Auth57 API

Prior authorization data,
in your system.

Shipping PA features means scraping payer sites or hiring a rules team — neither scales. Connect your UM platform, EHR, or PA automation stack to Auth57's verified rule data via REST. JSON in under 200ms, scoped to the states you subscribe to, verified against CMS-0057-F and CMS-0062-P.

/v1/pa-lookup
187 MS
REQUEST
GET /v1/pa-lookup?state=CA&drug=enbrel
RESPONSE · 200 OK
{
"pa_required": true,
"confidence": "high",
"source_url": "medi-cal.ca.gov/...",
"last_verified": "2026-04-19"
}
EDGE · BLOBHUMAN-VERIFIED
<200ms
Edge response
99.9%
Uptime SLA
5k
Calls/mo included
REST
JSON · API key auth
Simple by design

One request. Everything you need.

A single GET returns the PA verdict, PA type, clinical criteria, submission target, turnaround times, confidence score, and a source URL. No paginated rule trees to walk. No webhook plumbing.

GET/v1/pa-lookup
GET/v1/compare

Base URL: api.auth57.io
Auth: x-api-key header

Request
curl https://api.auth57.io/v1/pa-lookup \
  -H "x-api-key: your_key" \
  -G \
  -d "state=TX" \
  -d "program=medicaid_mco" \
  -d "drug=glp1_weight_loss"
Response
{
  "state": "TX",
  "program": "medicaid_mco",
  "query": { "drug_class": "glp1_weight_loss" },
  "result": {
    "pa_required": true,
    "pa_type": "full",
    "confidence": "high",
    "federal_override": false,
    "last_verified": "2026-04-01",
    "source_url": "https://...",
    "next_steps": [
      { "step": 1, "title": "Gather clinical documentation" },
      { "step": 2, "title": "Submit PA request" }
    ]
  },
  "served_from": "blob",
  "timestamp": "2026-04-06T10:30:00Z"
}
The mandate this implements

CMS-0057-F is the reason this API exists.

Every Medicaid, Medicare Advantage, CHIP, and federal-exchange QHP plan needs FHIR-based PA APIs by Jan 1, 2027. Auth57 is the verified rule layer underneath those APIs — and the same data feed for anyone building PA features outside the payer.

CMS-0057-F
Final Rule · In force

FHIR PA APIs across 14 service categories.

Standard PA decisions in 7 days, expedited in 72 hours. Structured denial reasons retrievable by API. Annual metric reporting. Auth57 gives you the verified rule data your FHIR endpoint has to return.

API deadline
Jan 1, 2027
days left
CMS-0062-P
Proposed · Comment open

Drug-benefit PA pulled in next.

Extends electronic PA to 20 drug classes under the medical benefit — immunomodulators, oncology injectables, biosimilars, GLP-1s. The API already covers these classes; the regulatory deadline catches up next.

Proposed deadline
Oct 1, 2027
days left
Who builds on this

Four shapes of PA integration.

Same dataset, four very different surfaces. Pick the one that fits your product — the API doesn't care.

EHR integration

Surface PA verdicts inside the chart.

Render the verdict, PA type, and submission target on the order screen. Stop sending clinicians to a payer portal mid-encounter.

See request shape
UM platform

Replace your scraping pipeline.

Swap the rules team and the brittle scrapers for a verified data feed. One vendor for all 51 states, every program, with a citation trail.

Endpoints
Payer self-build

Stand up CMS-0057-F faster.

Use Auth57 as the verified rule layer behind your FHIR PA APIs. Beats hiring a 12-person PA-data team to be ready for Jan 1, 2027.

Mandate brief
AI agent backend

Tool-call PA without hallucinating.

Give your agent a deterministic source for PA verdicts. Same dataset our MCP server exposes — addressable as REST when MCP isn't on the menu.

