Public surface / Payer Provider Directory APIs
Santa Clara Family Health Plan Provider Directory API
This endpoint answers publicly with substantial gaps.
Observed surface
- Base URL
https://fhir.scfhp.com/providerAPI- Category
- Payer Provider Directory APIs
- Availability
- answered 56 of the last 56 daily checks (100%)
- Last answered
- 2026-10-03 (answered on this run)
- Vantage agreement
- reachable from all 3 vantages, which are 3 hosts on one network (github-actions): one network's view sampled 3 times, not 3 independent networks
What each vantage saw
| Vantage | Result | What it saw | Condition |
|---|---|---|---|
github-actions/macos-latest | reached | answered in 276 ms | HTTP 200 |
github-actions/ubuntu-latest | reached | answered in 74 ms | HTTP 200 |
github-actions/windows-latest | reached | answered in 125 ms | HTTP 200 |
Vantages on one network are one network’s view sampled several times. A rule applied to that network’s address space reaches every one of them at once and reads exactly like agreement.
Interpretation
A grade describes two public discovery documents at one point in time. It does not inspect patient data, authenticated behavior, or clinical quality.
Read the scoring method →This endpoint's full report: what was observed, what was not, and what would change it →
What its CapabilityStatement declares, resource by resource →
Findings
- Needs attention: 4 profile canonical(s) declared in rest.resource.profile, none of them US Core, CARIN, or Da Vinci; also checked rest.resource.supportedProfile, instantiates, imports, meta.profileI1Spec ↗
- Note: SMART discovery not applicable: a Provider Directory API is public by designI2Spec ↗
- Note: OAuth security not applicable: a Provider Directory API is public by designI3Spec ↗
Observed since 2026-08-08; no changes to declared capability recorded.
Declared app-to-server access
What the endpoint's own documents declare about app-to-server access, observed on this run. Nothing here was requested or exercised, and none of it is graded. An absent field is reported as absent, not as a refusal: a document that does not mention a field has not said anything about it.
| Question | Answer | What the document says | Where it is declared |
|---|---|---|---|
| Declares private_key_jwt client authentication at the token endpoint | not declared: the field is absent | the SMART document is an empty JSON object, so it declares no field | SMART discovery: token_endpoint_auth_methods_supported |
| Declares the client_credentials grant, which SMART Backend Services uses | not declared: the field is absent | the SMART document is an empty JSON object, so it declares no field | SMART discovery: grant_types_supported |
| Declares the client-confidential-asymmetric capability | not declared: the field is absent | the SMART document is an empty JSON object, so it declares no field | SMART discovery: capabilities |
| Declares system-level scopes | not declared: the field is absent | the SMART document is an empty JSON object, so it declares no field | SMART discovery: scopes_supported |
| Declares an export operation | not listed | 56 operations are declared and none is named export | CapabilityStatement: rest.operation and rest.resource.operation |
| Instantiates the Bulk Data Access implementation guide | not listed | 0 canonicals are instantiated and none is Bulk Data's | CapabilityStatement: instantiates |
Registry provenance
How this entry was verified
live CapabilityStatement fetch (fhirVersion 4.0.1, 4 resource types); publisher 'Not provided', implementation description 'FHIR Endpoint powered by SCFHP' on the scfhp.com domain, base URL published in the plan's own developer documentation (recorded 2026-08-07). Re-checked 2026-08-19: live CapabilityStatement re-fetch from the davis-ca residential vantage; fhirVersion 4.0.1, 4 resource types, publisher 'Not provided', software 'no software name'.
Share this endpoint's grade
Link the badge back to this evidence page so readers can inspect the current findings.
<a href="https://fhir.chelseakr.com/endpoint/scfhp-provider-directory/">
<img src="https://fhir.chelseakr.com/badge/scfhp-provider-directory.svg"
alt="FHIR Scorecard: grade D"></a>This is an observational snapshot of a public, unauthenticated surface. It is not an audit, a ranking of care quality, or a statement about anyone's regulatory compliance. See how we grade.
Every observation on record for this endpoint, with the dates it answered and the dates it did not.