Public surface / Reference and test servers
ONC Inferno reference server (US Core / SMART)
This endpoint declares a complete, interoperable public surface.
Observed surface
- Base URL
https://inferno.healthit.gov/reference-server/r4- Category
- Reference and test servers
- Availability
- answered 58 of the last 58 daily checks (100%)
- Last answered
- 2026-10-03 (answered on this run)
- Vantage agreement
- reachable from all 3 vantages, which are 3 hosts on one network (github-actions): one network's view sampled 3 times, not 3 independent networks
What each vantage saw
| Vantage | Result | What it saw | Condition |
|---|---|---|---|
github-actions/macos-latest | reached | answered in 82 ms | HTTP 200 |
github-actions/ubuntu-latest | reached | answered in 379 ms | HTTP 200 |
github-actions/windows-latest | reached | answered in 327 ms | HTTP 200 |
Vantages on one network are one network’s view sampled several times. A rule applied to that network’s address space reaches every one of them at once and reads exactly like agreement.
Interpretation
A grade describes two public discovery documents at one point in time. It does not inspect patient data, authenticated behavior, or clinical quality.
Read the scoring method →This endpoint's full report: what was observed, what was not, and what would change it →
What its CapabilityStatement declares, resource by resource →
Findings
Observed since 2026-08-05; no changes to declared capability recorded.
Declared app-to-server access
What the endpoint's own documents declare about app-to-server access, observed on this run. Nothing here was requested or exercised, and none of it is graded. An absent field is reported as absent, not as a refusal: a document that does not mention a field has not said anything about it.
| Question | Answer | What the document says | Where it is declared |
|---|---|---|---|
| Declares private_key_jwt client authentication at the token endpoint | declared | token_endpoint_auth_methods_supported lists private_key_jwt among 1 | SMART discovery: token_endpoint_auth_methods_supported |
| Declares the client_credentials grant, which SMART Backend Services uses | declared | grant_types_supported lists client_credentials among 2 | SMART discovery: grant_types_supported |
| Declares the client-confidential-asymmetric capability | declared | capabilities lists client-confidential-asymmetric among 18 | SMART discovery: capabilities |
| Declares system-level scopes | declared | 155 of 469 scopes_supported are system/ scopes | SMART discovery: scopes_supported |
| Declares an export operation | declared | export is declared on Group, Patient, the whole server | CapabilityStatement: rest.operation and rest.resource.operation |
| Instantiates the Bulk Data Access implementation guide | declared | instantiates http://hl7.org/fhir/uv/bulkdata/CapabilityStatement/bulk-data | CapabilityStatement: instantiates |
Registry provenance
How this entry was verified
live CapabilityStatement fetch; publisher confirmed via implementation description naming Inferno Reference Server on healthit.gov (recorded 2026-08-04). Re-checked 2026-08-19: live CapabilityStatement re-fetch from the davis-ca residential vantage; fhirVersion 4.0.1, 26 resource types, publisher 'MITRE', software 'no software name'.
Share this endpoint's grade
Link the badge back to this evidence page so readers can inspect the current findings.
<a href="https://fhir.chelseakr.com/endpoint/inferno-reference/">
<img src="https://fhir.chelseakr.com/badge/inferno-reference.svg"
alt="FHIR Scorecard: grade A"></a>This is an observational snapshot of a public, unauthenticated surface. It is not an audit, a ranking of care quality, or a statement about anyone's regulatory compliance. See how we grade.
Every observation on record for this endpoint, with the dates it answered and the dates it did not.