`; string, required) — The failure code, stable across releases.
    - one of `"INTERNAL_ERROR"`
  - `message` (`visoft.serviceCatalogs.get.response.500.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.500.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `false`
  - `data` (`visoft.serviceCatalogs.get.response.500.error.data`; object, required) — No fields.
- `metadata` (`visoft.serviceCatalogs.get.response.500.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.500.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 502

- `OUTCOME_UNKNOWN`: The operation may have been applied; check its result before repeating it.
- `PROVIDER_UNAVAILABLE`: The clinical system did not answer or could not complete the request.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "OUTCOME_UNKNOWN",
    "message": "string",
    "retryable": false,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.502.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.502.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.502.error`; one of, required)
  - one of: `OutcomeUnknownFailure`, `VisoftProviderUnavailableFailure`
  - discriminator: `code`
- `metadata` (`visoft.serviceCatalogs.get.response.502.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.502.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 503

`UPSTREAM_UNAVAILABLE`: The upstream service could not complete the request.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "UPSTREAM_UNAVAILABLE",
    "message": "string",
    "retryable": true,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.503.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.503.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.503.error`; object, required) — The upstream service could not complete the request.
  - `code` (`visoft.serviceCatalogs.get.response.503.error.code`; string, required) — The failure code, stable across releases.
    - one of `"UPSTREAM_UNAVAILABLE"`
  - `message` (`visoft.serviceCatalogs.get.response.503.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.503.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `true`
  - `data` (`visoft.serviceCatalogs.get.response.503.error.data`; object, required) — No fields.
- `metadata` (`visoft.serviceCatalogs.get.response.503.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.503.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.

### 504

`UPSTREAM_TIMEOUT`: The upstream service did not respond before its deadline.

#### Example

```json
{
  "success": false,
  "data": null,
  "error": {
    "code": "UPSTREAM_TIMEOUT",
    "message": "string",
    "retryable": true,
    "data": {}
  },
  "metadata": {
    "requestId": "string"
  }
}
```

- `success` (`visoft.serviceCatalogs.get.response.504.success`; boolean, required)
  - one of `false`
- `data` (`visoft.serviceCatalogs.get.response.504.data`; unknown, required)
- `error` (`visoft.serviceCatalogs.get.response.504.error`; object, required) — The upstream service did not respond before its deadline.
  - `code` (`visoft.serviceCatalogs.get.response.504.error.code`; string, required) — The failure code, stable across releases.
    - one of `"UPSTREAM_TIMEOUT"`
  - `message` (`visoft.serviceCatalogs.get.response.504.error.message`; string, required) — What went wrong, for people; it never contains input values.
  - `retryable` (`visoft.serviceCatalogs.get.response.504.error.retryable`; boolean, required) — Whether repeating the same request may succeed.
    - one of `true`
  - `data` (`visoft.serviceCatalogs.get.response.504.error.data`; object, required) — No fields.
- `metadata` (`visoft.serviceCatalogs.get.response.504.metadata`; object, required) — What every answer carries besides its data or error.
  - `requestId` (`visoft.serviceCatalogs.get.response.504.metadata.requestId`; string, required) — Request correlation identifier, also sent as X-Request-Id.


Source: https://docs.getarbol.com/api/visoft/service-catalogs/get/index.md
