Supergood | DrFirst API

Supergood | DrFirst API

Programmatically access DrFirst medication history, e‑prescribing workflows, real‑time prescription benefits, and prior authorization status with a stable REST API. Supergood builds and operates production‑grade, unofficial DrFirst integrations so your team can automate clinical workflows without heavy custom engineering.

Plain English: DrFirst is healthcare IT software focused on medication management—pulling comprehensive med history from pharmacies and payers (MedHx), enabling electronic prescribing (Rcopia/EPCS), showing real‑time price and formulary options, integrating PDMP checks, and streamlining electronic prior authorization. An unofficial API lets you programmatically pull patient medication lists, pharmacy and prescriber context, real‑time benefit results, PDMP attestations, and prescription statuses—and push new e‑prescriptions, cancellations, prior auth requests, and medication reconciliation updates back into DrFirst.

For a tech company integrating with DrFirst, this means you can ingest live medication data to power care management dashboards, automatically e‑prescribe from virtual visit flows, surface price transparency at the point of ordering, trigger prior authorization workflows, and keep your EHR/telehealth/analytics systems synchronized with changes in prescriptions, fills, and approvals. You can also route prescriptions to preferred pharmacies, attach clinical documents, capture PDMP attestation events, and coordinate secure messaging with care teams—all while maintaining audit trails and regulatory controls.

What is DrFirst?

DrFirst (https://drfirst.com/) is a healthcare technology company that centralizes medication management and clinical communication across providers, pharmacies, payers, and patients. Organizations use DrFirst to retrieve medication history (MedHx), perform medication reconciliation, e‑prescribe (including controlled substances via EPCS), check PDMP registries, run real‑time prescription benefit checks for price and coverage, streamline electronic prior authorization (ePA), and collaborate securely via clinical messaging (Backline).

Core product areas include:

  • Medication History & Reconciliation (MedHx)
  • E‑Prescribing (Rcopia), including EPCS for controlled substances
  • Price Transparency & Formulary (Real‑Time Prescription Benefit)
  • Electronic Prior Authorization (ePA)
  • PDMP Integration & Attestation
  • Clinical Communications (Backline)
  • Patient Engagement (reminders, coupons, adherence outreach)

Common data entities:

  • Organizations, Providers, Roles/Permissions (prescribers, staff, admins)
  • Patients (demographics, identifiers: MRN, payer member IDs)
  • Prescriptions (Rx orders, renewals, cancellations)
  • Medications (RxNorm/NDC mapping, SIG parsing, status)
  • Pharmacies (NCPDP/NPI identifiers)
  • Benefits & Formulary (plan, copays, coverage, alternatives)
  • Prior Authorizations (requests, questions, attachments, statuses)
  • PDMP Events/Reports (state registry results, attestation metadata)
  • Messages/Threads (secure clinical communication)

The DrFirst Integration Challenge

Healthcare teams rely on DrFirst daily, but transforming portal‑centric, compliance‑heavy workflows into API‑driven automation is non‑trivial:

  • Regulated flows: EPCS identity proofing, two‑factor challenges, PDMP attestations, and audit trails must be handled precisely
  • Data normalization: Medication data spans RxNorm/NDC, free‑text SIGs, payer formulary codes, and pharmacy identifiers
  • Multi‑source history: Med lists are aggregated from pharmacies, payers, and EHR inputs with varying provenance and confidence
  • Portal‑first features: ePA forms, benefit checks, and reconciliation are optimized for clinician front‑ends
  • Authentication complexity: SSO into EHRs (e.g., Epic, Cerner, athenahealth) plus session lifecycles and role‑based access
  • Export limitations: Many organizations report difficulty with bulk data export, consistent identifiers, and automating PDMP reporting outside the UI

How Supergood Creates DrFirst APIs

Supergood reverse‑engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your DrFirst tenant.

  • Handles username/password, SSO/OAuth, and MFA/EPCS challenges (SMS, email, TOTP, hard token) securely
  • Maintains session continuity with automated refresh and change detection
  • Normalizes medication objects (RxNorm/NDC), SIG parsing, pharmacy routing, and payer benefit responses
  • Aligns with customer entitlements and role‑based permissions to ensure compliant access and auditability
  • Respects HIPAA requirements with encrypted transport, scoped tokens, and detailed audit logs

Use Cases

Medication History & Reconciliation Sync

  • Mirror patient medication lists (active, historical) into your EHR, care management, or analytics systems
  • Track provenance (pharmacy vs. payer vs. EHR) with fill dates and prescriber details
  • Normalize SIGs and map RxNorm/NDC to your formulary or clinical decision support

E‑Prescribing Automation

  • Create and transmit new prescriptions from telehealth visits
  • Manage renewals, cancellations, and routing to preferred pharmacies
  • Handle EPCS flows, PDMP attestation, and prescriber signing requirements with audit safeguards

