← Back to all docs
drfirst

DrFirst API

DrFirst is healthcare IT software focused on medication management—pulling comprehensive med history from pharmacies and payers (MedHx), enabling electronic prescribing (Rcopia/EPCS), showing real‑time price and formulary options, integrating PDMP checks, and streamlining electronic p

By Alex KlarfeldJanuary 26, 2026
DrFirst API

What is DrFirst?

DrFirst is a healthcare technology company that centralizes medication management and clinical communication across providers, pharmacies, payers, and patients. Organizations use DrFirst to retrieve medication history (MedHx), perform medication reconciliation, e‑prescribe (including controlled substances via EPCS), check PDMP registries, run real‑time prescription benefit checks for price and coverage, streamline electronic prior authorization (ePA), and collaborate securely via clinical messaging (Backline).

Core product areas include:

  • Medication History & Reconciliation (MedHx)
  • E‑Prescribing (Rcopia), including EPCS for controlled substances
  • Price Transparency & Formulary (Real‑Time Prescription Benefit)
  • Electronic Prior Authorization (ePA)
  • PDMP Integration & Attestation
  • Clinical Communications (Backline)
  • Patient Engagement (reminders, coupons, adherence outreach)

Common data entities:

  • Organizations, Providers, Roles/Permissions (prescribers, staff, admins)
  • Patients (demographics, identifiers: MRN, payer member IDs)
  • Prescriptions (Rx orders, renewals, cancellations)
  • Medications (RxNorm/NDC mapping, SIG parsing, status)
  • Pharmacies (NCPDP/NPI identifiers)
  • Benefits & Formulary (plan, copays, coverage, alternatives)
  • Prior Authorizations (requests, questions, attachments, statuses)
  • PDMP Events/Reports (state registry results, attestation metadata)
  • Messages/Threads (secure clinical communication)

The DrFirst Integration Challenge

Healthcare teams rely on DrFirst daily, but transforming portal‑centric, compliance‑heavy workflows into API‑driven automation is non‑trivial:

  • Regulated flows: EPCS identity proofing, two‑factor challenges, PDMP attestations, and audit trails must be handled precisely
  • Data normalization: Medication data spans RxNorm/NDC, free‑text SIGs, payer formulary codes, and pharmacy identifiers
  • Multi‑source history: Med lists are aggregated from pharmacies, payers, and EHR inputs with varying provenance and confidence
  • Portal‑first features: ePA forms, benefit checks, and reconciliation are optimized for clinician front‑ends
  • Authentication complexity: SSO into EHRs (e.g., Epic, Cerner, athenahealth) plus session lifecycles and role‑based access
  • Export limitations: Many organizations report difficulty with bulk data export, consistent identifiers, and automating PDMP reporting outside the UI

How Supergood Creates DrFirst APIs

Supergood reverse‑engineers authenticated browser flows and network interactions to deliver a resilient API endpoint layer for your DrFirst tenant.

  • Handles username/password, SSO/OAuth, and MFA/EPCS challenges (SMS, email, TOTP, hard token) securely
  • Maintains session continuity with automated refresh and change detection
  • Normalizes medication objects (RxNorm/NDC), SIG parsing, pharmacy routing, and payer benefit responses
  • Aligns with customer entitlements and role‑based permissions to ensure compliant access and auditability
  • Respects HIPAA requirements with encrypted transport, scoped tokens, and detailed audit logs

Getting Started

  • Schedule Integration Assessment

Book a 30‑minute session to confirm your modules, licensing, and authentication model.

  • Supergood Builds and Validates Your API

We deliver a hardened DrFirst adapter tailored to your workflows and entitlements.

  • Deploy with Monitoring

Go live with continuous monitoring and automatic adjustments as DrFirst evolves.

API Endpoints

Authentication

POST/sessions

Establish a session using credentials. Supergood manages MFA/EPCS challenges (SMS, email, TOTP, hardware token) and SSO/OAuth when enabled. Returns a short‑lived auth token maintained by the platform.

Patients

GET/patients

List patients with filters and summary details.

Medication History

GET/patients/{patientId}/medication-history

Retrieve aggregated medication history (MedHx) with provenance, fill data, and normalized codes.

Prescriptions

POST/prescriptions

Create and transmit a new e‑prescription (supports EPCS, PDMP attestation, RT benefit enrichment).

Prior Authorization

POST/patients/{patientId}/prior-authorizations

Initiate an ePA for a medication, attach clinical documentation, and track payer response.

Use Cases

Medication History & Reconciliation Sync

- Mirror patient medication lists (active, historical) into your EHR, care management, or analytics systems - Track provenance (pharmacy vs. payer vs. EHR) with fill dates and prescriber details - Normalize SIGs and map RxNorm/NDC to your formulary or clinical decision support

E‑Prescribing Automation

- Create and transmit new prescriptions from telehealth visits - Manage renewals, cancellations, and routing to preferred pharmacies - Handle EPCS flows, PDMP attestation, and prescriber signing requirements with audit safeguards

Price Transparency & Prior Authorization

- Run real‑time benefit checks to surface coverage, copays, and therapeutic alternatives - Initiate ePA requests with structured clinical attachments - Monitor payer responses and update patient plans or Rx decisions accordingly

Clinical Communications

- Ingest Backline message threads for care coordination - Send secure updates tied to prescriptions or PA status to providers and staff - Trigger patient‑facing reminders for fills, refills, and follow‑ups

Technical Specifications

Authentication

Username/password with MFA and EPCS challenge handling (SMS, email, TOTP, hardware token); supports SSO/OAuth where enabled

Response format

JSON with consistent resource schemas and pagination across modules

Rate limits

Tuned for enterprise throughput while honoring customer entitlements and usage controls

Session management

Automatic reauth and cookie/session rotation with health checks

Data freshness

Near real‑time retrieval of medication history, eRx statuses, benefit results, and PA objects

Security

Encrypted transport, scoped tokens, audit logging; respects DrFirst role‑based permissions and HIPAA requirements

Webhooks

Optional asynchronous delivery for long‑running workflows (e.g., PA decisions, prescription fill updates)

Latency

Sub‑second responses for list/detail queries under normal load

Throughput

Designed for high‑volume medication data sync and prescription processing

Reliability

Retry logic, backoff, and idempotency keys minimize duplicate actions

Adaptation

Continuous monitoring for UI/API changes with rapid adapter updates

Frequently asked questions

Supergood supports workflows across commonly used modules such as Medication History/Reconciliation (MedHx), E‑Prescribing (Rcopia/EPCS), Real‑Time Prescription Benefit, Electronic Prior Authorization, PDMP checks, and Clinical Communications (Backline), subject to your licensing and entitlements. We scope coverage during integration assessment.

We support username/password + MFA and can operate behind SSO/OAuth when enabled. EPCS two‑factor challenges are handled securely with automated session refresh and compliant audit logging.

Yes. We normalize benefit responses (coverage, copays, alternatives) and can initiate ePA requests, upload attachments, and deliver updates via webhooks or polling while complying with permission constraints.

Yes. We can capture PDMP attestation events, align with state‑specific flows, and provide structured results to drive compliance and decision support.

We commonly integrate with leading EHR and virtual care systems (e.g., Epic, Cerner, athenahealth) by normalizing identifiers and session behavior. Coverage depends on your contracts, environment, and entitlements.

Ready to get a real API?