Health · head-to-head
CMS.gov vs Open Disease
CMS Provider Data Catalog exposes hundreds of Medicare quality, cost, and comparison datasets (hospitals, nursing homes, dialysis facilities, and more) through a DKAN-based metastore and datastore API that returns JSON by default and CSV on request, with no signup required. A live GET against the dataset-listing and datastore query endpoints succeeds with no credentials. A live Origin-header probe against the datastore query endpoint returns no Access-Control-Allow-Origin header on either a GET or an OPTIONS preflight, and since access needed no key at all, the stored 'API Key' auth was corrected to 'None'.
disease.sh aggregates COVID-19, influenza, and general public-health case/vaccination data from Johns Hopkins CSSE, WHO, and other public feeds into a single keyless JSON API, with endpoints scoped by country, US state, or continent plus historical time-series. A live GET against disease.sh/v3/covid-19/all and a live Origin-header probe both return Access-Control-Allow-Origin: *, reconfirming the already-stored 'yes'.
| CMS.gov | Open Disease | |
|---|---|---|
| Authentication | None | None |
| Pricing | free | free |
| Formats | JSON, CSV | JSON |
| CORS | no | yes |
| HTTPS | Yes | Yes |
Open Disease supports CORS, while CMS.gov doesn't — pick Open Disease for direct browser calls.