# title
Secure US Drug Formulary Server Capability Statement

# description
This Section describes the expected capabilities of the US Drug Formulary Server actor which is responsible for providing responses to the queries submitted by the US Drug Formulary Requestors. The complete list of FHIR profiles, RESTful operations, and search parameters supported by US Drug Formulary Server are defined.

# rest[].documentation
US Drug Formulary Server  **SHALL**:

1. Support all profiles defined in this Implementation Guide..
1.  Implement the RESTful behavior according to the FHIR specification.
1. Return the following response classes:
   - (Status 400): invalid parameter
   - (Status 401/4xx): unauthorized request
   - (Status 403): insufficient scope
   - (Status 404): unknown resource
1. Support json source formats for all US Drug Formulary interactions.
1. Support the searchParameters on each profile  individually and in combination.

US Drug Formulary Server **SHOULD**:

1. Support xml source formats for all US Drug Formulary interactions.

# rest[].security.description
1. See the [General Security Considerations](security.html) section for requirements and recommendations.
1. A server **SHALL** reject any unauthorized requests by returning an `HTTP 401` unauthorized response code.