Price Transparency & Prior Authorization

  • Run real‑time benefit checks to surface coverage, copays, and therapeutic alternatives
  • Initiate ePA requests with structured clinical attachments
  • Monitor payer responses and update patient plans or Rx decisions accordingly

Clinical Communications

  • Ingest Backline message threads for care coordination
  • Send secure updates tied to prescriptions or PA status to providers and staff
  • Trigger patient‑facing reminders for fills, refills, and follow‑ups

Available Endpoints

Authentication

POST /sessions: Establish a session using credentials. Supergood manages MFA/EPCS challenges (SMS, email, TOTP, hardware token) and SSO/OAuth when enabled. Returns a short‑lived auth token maintained by the platform.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/sessions \
  --header 'Authorization: Basic <Base64 encoded token>' \
  --header 'Content-Type: application/json' \
  --data '{
    "username": "[email protected]",
    "password": "<password>",
    "mfa": { "type": "totp", "code": "123456" }
  }'

Example response

{
  "authToken": "eyJhbGciOi...",
  "expiresIn": 3600,
  "user": {
    "id": "prov_df_7c21a0",
    "name": "Dr. Alex Nguyen",
    "entitlements": ["medications", "prescriptions", "benefits", "prior_authorizations"]
  }
}

Patients

GET /patients: List patients with filters and summary details.

Query parameters

  • mrn: string
  • dateOfBirth: YYYY‑MM‑DD
  • updatedFrom, updatedTo: ISO 8601 timestamps
  • page, pageSize: integers for pagination

Example response

{
  "items": [
    {
      "patientId": "pt_df_2189c0",
      "mrn": "MRN-004512",
      "firstName": "Jordan",
      "lastName": "Taylor",
      "dateOfBirth": "1985-07-12",
      "sex": "female",
      "phone": "+1-402-555-1942",
      "address": {
        "line1": "125 Lakeview Ct",
        "city": "Omaha",
        "region": "NE",
        "postalCode": "68130",
        "country": "US"
      },
      "identifiers": {
        "payerMemberId": "AET-77812019",
        "erxPatientKey": "erx_pt_93410"
      },
      "updatedAt": "2026-01-20T13:45:00Z"
    }
  ],
  "page": 1,
  "pageSize": 50,
  "total": 1
}

Medication History

GET /patients/{patientId}/medication-history: Retrieve aggregated medication history (MedHx) with provenance, fill data, and normalized codes.

curl --request GET \
  --url https://api.supergood.ai/integrations/<integration_id>/patients/pt_df_2189c0/medication-history?page=1&pageSize=100 \
  --header 'Authorization: Bearer <authToken>'

Example response

{
  "items": [
    {
      "medId": "med_df_9a103f",
      "medicationName": "Atorvastatin 20 mg tablet",
      "rxNormCode": "617318",
      "ndc": "00071-0155-23",
      "sig": {
        "text": "Take 1 tablet by mouth once daily",
        "dose": 20,
        "doseUnit": "mg",
        "route": "oral",
        "frequency": "daily"
      },
      "status": "active",
      "startDate": "2025-10-01",
      "endDate": null,
      "lastFillDate": "2026-01-12",
      "source": {
        "type": "pharmacy",
        "name": "CVS Pharmacy #1042",
        "ncpdpId": "1837462"
      },
      "prescriber": {
        "providerId": "prov_df_7c21a0",
        "npi": "1234567890",
        "name": "Dr. Alex Nguyen"
      },
      "externalIds": {
        "payerClaimId": "CLM-992817",
        "pharmacyRxNumber": "RX-5412209"
      },
      "disclaimers": ["Medication history may not include cash transactions or out-of-network fills."],
      "updatedAt": "2026-01-20T13:45:00Z"
    }
  ],
  "page": 1,
  "pageSize": 100,
  "total": 1
}

Prescriptions

POST /prescriptions: Create and transmit a new e‑prescription (supports EPCS, PDMP attestation, RT benefit enrichment).

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/prescriptions \
  --header 'Authorization: Bearer <authToken>' \
  --header 'Content-Type: application/json' \
  --data '{
    "patientId": "pt_df_2189c0",
    "prescriberId": "prov_df_7c21a0",
    "medication": {
      "rxNormCode": "856845",
      "ndc": "00406-0123-01",
      "name": "Amoxicillin 500 mg capsule"
    },
    "sig": {
      "text": "Take 1 capsule by mouth twice daily for 7 days",
      "dose": 500,
      "doseUnit": "mg",
      "route": "oral",
      "frequency": "BID",
      "durationDays": 7
    },
    "quantity": 14,
    "daysSupply": 7,
    "refills": 0,
    "dispenseAsWritten": false,
    "pharmacy": { "ncpdpId": "1837462" },
    "diagnosisCodes": ["J01.90"],
    "isControlledSubstance": false,
    "pdmpAttestation": { "required": false },
    "epcsChallenge": null,
    "requestTransmission": true,
    "notes": "Patient prefers evening dosing",
    "benefitCheck": { "enabled": true, "includeAlternatives": true }
  }'