Developer guide
SDK · TypeScript

npm install @auth57labs/sdk

Typed client for Node, Deno, Bun, Cloudflare Workers, Vercel Edge, and every modern browser. Zero runtime dependencies. Optional Lit-based <auth57-pa-lookup> Web Component for embedding the verdict UI directly on customer sites.

import { Auth57Client } from '@auth57labs/sdk';

const client = new Auth57Client({
  apiKey: process.env.AUTH57_API_KEY!,
});

const verdict = await client.paLookup({
  state: 'CA',
  program: 'medicaid_ffs',
  service: 'advanced_imaging',
});

console.log(verdict.result.pa_required);
console.log(verdict.result.source_url);
Endpoints

Four endpoints. No SDK required.

Plain GET requests over HTTPS, JSON in, JSON out. The full spec lives at /api-reference — Swagger UI, downloadable OpenAPI 3.1 doc, generated client examples.

GET/v1/pa-lookupSingle-state PA verdict for a service or drug class. Confidence-scored, source-linked, with structured next steps.
GET/v1/compareCross-state divergence in one query. Up to 10 states, returns a per-state verdict matrix and an outlier summary.
GET/v1/statesList of states your API key is scoped to, with per-state program coverage and last-verified timestamps.
GET/v1/manifestEnum manifest — programs, services, drug classes, region codes. Use it to populate dropdowns or validate inputs client-side.
What's included

Built for production.

Edge-deployed

Runs on Vercel Edge — globally distributed, sub-200ms response times from anywhere in the US.

Lookup + compare in one key

Single-state PA lookup and multi-state divergence comparison are both included. No tier-locking the second endpoint.

Structured next steps

Every PA-required result includes clinical criteria, submission target, and turnaround times — ready to render in your UI.

Drug + service coverage

Query by drug class code or service category. Drug coverage spans 20 drug classes across all 51 states.

Subscription-scoped keys

Your API key is automatically scoped to your subscribed states. Out-of-scope requests return a clean 403 — no surprise overage charges.

Source-linked, confidence-scored

Every response carries source_url and last_verified. Your audit team gets a citation trail, not a guess.

How we stay current

Human-verified.
Always current.

Every rule is monitored, verified, and updated by our team before it reaches you. We read the sources — CMS bulletins, state Medicaid agency notices, payer policy updates — so your team never has to call to confirm.

  • CMS.gov regulatory updates and final rules
  • State Medicaid agency bulletins — all 51 states
  • Medicare Advantage and Part D plan communications
  • WISeR pilot program data and model updates
  • Federal Register notices and proposed rules
Rule updateLive
TX · Medicaid · MCO
GLP-1 step therapy

Step therapy requirement updated. Prior treatment failure documentation now required. Effective April 1, 2026.

Reviewed by Auth57 team · Source: HHSC Medicaid bulletin

Pending reviewVerifying
CA Medi-Cal — biosimilars PA exemption

Proposed exemption for FDA-approved biosimilars under review. Not yet in effect — team monitoring.

Auth57 team review in progress · Source: DHCS bulletin draft

Confirmed unchangedVerified
NJ FamilyCare — oncology oral PA requirements

Quarterly verification complete. No changes to PA requirements for oral oncology agents.

Verified April 2026 · Source: NJDOH policy manual

API pricing

Simple. One plan.

Annual billing locks in the lower rate. Switch to monthly any time.

API
$249/mo · billed annually

Or $299/mo billed monthly · cancel anytime

  • PA lookup + compare endpoints
  • All 51 states + all programs
  • CMS-0057-F + CMS-0062-P verified
  • 20 drug classes + 14 service categories
  • Edge responses under 200ms
  • JSON + source links + confidence scores
  • 5,000 calls/mo included · overage on request
Get API key — $249/mo →

Enterprise plans available — book a call

api.auth57.io

Your API key is one form away.

Integrate in an afternoon. Scale from there. The OpenAPI spec, sample requests, and a live curl on the reference page are enough to wire a working PA lookup before your standup ends.