What we check / Discoverability compliance
blockerHPT-L3-003
MRF is publicly reachable without authentication or a JS wall
The file must be fetchable by an anonymous, unauthenticated HTTP request. A login-gated page, a JavaScript-rendered viewer with no direct file link, or a 403/404 response means automated tools (including this one, CMS, and any payer trying to reconcile rates) can't actually read the file.
Regulatory citation
45 CFR 180.50(b) — MRF must be accessible to the public without barriers
How to fix it
Serve the MRF from a plain, unauthenticated URL that returns the raw CSV or JSON file directly, with no login or JavaScript required.
Active since
2024-01-01