ProductCustomersPlatformJournalGlossaryMigrateFor CliniciansSecurity>_  Agent viewGet Started
API / Agents

Can AI prescribe medication? How AI prescriptions actually work

“Prescribe using AI” is one of the most searched phrases in digital health and one of the most misunderstood. The honest answer has two halves: no, AI cannot prescribe — and yes, AI can now do nearly everything else in the prescribing workflow. Here is where the line is and how to build on the right side of it.

Clinician holding a chart while talking with a patientPhotograph via Unsplash
TL;DR

No US state grants prescriptive authority to software; a prescription must carry a licensed clinician’s NPI and signature, and controlled substances add DEA two-factor authentication the prescriber completes personally. What “AI prescriptions” means in practice is AI that prepares, screens, drafts, and routes the request — and carries out the signed decision — while a licensed clinician decides. FDA exempts clinical decision support a clinician can independently review; state AI laws add disclosure and human-review duties. Utah is running the first state-sanctioned pilot in which an AI renews existing prescriptions for roughly 200 maintenance medications under a regulatory sandbox — renewals only, no controlled substances or injectables, and a physician reviewing each one in the current phase — and a 2025 federal bill to let FDA-authorized AI prescribe remains in committee. Build AI into intake, screening, drafting, refills, and follow-through, keep the decision human, and log the handoff.

The short answer

Prescriptive authority is a creature of state law. Each state’s practice acts say which professions may prescribe — physicians, nurse practitioners, physician assistants, and depending on the state some pharmacists, optometrists, and others — and within what scope. No state includes software on that list. Every electronic prescription identifies a licensed prescriber by NPI, and for controlled substances the DEA’s EPCS rules require identity-proofed credentials and two-factor authentication that the prescriber completes personally at signing. The one place the edge is being tested is Utah, where a state-supervised pilot lets an AI renew existing prescriptions — more on that below.

So an AI cannot prescribe. What it can do is almost everything around the decision — and that turns out to be most of the work.

What “prescribe using AI” means in real products

Three patterns sit behind the phrase, and only two of them are legitimate.

  1. Clinician-in-the-loop prescribing. AI collects and structures the intake, screens it against protocol criteria, drafts a proposed plan, and queues it. A licensed clinician in the patient’s state reviews, decides, and e-signs — often asynchronously. This is how most modern telehealth programs work, and it is what agentic prescribing names precisely.
  2. AI-assisted decision support inside the clinician’s tools. The model surfaces interactions, missing data, and protocol deviations while the clinician works. The clinician remains the decision-maker and can see the basis for every suggestion.
  3. Software that issues prescriptions without a clinician decision. Whether by rubber-stamp review or none at all, this is outside every state’s rules and the pattern boards act on.
AI preparesLicensed clinician decides· Structured intake· Protocol & interaction screen· Drafted plan· Refill eligibility· Pharmacy routing & status· Diagnose· Prescribe & sign (NPI)· Change a dose· Decline or refer· EPCS two-factor, personallythe licensed act
AI prepares, screens, drafts, and follows through; the prescribing act itself — deciding and signing — belongs to a licensed clinician in the patient’s state, and the law draws that line, not the product.

The workflow, step by step

  1. Intent. The patient asks for care — in your app, or through an assistant acting for them.
  2. Patient and consent. The agent creates or matches the patient; informed consent and identity proofing are captured before anything clinical.
  3. Intake. A branched history: medications, allergies, contraindications, the vertical’s specific screen (a cardiac screen for ED, weight and comorbidities for GLP-1s).
  4. Screening. Protocol eligibility, interaction checks, and state modality rules applied server-side. Ineligible or unlawful-as-requested cases never reach the queue as prescriptions; they route to a live visit or a decline.
  5. Draft. The agent proposes a plan from the approved catalog — the starting dose, the follow-up interval — as a draft, not an order.
  6. Decision. A licensed clinician in the patient’s state reviews the case and the draft, then approves, changes, or declines. This is the prescribing act.
  7. Signature and transmission. The clinician e-signs; the prescription goes to a licensed pharmacy by e-prescribing.
  8. Fulfillment and status. The pharmacy fills and ships; decision, shipment, and delivery events return to the agent over webhooks so it can tell the patient what happened.

