Build on Fonteum’s healthcare data

Fonteum publishes federal healthcare provider data with 14-tuple chain-of-custody provenance. Access it via FHIR R4 API, bulk dataset downloads, or provider event webhooks. All data derives from primary CMS, OIG, and HRSA sources — free, no paywall.

Reviewed by Dr. Jennifer Montecillo, MD, non-practicing medical reviewer. Last reviewed: June 2026 · Next review: December 2026

What you can build

Integration patterns

• EHR and clinical workflow integrations — pull practitioner directory data into scheduling, referral, and credentialing modules using the FHIR PractitionerRole resource.
• Compliance dashboards — surface OIG LEIE exclusion status and PECOS enrollment state for providers in your network using the webhook stream.
• Research pipelines — download full NDJSON snapshots of NPPES, Care Compare, and QPP MIPS datasets for longitudinal cohort studies and quality analyses.
• Quality-scoring applications — combine MIPS performance scores, Care Compare star ratings, and HCRIS cost data to build custom provider quality indices.

Developer FAQ

Common questions

What developer APIs does Fonteum offer?

Fonteum provides three developer access paths: an HL7 FHIR R4 provider directory API (Practitioner, Organization, Location, PractitionerRole, HealthcareService resources), bulk dataset downloads in NDJSON and CSV formats for all ingested federal source families, and HMAC-SHA256-signed provider event webhooks that fire when LEIE or PECOS state changes for a tracked provider.

Is authentication required to use the Fonteum FHIR API?

Anonymous GET requests are permitted for individual resource reads. SMART Backend Services authentication (client credentials flow with a signed JWT) is required for the Bulk Data $export operation, which streams the full provider dataset as NDJSON. Registration is free.

What federal data sources power the Fonteum API?

The Fonteum API draws from 12+ federal source families including NPPES, CMS PECOS PPEF, OIG LEIE, CMS Care Compare (Nursing Home, Home Health, Hospice, Dialysis, ASC), HCRIS Hospital Cost Reports, CMS QPP MIPS, HRSA HPSA, and HRSA UDS. Every field carries 14-tuple chain-of-custody provenance tracing back to the originating federal record.

How does Fonteum's 14-tuple provenance chain work?

Each data field is tagged with 14 provenance fields: dataset ID, source agency, source URL, archive URL, snapshot date, reporting period, methodology version, entity type, entity ID, field name, field value, confidence tier, chain link hash, and attested-at timestamp. This chain links every rendered fact to the specific federal record row it originated from and the ingestion run that imported it.

Where can I find the FHIR CapabilityStatement?

The FHIR CapabilityStatement is published at /api/fhir/metadata. It enumerates 5 USCDI v3 Provider resources: Practitioner, Organization, Location, PractitionerRole, and HealthcareService. The statement conforms to US Core 6.1.0 and includes SMART Backend Services security extensions.

Related documentation

• /docs/fhir— FHIR R4 provider directory API reference
• /docs/bulk-export— Bulk Data $export implementation guide
• /docs/identity— Federated identity resolution (NPI ↔ PECOS-ID)
• /docs/webhooks— Provider event webhook subscription
• /for/developers— Fonteum for developers — use cases and access