CMS Interoperability API
Developer Portal

Register a Provider Organization

Provider Access API

Complete the form below to request system-to-system access to the Provider Access API on behalf of a provider organization. Approved organizations receive a confidential-client client_id for the SMART Backend Services flow (client_credentials grant, private_key_jwt authentication) — you generate your own key pair and submit only the public key certificate below, which we register against your client_id. Your private key never leaves your systems. Review typically takes 3–5 business days.

Application Details
Maximum 100 characters.
The provider organization's NPI. Data access is scoped to patients attributed to this NPI.
Maximum 1000 characters.
Contact
Registration status updates and credentials will be sent to this address.
Authentication

Generate your own key pair, then paste the public certificate (cert.pem) below. For example, from a terminal with openssl installed (macOS, Linux, WSL, or Git Bash on Windows): 

openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365

On Windows without Git Bash, use PowerShell with the command below: 

& "C:\Program Files\Git\usr\bin\openssl.exe" req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365

Submit only cert.pem below. Keep key.pem private and never send it to us — it's what your system uses to sign private_key_jwt client assertions when requesting access tokens.

Terms of Service

By registering, you agree to the Developer Terms of Service and confirm that this system will only access patient data for patients attributed to the provider organization above, in compliance with applicable law.

Cancel