Public surface / Payer Patient Access APIs

CMS Blue Button 2.0 (Medicare)

This endpoint declares a solid public surface with minor gaps.

Current grade B

Reachability100

Capability transparency100

Interop readiness60

Observed surface

Base URL: https://api.bluebutton.cms.gov/v2/fhir
Category: Payer Patient Access APIs
Availability: answered 10 of 10 checks so far; availability is reported once 14 observations exist
Vantage agreement: reachable from all 3 vantages, which are 3 hosts on one network (github-actions): one network's view sampled 3 times, not 3 independent networks

Interpretation

A grade describes two public discovery documents at one point in time. It does not inspect patient data, authenticated behavior, or clinical quality.

Read the scoring method →

Findings

Reachability100

Pass: /metadata answers with HTTP 2xx over HTTPS: reachable from all 3 vantages, which are 3 hosts on one network (github-actions): one network's view sampled 3 times, not 3 independent networksR1 Spec ↗
Pass: /metadata responded in 516 ms (median across 3 reachable vantages on one network)R2 Spec ↗

Capability transparency100

Pass: fhirVersion declared: '4.0.1' (expected 4.x)T1 Spec ↗
Pass: software name and version declaredT2 Spec ↗
Pass: 3 resource types declared (narrow but fully documented)T3 Spec ↗
Pass: 3/3 declared resources document their interactionsT4 Spec ↗

Interop readiness60

Needs attention: 3 profile canonical(s) declared in rest.resource.profile, none of them US Core, CARIN, or Da Vinci; also checked rest.resource.supportedProfile, instantiates, imports, meta.profileI1 Spec ↗
Pass: SMART discovery document present and completeI2 Spec ↗
Pass: OAuth/SMART security service declared in CapabilityStatementI3 Spec ↗

Declared capability changes

2026-08-07: software_version: '2.259.0' -> '2.260.0'
2026-08-12: software_version: '2.260.0' -> '2.262.0'

Registry provenance

How this entry was verified

live CapabilityStatement fetch; publisher confirmed via implementation description 'gov.cms.bfd:bfd-server-war' and software 'Blue Button API' (recorded 2026-08-04)

Share this endpoint's grade

Link the badge back to this evidence page so readers can inspect the current findings.

<a href="https://chelseakr.github.io/fhir-scorecard/endpoint/cms-blue-button-2/">
<img src="https://chelseakr.github.io/fhir-scorecard/badge/cms-blue-button-2.svg"
alt="FHIR Scorecard: grade B"></a>

This is an observational snapshot of a public, unauthenticated surface. It is not an audit, a ranking of care quality, or a statement about anyone's regulatory compliance. See how we grade.