Readiness report
CMS-0057-F readiness report
What 77 payer-side FHIR endpoints say in their two public discovery files, for payers and API vendors preparing for CMS-0057-F. Data from the run of 2026-10-20.
Scope limits
- This is not a compliance determination, and it is not a grade. Nothing here changes any grade, score or weight elsewhere on this site.
- The additional APIs are not graded here. The statements further down say why, and say how well that is sourced.
- Only two public files were read for each endpoint,
/metadataand/.well-known/smart-configuration. Nothing was requested beyond them and no API was exercised. - A field a file does not contain is reported as absent. It is not a refusal and not a failure.
- Listing here says nothing about whether an organization is subject to the rule.
What the files declare, counted
CapabilityStatement: 61 read, 0 retrieved and not readable, 16 not retrieved. SMART discovery document: 24 read, 0 retrieved and not readable, 53 not retrieved. A document that was not retrieved, or arrived and could not be read, is counted in its own column and is never read as a field the publisher left out.
| Question | declared | not listed | not declared: the field is absent | could not be read | not retrieved on this run |
|---|---|---|---|---|---|
| Declares private_key_jwt client authentication at the token endpoint | 10 | 4 | 10 | 0 | 53 |
| Declares the client_credentials grant, which SMART Backend Services uses | 11 | 2 | 11 | 0 | 53 |
| Declares the client-confidential-asymmetric capability | 9 | 12 | 3 | 0 | 53 |
| Declares system-level scopes | 5 | 15 | 4 | 0 | 53 |
| Declares an export operation | 13 | 48 | 0 | 0 | 16 |
| Instantiates the Bulk Data Access implementation guide | 8 | 53 | 0 | 0 | 16 |
Each endpoint
Payer Patient Access APIs
| Endpoint | FHIR version declared | private_key_jwt | client_credentials grant | client-confidential-asymmetric | system/ scopes | export operation | Bulk Data guide |
|---|---|---|---|---|---|---|---|
| 22 Health (Community Care Plan) Patient Access API | 4.0.0 | declared | not declared: the field is absent | not listed | declared | declared | not listed |
| Aetna Patient Access (public demo instance) | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| AmeriHealth Caritas Next (Delaware) Patient Access API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not listed | not listed | not listed | not listed |
| AmeriHealth Caritas Next (Florida) Patient Access API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not listed | not listed | not listed | not listed |
| AmeriHealth Caritas Next Louisiana Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| AmeriHealth Caritas Next North Carolina Patient Access API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not listed | not listed | not listed | not listed |
| Anthem Blue Cross Blue Shield Patient Access API (Elevance) | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Aspirus Health Plan Patient Access API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| AvMed Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Blue Cross and Blue Shield of Alabama Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Blue Cross and Blue Shield of Nebraska Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | declared | not listed |
| Blue Cross and Blue Shield of North Carolina Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Blue Cross Blue Shield of Arizona Patient Access API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Blue Cross Blue Shield of Minnesota Patient Access API (preview) | 4.0.1 | not listed | not declared: the field is absent | not listed | not listed | not listed | not listed |
| Blue KC Patient Access API | 4.0.0 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Capital Blue Cross Patient Access API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| CareSource Patient Access API | 4.0.1 | declared | declared | declared | declared | declared | not listed |
| Cigna Patient Access API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not listed | not declared: the field is absent | not listed | not listed |
| CMS Blue Button 2.0 (Medicare) | 4.0.1 | not declared: the field is absent | not listed | not listed | not listed | not listed | not listed |
| Cox HealthPlans Interoperability API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | declared | not listed |
| Florida Blue Patient Access API (CMS Interoperability conformance endpoint) | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Group Health Cooperative-SCW Patient Access API | 4.0.1 | declared | declared | declared | not listed | not listed | declared |
| Health Plan of San Mateo Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | declared | not listed |
| HealthPartners Patient Access API | 4.0.1 | declared | declared | declared | declared | declared | not listed |
| Humana Patient Access API | 4.0.1 | not listed | declared | not listed | not listed | not listed | declared |
| Imperial Health Plan Patient Access API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Inland Empire Health Plan Patient Access API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not listed | not listed | not listed | not listed |
| Kaiser Permanente Health Plan Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Louisiana Blue Patient Access API | 4.0.1 | declared | declared | declared | not listed | not listed | declared |
| MercyCare Health Plans Patient Access API | 4.0.1 | declared | declared | declared | not listed | not listed | declared |
