# Surescripts

**Canonical:** https://apis.io/providers/surescripts/  
**Website:** https://surescripts.com  
**APIs profiled:** 8

Surescripts operates the largest health information network in the United States, connecting prescribers, pharmacies, pharmacy benefit managers (PBMs), health plans, and health systems for e-prescribing, medication history, benefit and eligibility verification, electronic prior authorization, and clinical interoperability. Transaction services run over NCPDP SCRIPT (NewRx, RxRenewal, RxChange, RxTransfer, RxFill, CancelRx), NCPDP Real-Time Prescription Benefit, NCPDP Formulary and Benefit, X12 (270/271 eligibility, 278 prior authorization), the Direct Standard, and - since the Surescripts Developer Portal launched at docs.surescripts.com on 2026-08-06 - two publicly documented HTTP APIs - a Medication History for Populations API implemented in HL7 FHIR R4, and a four-endpoint Formulary Download REST API. Both authenticate the calling organization with a Surescripts-issued client certificate over mutual TLS plus a Participant ID header; Surescripts runs its own Certificate Authority. There is still no OpenAPI, no self-serve sign-up, no published pricing and no free API keys - production access requires Surescripts certification (conformance testing against current NCPDP standards, Certification Review Board contract approval, and a DEA third-party audit for EPCS) or integration through a certified middleware/EHR partner.

## Kin Score — 41.1 / 100 (developing)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 41.1).

| Facet | Score |
|---|---|
| Discoverability | 72.2 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 47.4 |
| Developer Ergonomics | 64.3 |
| Commercial Clarity | 43.4 |
| Access Clarity | 43.4 |

Regulatory layer — **Health**: 45.0 (matched via tags).

## Agent readiness — 7.9 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## APIs (8)

- **Surescripts Medication History for Populations FHIR API** — Publicly documented HL7 FHIR Release 4 API for retrieving medication history panels and near-real-time Prescription Notifications for enrolled patient populations. Panels and no...
- **Surescripts Formulary Download API** — Four documented REST endpoints that let a technology vendor locate and download NCPDP Formulary and Benefit lists - GET /formulary/pbms, GET /formulary/listTypes, GET /formulary...
- **Surescripts E-Prescribing** — Routes electronic prescriptions between prescribers and pharmacies over the NCPDP SCRIPT standard (version 2023011), supporting NewRx, RxRenewalRequest/Response, RxChangeRequest...
- **Surescripts Eligibility and Formulary** — Verifies patient pharmacy benefit eligibility and returns formulary and benefit coverage details so prescribers see coverage and coverage alternatives in workflow. Eligibility r...
- **Surescripts Real-Time Prescription Benefit** — Returns patient-specific, real-time out-of-pocket drug cost, coverage status, and therapeutic alternatives at the point of prescribing, as a synchronous RTPBRequest/RTPBResponse...
- **Surescripts Electronic Prior Authorization** — Automates electronic prior authorization (ePA) between prescribers and PBMs/payers using the NCPDP SCRIPT ePA transaction set (PAInitiationRequest, PARequest, PAResponse, and re...
- **Surescripts Clinical Direct Messaging** — Provides secure, HIPAA-compliant clinical message exchange (Direct Secure Messaging) for care coordination between providers, including transitions of care and referrals. Delive...
- **Surescripts Record Locator and Exchange** — Locates where a patient has clinical records across the network and enables retrieval of relevant clinical documents to inform care decisions. Delivered to certified participant...

## Security (3)

- **Surescripts Authentication** — mutualTLS/apiKey · 4 schemes
- **Surescripts Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Surescripts Trust Center** — HITRUST r2, SOC 2 Type II, EHNAC, DirectTrust, WebTrust for Certification Authorities, HIPAA

## Plans (1)

- **Surescripts Plans Pricing**

## Tags

Healthcare, e-Prescribing, Health Information Network, NCPDP SCRIPT, Medication History, Prior Authorization, Interoperability, FHIR, Formulary, Eligibility, Real-Time Prescription Benefit, Mutual TLS, Gated

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/surescripts/). Scores are computed from the provider's own public artifacts under a published rubric.
