Centers for Medicare and Medicaid Services · OAuth Scopes

Centers for Medicare and Medicaid Services OAuth Scopes

OAuth 2.0 derived

Centers for Medicare and Medicaid Services publishes 3 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Centers for Medicare and Medicaid Services API on a user’s behalf.

Tokens are issued from https://api.bluebutton.cms.gov/v2/o/token/.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

BCDABlue ButtonCMSClaimsDPCFHIRFederal GovernmentHealthcareInteroperabilityMarketplaceMedicaidMedicareOpen DataProvider DataSocrata

Scopes: 3 Flows: authorizationCode Method: derived

OAuth endpoints

Authorization URL
https://api.bluebutton.cms.gov/v2/o/authorize/

Token URL
https://api.bluebutton.cms.gov/v2/o/token/

Flows
authorizationCode

Scopes (3)

Scope	Description	Flows
patient/Coverage.read	Read beneficiary Coverage resources.	authorizationCode
patient/ExplanationOfBenefit.read	Read beneficiary claims.	authorizationCode
patient/Patient.read	Read beneficiary Patient resource.	authorizationCode

📄 Provider scope reference:

Source

OAuth Scopes

generated: '2026-07-11'
method: derived
source: openapi/centers-for-medicare-and-medicaid-services-cms-blue-button-2-openapi.yml
schemes:
- name: oauth2
  source: openapi/centers-for-medicare-and-medicaid-services-cms-blue-button-2-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://api.bluebutton.cms.gov/v2/o/authorize/
    tokenUrl: https://api.bluebutton.cms.gov/v2/o/token/
  description: OAuth 2.0 authorization code flow used by Medicare beneficiaries to grant access
    to a third-party application.
scopes:
- scope: patient/Coverage.read
  description: Read beneficiary Coverage resources.
  flows:
  - authorizationCode
  sources:
  - openapi/centers-for-medicare-and-medicaid-services-cms-blue-button-2-openapi.yml
- scope: patient/ExplanationOfBenefit.read
  description: Read beneficiary claims.
  flows:
  - authorizationCode
  sources:
  - openapi/centers-for-medicare-and-medicaid-services-cms-blue-button-2-openapi.yml
- scope: patient/Patient.read
  description: Read beneficiary Patient resource.
  flows:
  - authorizationCode
  sources:
  - openapi/centers-for-medicare-and-medicaid-services-cms-blue-button-2-openapi.yml