| Network Health Patient Access API | 4.0.1 | declared | declared | declared | not listed | not listed | declared |
| Paramount Health Care Interoperability API | 4.0.1 | not listed | declared | not listed | not listed | not listed | not listed |
| Premera Blue Cross Patient Access API | 4.0.1 | declared | declared | declared | declared | declared | not listed |
| Priority Health Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | declared | not listed |
| Quartz Patient Access API | 4.0.1 | declared | declared | declared | not listed | not listed | declared |
| Santa Clara Family Health Plan Patient Access API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not listed | not listed | declared | declared |
| Security Health Plan Member API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Sharp Health Plan Patient Access API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Wellmark Patient Access API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | declared |
| Wellpoint Patient Access API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
Payer Provider Directory APIs
| Endpoint | FHIR version declared | private_key_jwt | client_credentials grant | client-confidential-asymmetric | system/ scopes | export operation | Bulk Data guide |
|---|---|---|---|---|---|---|---|
| 22 Health (Community Care Plan) Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| AmeriHealth Caritas Next (Delaware) Provider Directory API | 4.4.0 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| AmeriHealth Caritas Next (Florida) Provider Directory API | 4.4.0 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| AmeriHealth Caritas Next Louisiana Provider Directory API | 4.4.0 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| AmeriHealth Caritas Next North Carolina Provider Directory API | 4.4.0 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Aspirus Health Plan Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| AvMed Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Blue Cross and Blue Shield of Alabama Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Blue Cross and Blue Shield of Kansas Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Blue Cross and Blue Shield of North Carolina Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Blue Cross Blue Shield of Michigan Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Blue KC Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| CareSource Provider Directory API | 4.0.1 | declared | declared | declared | declared | declared | not listed |
| Centene Provider Directory API (Ambetter) | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Central California Alliance for Health Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| CHRISTUS Health Plan Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Cigna Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Community Health Group Provider Directory API | 4.0.1 | not listed | not listed | not listed | not listed | not listed | not listed |
| CommunityCare Provider Directory API (commercial) | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | declared | not listed |
| CommunityCare Provider Directory API (marketplace) | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | declared | not listed |
| Elevance Health shared Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Florida Blue Provider Directory API (CMS Interoperability conformance endpoint) | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Group Health Cooperative-SCW Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Health Care Service Corporation Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Imperial Health Plan Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Inland Empire Health Plan Provider Directory API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not declared: the field is absent | not declared: the field is absent | not listed | not listed |
| L.A. Care Health Plan Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Medical Mutual of Ohio Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | declared | not listed |
| MercyCare Health Plans Provider Directory API | 4.4.0 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Network Health Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Premera Blue Cross Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Priority Health Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| Quartz Provider Directory API | 4.4.0 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Santa Clara Family Health Plan Provider Directory API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not declared: the field is absent | not declared: the field is absent | not listed | not listed |
| Security Health Plan Provider Directory API | 4.0.1 | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not listed | not listed |
| Sharp Health Plan Provider Directory API | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run | not retrieved on this run |
| UnitedHealthcare Provider Directory API | 4.0.1 | not declared: the field is absent | not declared: the field is absent | not declared: the field is absent | not declared: the field is absent | not listed | not listed |
By the software the CapabilityStatement names
This is what each document says, not who operates the server. A multi-tenant platform reports the platform, some documents name nobody, and endpoints whose CapabilityStatement was not read are grouped apart.
