Single-endpoint report

Security Health Plan Member API: endpoint report

Everything this project observed about this one endpoint, everything it did not observe, and what would change the result. Free to read, link, print and hand on; there is nothing here behind a sign-in and nothing to buy.

Built to print. Use your browser’s print or “Save as PDF” to keep a dated copy; the page carries its own address and observation date.

What was observed, and what was not

This report covers 9 checks. 9 ran. 0 were asked from every reporting vantage and answered by none. 0 were never asked, because nothing was retrieved for them to read. The three are different facts and none of them is a zero: a check that did not run publishes no number, no mark against this endpoint, and nothing below to act on.

What would change this

Ordered by the points each would recover. Every item below comes from a check that actually ran on this run; nothing derived from a check that did not run appears here. The three dimensions are weighted, so recovering points does not guarantee a different letter — how we grade gives the weights.

1. Declare the implementation guide's canonical URLs. Any of five conformance elements is read: rest.resource.supportedProfile, rest.resource.profile, instantiates, imports, or meta.profile. The finding above names where this project looked and what it found there.

   Worth up to 40 of the 100 points in Interop readiness.

   This run observed: no profile canonical declared in rest.resource.supportedProfile, rest.resource.profile, instantiates, imports, or meta.profile

   I1: what this check isSpec ↗

2. Publish .well-known/smart-configuration at the base URL, carrying at least authorization_endpoint and token_endpoint.

   Worth up to 35 of the 100 points in Interop readiness.

   This run observed: SMART .well-known/smart-configuration absent or incomplete

   I2: what this check isSpec ↗

If this does not match what you see

Every number here describes two public documents at one moment, read from the vantages listed above. If it does not match what you serve, the difference is worth knowing.

Correct or dispute this record. There is no sign-in, no fee, and nothing to buy: this report is free to read, link, print and hand on, and this project collects nothing about the people who read it.

Where this came from

base URL printed literally on the plan's own domain at https://www.securityhealth.org/developer-third-party-application, section 'Developing with Security Health Plan APIs', under the heading 'Base URLs:', line 'Member API Base URL'. Page footer 'Copyright 2026 Security Health Plan of Wisconsin, Inc.' No template and no substitution. Live CapabilityStatement retrieved (recorded 2026-09-04). No later re-check is recorded, so the date above is the last time anyone checked this entry against the live endpoint.

The same run, as data: this endpoint's JSON, what its CapabilityStatement declares, resource by resource, and every observation on record for it, with the dates it answered and the dates it did not.