MRF downloads without an account or password

§180.50(d)(3)(ii)

What it checks

Anyone can download the price file without an account or password.

Checked by Care Carta. Care Carta's own check, for a requirement CMS's validator does not test.

How hospitals did

Passed 89%Couldn't determine 11%

Results as of Oct 5, 2026. The most common reasons are on the Publication and accessibility page.

How Care Carta decides

Passes when an automated client downloaded the MRF itself rather than a web page; a login or account page would have been served in its place. Indeterminate, with the download's reason, when the download failed. There is no separate detection of such pages beyond the download's own classification.

Version

Ruleset

hpt-v3, version 3

Last changed in

Ruleset 2

CMS data dictionary

3.0.0

Check ID

hpt.mrf.access.no_login@1

Replaced

hpt.mrf.publication.no_account

Today's results all use this ruleset. A check never changes without a new ruleset. Full catalog (JSON)