The rules that shape it

RuleWhat it saysWhat it means for AI
State practice actsWho may prescribe, and which telehealth modalities are lawful for which drugsAI proposes; a clinician licensed in the patient’s state decides. Infrastructure enforces modality.
Ryan Haight Act & DEA telemedicine rulesConditions for prescribing controlled substances via telehealthControlled substances run on a stricter protocol; see DEA telemedicine 2026.
EPCSIdentity-proofed, two-factor signing for controlled e-prescriptionsThe prescriber signs personally. No delegation to software.
FDA device rules (Cures Act CDS exemption)Decision support a clinician can independently review is not a device; software that makes the decision isShow the clinician the basis for every AI suggestion. Keep the decision human.
State AI-in-healthcare lawsDisclosure when generative AI communicates clinical information to patients; licensed review of AI-driven decisions (California leads)Tell patients when they are talking to AI; never let a model’s output become an order without a human action.
State AI sandboxes (Utah)Temporary, supervised regulatory relief for a named company and use case — currently AI renewals of existing prescriptions with physician reviewA pilot, not a practice-act change. Watch it; do not build a multi-state program on it.
HIPAAProtected health information only under BAAs, with access controls and loggingModel provider, infrastructure, and brand all inside the BAA chain.

What about Utah’s AI prescription pilot?

Utah is the first state to let an AI participate in prescription decisions, and it is worth being precise about what it did. In 2024 the state created an Office of Artificial Intelligence Policy with the power to sign “regulatory mitigation agreements” — a sandbox in which a named company gets temporary relief from specific rules while regulators watch. Under one such agreement, announced in January 2026 and running on a one-year term with an option to renew, the state’s licensing division agreed not to enforce unlicensed-practice rules against Doctronic so its AI can renew existing prescriptions for patients with chronic conditions such as hypertension, diabetes, and thyroid disease.

  • Renewals only. The AI may renew a prescription a licensed physician already wrote. New prescriptions and any change in dose or frequency must be ordered by a physician.
  • A bounded formulary. Roughly 200 maintenance medications. Controlled substances, ADHD medications, and injectables are excluded — so GLP-1 injectables, for instance, are out of scope.
  • Physician review, for now. In the current phase a licensed physician must review each AI-recommended renewal before it goes to the pharmacy. A second phase, per medication group and subject to state approval, would let the AI send renewals directly to the pharmacist, who can escalate to a Utah-licensed physician.
  • Limits and reporting. Patients get a limited number of AI renewals before they must see a Utah-licensed clinician; the company files monthly reports; the state publishes outcomes.

The early data, released in May 2026, is instructive for anyone building agentic workflows: the AI recommended renewal in about 72% of cases and escalated the rest to a physician for reasons like overdue labs, and where it recommended renewal the reviewing physician agreed about 91% of the time. That is a well-built collect-and-route system with a human decision at the end — the design this article describes — operating under an explicit regulatory exemption. The state’s own framing was “doctor, not device.” The medical licensing board objected anyway, and legal commentators have noted the agreement leaves open whether the AI is acting as a practitioner or as the physician’s delegate, since renewals go out under the named prescriber’s license.

What it means for a telehealth company: the direction is real, the mechanism is narrow. It is a pilot for one company, one use case, one state, on a one-year clock. Other states — Arizona, Texas, Wyoming among them — are building similar sandboxes, and the company involved has said it is in talks with several. Build like this is where the rules are heading, because it is; market and operate on the rules as they stand, which still put a licensed clinician on every prescription outside that sandbox.

And the federal bill?

