For primary source verification, submit a validation request through the DEA Diversion Control Division authorization process at https://www.deadiversion.usdoj.gov; organizations must apply for authorized access before querying the primary source database.
Once authorized, use the DEA Registration Validation Tool to query by DEA number; the check returns registration status, schedules authorized, and expiration date.
For credentialing intake, collect the DEA registration number from the provider and validate the checksum algorithmically: the DEA number has a defined mathematical check digit formula that can catch typos before a database query.
Verify that the registrant name and address on file with the DEA match the provider's current practice location; discrepancies require the provider to update their DEA registration before privileges are granted.
Store DEA number, schedules, expiration date, and last verification date in the credentialing system; set alerts for expiration within 90 days.
Re-verify DEA status at each recredentialing cycle and monthly per the 2025 NCQA requirement for exclusion/sanction monitoring — DEA revocations are reportable events.
Known gotchas
The DEA does not provide a public, no-auth API for bulk verification; unauthorized access attempts are a legal violation — organizations must obtain formal authorization from the DEA before querying the primary source.
Not all providers require a DEA registration — providers who do not prescribe controlled substances do not have (and should not be expected to have) a DEA number; do not flag their absence as a deficiency for non-prescribers.
DEA registrations are practice-location specific; a provider with multiple practice locations may hold multiple DEA numbers — verify all active registrations, not just the first one on file.
Give your agent this knowledge — and 200+ more routes
One MCP install gives any agent live access to the full route map, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp