Public surface / EHR vendor sandboxes

Epic on FHIR public sandbox

This endpoint declares a complete, interoperable public surface.

Current grade A

Reachability100

Capability transparency100

Interop readiness100

Observed surface

Base URL: https://fhir.epic.com/interconnect-fhir-oauth/api/FHIR/R4
Category: EHR vendor sandboxes
Availability: answered 9 of 10 checks so far; availability is reported once 14 observations exist
Vantage agreement: reachable from all 3 vantages, which are 3 hosts on one network (github-actions): one network's view sampled 3 times, not 3 independent networks

Interpretation

A grade describes two public discovery documents at one point in time. It does not inspect patient data, authenticated behavior, or clinical quality.

Read the scoring method →

Findings

Reachability100

Pass: /metadata answers with HTTP 2xx over HTTPS: reachable from all 3 vantages, which are 3 hosts on one network (github-actions): one network's view sampled 3 times, not 3 independent networksR1 Spec ↗
Pass: /metadata responded in 282 ms (median across 3 reachable vantages on one network)R2 Spec ↗

Capability transparency100

Pass: fhirVersion declared: '4.0.1' (expected 4.x)T1 Spec ↗
Pass: software name and version declaredT2 Spec ↗
Pass: 60 resource types declaredT3 Spec ↗
Pass: 60/60 declared resources document their interactionsT4 Spec ↗

Interop readiness100

Pass: US Core / CARIN / Da Vinci profiles declared in CapabilityStatement.instantiates, rest.resource.supportedProfileI1 Spec ↗
Pass: SMART discovery document present and completeI2 Spec ↗
Pass: OAuth/SMART security service declared in CapabilityStatementI3 Spec ↗

Declared capability changes

2026-08-12: software_version: 'May 2026' -> 'August 2026'; resource_count: 59 -> 60; resources_with_interactions: 59 -> 60

Registry provenance

How this entry was verified

live CapabilityStatement fetch on fhir.epic.com; software identifies as 'Epic May 2026' (recorded 2026-08-05)

Share this endpoint's grade

Link the badge back to this evidence page so readers can inspect the current findings.

<a href="https://chelseakr.github.io/fhir-scorecard/endpoint/epic-sandbox/">
<img src="https://chelseakr.github.io/fhir-scorecard/badge/epic-sandbox.svg"
alt="FHIR Scorecard: grade A"></a>

This is an observational snapshot of a public, unauthenticated surface. It is not an audit, a ranking of care quality, or a statement about anyone's regulatory compliance. See how we grade.