Example response

{
  "prescriptionId": "rx_df_51af80",
  "status": "transmitted",
  "transmissionTime": "2026-01-21T11:20:44Z",
  "pharmacyRoutingId": "rte_9fa1c3",
  "warnings": [],
  "benefit": {
    "copay": 10.00,
    "plan": "Aetna PPO",
    "priorAuthRequired": false,
    "alternatives": [
      { "rxNormCode": "723631", "name": "Amoxicillin 250 mg capsule", "copay": 5.00, "coverage": "preferred" }
    ]
  }
}

Prior Authorization

POST /patients/{patientId}/prior-authorizations: Initiate an ePA for a medication, attach clinical documentation, and track payer response.

curl --request POST \
  --url https://api.supergood.ai/integrations/<integration_id>/patients/pt_df_2189c0/prior-authorizations \
  --header 'Authorization: Bearer <authToken>' \
  --header 'Content-Type: application/json' \
  --data '{
    "prescriberId": "prov_df_7c21a0",
    "medication": { "rxNormCode": "310798", "name": "Adalimumab 40 mg/0.4 mL" },
    "plan": { "payer": "Aetna", "memberId": "AET-77812019" },
    "diagnosisCodes": ["K50.90"],
    "clinicalQuestions": [
      { "questionId": "q1", "answer": "Moderate to severe disease with inadequate response to conventional therapy" }
    ],
    "attachments": [
      { "fileName": "colonoscopy_report.pdf", "uploadToken": "upl_7fa223" }
    ],
    "notes": "Initiating therapy per GI specialist recommendations"
  }'

Example response

{
  "priorAuthorizationId": "pa_df_90e412",
  "status": "submitted",
  "referenceNumber": "PA-2026-00145",
  "payer": "Aetna",
  "estimatedResponseHours": 24,
  "requiredDocuments": [],
  "createdAt": "2026-01-21T10:03:11Z"
}

Get full API Specs →


Technical Specifications

  • Authentication: Username/password with MFA and EPCS challenge handling (SMS, email, TOTP, hardware token); supports SSO/OAuth where enabled
  • Response format: JSON with consistent resource schemas and pagination across modules
  • Rate limits: Tuned for enterprise throughput while honoring customer entitlements and usage controls
  • Session management: Automatic reauth and cookie/session rotation with health checks
  • Data freshness: Near real‑time retrieval of medication history, eRx statuses, benefit results, and PA objects
  • Security: Encrypted transport, scoped tokens, audit logging; respects DrFirst role‑based permissions and HIPAA requirements
  • Webhooks: Optional asynchronous delivery for long‑running workflows (e.g., PA decisions, prescription fill updates)

Performance Characteristics

  • Latency: Sub‑second responses for list/detail queries under normal load
  • Throughput: Designed for high‑volume medication data sync and prescription processing
  • Reliability: Retry logic, backoff, and idempotency keys minimize duplicate actions
  • Adaptation: Continuous monitoring for UI/API changes with rapid adapter updates

Getting Started

  1. Schedule Integration Assessment

Book a 30‑minute session to confirm your modules, licensing, and authentication model.

  1. Supergood Builds and Validates Your API

We deliver a hardened DrFirst adapter tailored to your workflows and entitlements.

  1. Deploy with Monitoring

Go live with continuous monitoring and automatic adjustments as DrFirst evolves.

Schedule Integration Call →


Frequently Asked Questions

Q: Which DrFirst modules can this integration cover?

Supergood supports workflows across commonly used modules such as Medication History/Reconciliation (MedHx), E‑Prescribing (Rcopia/EPCS), Real‑Time Prescription Benefit, Electronic Prior Authorization, PDMP checks, and Clinical Communications (Backline), subject to your licensing and entitlements. We scope coverage during integration assessment.

Q: How are MFA, EPCS, and SSO handled for automation?

We support username/password + MFA and can operate behind SSO/OAuth when enabled. EPCS two‑factor challenges are handled securely with automated session refresh and compliant audit logging.

Q: Can you surface price transparency and handle prior authorizations?

Yes. We normalize benefit responses (coverage, copays, alternatives) and can initiate ePA requests, upload attachments, and deliver updates via webhooks or polling while complying with permission constraints.

Q: Are PDMP checks and attestations supported?

Yes. We can capture PDMP attestation events, align with state‑specific flows, and provide structured results to drive compliance and decision support.

Q: Can this integrate with our EHR or telehealth platform?

We commonly integrate with leading EHR and virtual care systems (e.g., Epic, Cerner, athenahealth) by normalizing identifiers and session behavior. Coverage depends on your contracts, environment, and entitlements.



Ready to automate your DrFirst workflows?

Supergood can have your DrFirst integration live in days with no ongoing engineering maintenance.

Get Started →

Read more