| Software named | Endpoints | private_key_jwt | client_credentials grant | client-confidential-asymmetric | system/ scopes | export operation | Bulk Data guide |
|---|---|---|---|---|---|---|---|
| CapabilityStatement not read | 16 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 |
| No software named | 16 | 1 of 8 | 1 of 8 | 0 of 8 | 1 of 8 | 2 of 16 | 1 of 16 |
| 1up FHIR Server | 6 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 6 of 6 | 0 of 6 |
| HAPI FHIR Server | 6 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 1 of 6 | 0 of 6 |
| provider-fhir-service | 6 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 6 | 0 of 6 |
| Epic | 5 | 5 of 5 | 5 of 5 | 5 of 5 | 0 of 5 | 0 of 5 | 5 of 5 |
| AmeriHealth Caritas | 4 | 0 of 3 | 0 of 3 | 0 of 3 | 0 of 3 | 0 of 4 | 0 of 4 |
| Azure Healthcare APIs | 2 | 1 of 1 | 1 of 1 | 1 of 1 | 1 of 1 | 1 of 2 | 0 of 2 |
| InterSystems HealthShare Provider Directory FHIR Server | 2 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 2 | 0 of 2 |
| Opala | 2 | 1 of 1 | 1 of 1 | 1 of 1 | 1 of 1 | 1 of 2 | 0 of 2 |
| Orchestrate Server | 2 | 2 of 2 | 2 of 2 | 2 of 2 | 2 of 2 | 2 of 2 | 0 of 2 |
| Amazon HealthLake FHIR Server | 1 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 1 | 1 of 1 |
| BCBS MN FHIR Server | 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 |
| Blue Button API: Direct | 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 |
| BlueKC FHIR Server | 1 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 1 | 0 of 1 |
| HiPaaS | 1 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 1 | 0 of 1 |
| hos-fhir-server | 1 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 1 | 0 of 1 |
| HumanaFHIR | 1 | 0 of 1 | 1 of 1 | 0 of 1 | 0 of 1 | 0 of 1 | 1 of 1 |
| InterSystems Unified Care Record | 1 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 1 | 0 of 1 |
| optum-flex-server-default | 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 | 0 of 1 |
| ZeOmega HealthUnity Interoperability Platform | 1 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 0 | 0 of 1 | 0 of 1 |
What this page says about the regulation
These statements are the only ones on this page about the rule. Each is taken from this project's own documents. Where the status says the rule text has not been checked, that is literal: this repository does not cite or retain the Federal Register notice or the eCFR text, so the statement is the project's, not a quotation of the rule.
| Statement | Status | Where this repository says it |
|---|---|---|
| CMS-0057-F adds Provider Access, Payer-to-Payer, and Prior Authorization APIs. | Stated in this project's documents. The rule text is not cited or retained in this repository, so it has not been checked against the Federal Register or the eCFR. | data/cohorts/california.json; docs/SAMPLING-FRAME.md |
| Their compliance dates are in January 2027. | Stated in this project's documents. The rule text is not cited or retained in this repository, so it has not been checked against the Federal Register or the eCFR. | data/cohorts/california.json; docs/SAMPLING-FRAME.md |
| Because they are not in force yet, this project does not grade them. | This project's own rule, stated in its documents. | data/cohorts/california.json; docs/SAMPLING-FRAME.md |
| This project makes no compliance determinations. | This project's own rule, stated in its documents. | ROADMAP.md |
| Being listed in this project's frame or registry is not a compliance obligation. | This project's own rule, stated in its documents. | docs/SAMPLING-FRAME.md |
What this page does not assert
- Which organizations the rule applies to.
- What each of the new APIs must do, or which implementation guides satisfy it.
- The compliance date of any individual API.
- Whether a field listed below is required by the rule. The fields are the ones this project already reads for SMART Backend Services and Bulk Data, because those are what its existing app-to-server block reports; none of them is mapped here to a requirement.
- Whether any API exists behind authentication. Neither public file can show that.
Where the data comes from
The same observations feed each endpoint's page and its
api/endpoint/<id>.json file, in the block named
app_to_server. The questions and their citations are the ones on
how we grade and on each endpoint page. To check a row, open the
endpoint, or fetch its two public files yourself.