A federal bill introduced in January 2025 would amend the Food, Drug, and Cosmetic Act so that AI or machine-learning technology could qualify as a practitioner licensed to prescribe, provided the FDA had authorized it and the state in which it operated permitted it. It names the two gates that would have to open: federal authorization of the specific technology, and a state granting prescriptive authority to software. At the time of writing the bill remains in committee with no vote taken, and no state has amended its practice act to grant that authority — Utah’s pilot works by suspending enforcement, not by changing who may prescribe. It is reasonable to expect the conversation to continue. It is not reasonable to build a program that depends on it.

Where AI adds the most value

  • Complete intakes. A clinician reviewing a structured, branched history decides in a fraction of the time it takes to reconstruct one from free text.
  • Pre-screening. Protocol criteria, contraindications, and interaction checks before review, so the queue holds decidable cases.
  • Drafted plans. “Continue, step dose per protocol” as a proposal the clinician accepts or edits. See titration.
  • Refills and renewals. Eligibility, follow-up collection, and the request itself — the highest-volume job in any program. Guide: Refill medication with AI.
  • Follow-through. Pharmacy routing, tracking, and patient updates once the decision is signed.

Building it correctly

  • Treat every AI output as a draft. The clinician’s action — approve, change, decline — is the only thing that creates an order.
  • Enforce licensure, state modality rules, and the approved catalog in infrastructure, not in the prompt.
  • Disclose AI involvement to patients where state law requires it, and design the disclosure to be true.
  • Log what the model saw, what it proposed, who decided, and when. This is what a board, an auditor, or an acquirer asks for.
  • Run controlled substances on a separate, stricter protocol with PDMP checks and EPCS signing.
  • Keep clinical questions clinical: “can I take this with my blood-pressure medication” goes to a clinician, even when the model could plausibly answer. See Where AI stops.
Lithos is built for exactly this split. Your product or AI agent submits intake, treatment requests, and refills through one API; a licensed clinician in the patient’s state reviews and signs every prescription; the pharmacy fills and ships; every step is timestamped and attributable. Live in all 50 states. See Lithos for agents or the glossary entry on AI prescribing.

Frequently asked questions

Can AI prescribe medication?

No. In every US state, prescribing is an act reserved to licensed practitioners — physicians, nurse practitioners, physician assistants, and a few others within scope. Software has no prescriptive authority, and every e-prescription identifies a licensed prescriber by NPI.

Can ChatGPT or an AI assistant prescribe medication?

No. An assistant can help a user request care and can call infrastructure that routes the request to a licensed clinician, who decides and signs. The assistant itself cannot prescribe.

Is it legal to use AI to prescribe medication?

Using AI to collect intake, screen against protocol, draft a proposed plan, and assemble the request for a licensed clinician to review and sign is legal and increasingly standard. Letting AI issue a prescription without a clinician’s decision is not.

What is an AI prescription?

In practice, a prescription whose request was prepared by AI — intake structured, eligibility screened, plan drafted — and then reviewed, decided, and signed by a licensed clinician before transmission to a pharmacy.

Is Utah letting AI prescribe medication?

Utah is running a supervised pilot, not a change in law. Under its AI regulatory sandbox the state agreed not to enforce unlicensed-practice rules against Doctronic for a one-year term so its AI can renew existing prescriptions for roughly 200 maintenance medications. New prescriptions, dose changes, controlled substances, and injectables are excluded, and in the current phase a licensed physician reviews each renewal before it reaches the pharmacy.

Will AI be allowed to prescribe in the future?

The edges are being tested. Utah’s sandbox pilot allows AI-driven renewals with physician review, other states are building similar sandboxes, and a 2025 federal bill would let FDA-authorized AI prescribe where a state permits it — but it remains in committee, and no state has changed its practice act. Build for today’s rules and treat any change as upside.

How does an AI-prepared prescription reach the pharmacy?

The same way any prescription does: the clinician e-signs it and it is transmitted electronically to a licensed pharmacy, which fills and ships. The agent that prepared the request receives status back over webhooks.

Get started

From first call to first patient, in weeks.

A 15-minute intro call, sandbox credentials the same day, go-live in 3–4 weeks — new launches and existing patient bases alike.