Network access for APIs

This page explains how to access our APIs using either the internet or the Health and Social Care Network (HSCN).

Some of our newer APIs are available on the internet but not directly on HSCN.

To check if a specific API is internet-only, refer to its API specification in the API and integration catalogue.

Accessing internet-only APIs from HSCN

All HSCN connections can include internet access, so you should be able to access internet-only APIs from an HSCN connection.

You can choose how your HSCN connection provides internet access. There are two main options:

1. Local breakout – provided by your own internet service provider.
2. NHS Secure Boundary – provided by us as an optional extra but configured by your HSCN Consumer Network Service Provider (CN-SP).

If you're having trouble accessing the internet from your HSCN connection, see our HSCN internet access issues guidance.

Authentication options for internet-only APIs

Some APIs require the end user to be a strongly authenticated healthcare worker.

CIS2 Authentication supports a range of authenticators that work over the internet without a HSCN connection, including smartcards.

If you're using smartcards over the internet without a HSCN connection, make sure you have the right software.

If you're still using CIS1 Authentication, you'll need an HSCN connection.

For more details on authentication options, contact us.

Some APIs are only available on HSCN and not on the internet.

To check if a specific API is HSCN-only, refer to its API specification in our API and integration catalogue.

We are working to make all our APIs available on the internet in line with our Internet First policy.

Some APIs are available on both the internet and HSCN. This is usually the case for older APIs that were originally available on HSCN and later made available on the internet.

To check if a specific API is available on both, refer to its API specification in our API and integration catalogue.