Sync a Patient

Beta

The ScriptSure integration is in beta. Features and APIs may change.

Bot: scriptsure-patient-sync-bot

Syncs a Medplum Patient to ScriptSure before an encounter. This bot is the API entry point for patient data sync–if you're embedding the prescribing UI in a React app, see Prescribing iFrame instead, as the hook there handles patient sync automatically.

This bot is idempotent and safe to call on every encounter. What it does on each call:

1. Creates the patient in ScriptSure (or updates if already synced)
2. Pushes unsynced AllergyIntolerance resources (for drug-allergy interaction checks)
3. Pushes active MedicationRequest resources (for drug-drug interaction checks)
4. Catches up on missed prescription webhook events
5. Downloads medication history from SureScripts (if the patient has active consent)
6. Syncs preferred pharmacies as Medplum Organization resources

Patient resource requirements

The following fields are read during sync. Name, DOB, and address are needed for accurate prescribing.

Field	FHIR source
First / last name	Patient.name[0].given[0], Patient.name[0].family
Date of birth	Patient.birthDate
Gender	Patient.gender (male → M, female → F, otherwise U)
Address	Patient.address[0] (line, city, state, postalCode)
Phone	Patient.telecom where system = 'phone' (use maps to home/work/cell)
Email	Patient.telecom where system = 'email' (optional)

Phone numbers are normalized to 10 digits (leading +1 stripped, non-digits removed).

Example bot execution

const result = await medplum.executeBot(
  { system: 'https://www.medplum.com/bots', value: 'scriptsure-patient-sync-bot' },
  { patientId: 'patient-xyz' }
);
// { scriptSurePatientId: 11111 }
// or { skipped: true, providerNotReady: true } if the prescriber hasn't completed enrollment

AllergyIntolerance sync

All AllergyIntolerance resources linked to the patient are pushed on first sync. Use RxNorm or NDC codes for accurate drug-allergy interaction (DAI) checking. The bot falls back to a freetext name match when no coded identifier is present.

{
  "resourceType": "AllergyIntolerance",
  "patient": { "reference": "Patient/patient-xyz" },
  "code": {
    "coding": [{ "system": "http://www.nlm.nih.gov/research/umls/rxnorm", "code": "723" }],
    "text": "Amoxicillin"
  }
}

Once synced, the ScriptSure allergy ID is stamped on AllergyIntolerance.identifier:

{
  "identifier": [{ "system": "https://scriptsure.com/allergy-id", "value": "12345" }]
}

MedicationRequest sync (DDI)

Active MedicationRequest resources with intent: 'order' or intent: 'plan' and status: 'active' are pushed as current medications for drug-drug interaction (DDI) checking. RxNorm or NDC codes are required for ScriptSure to resolve the drug.

{
  "resourceType": "MedicationRequest",
  "status": "active",
  "intent": "plan",
  "subject": { "reference": "Patient/patient-xyz" },
  "medicationCodeableConcept": {
    "coding": [{ "system": "http://www.nlm.nih.gov/research/umls/rxnorm", "code": "617320" }],
    "text": "Lisinopril 10 mg"
  }
}

Drug history consent

To enable SureScripts medication history download, create an active Consent resource linked to the patient:

{
  "resourceType": "Consent",
  "status": "active",
  "scope": {
    "coding": [{ "system": "http://terminology.hl7.org/CodeSystem/consentscope", "code": "patient-privacy" }]
  },
  "category": [
    {
      "coding": [{ "system": "http://loinc.org", "code": "59284-0", "display": "Privacy Consent Document" }]
    }
  ],
  "patient": { "reference": "Patient/patient-xyz" },
  "dateTime": "2026-01-01T00:00:00.000Z"
}

To revoke, set status to "inactive". The next sync will disable drug history download for that patient.