Clean REST endpoints when your architecture demands headless control.
A structured REST API for rating calculations, digital quoting, policy binding, and lifecycle endorsements. Every state transition dispatches cryptographically verified webhook events.
Headless insurance applications require consistent, low-latency rating endpoints that evaluate product rules without undocumented side effects. The InsureOS REST API allows engineering teams to submit asset dimensions, operator demographics, and desired coverage limits, receiving calculated premiums with complete formula traces.
Whether connecting custom broker portals, feeding back-office integrations like JAVLN, or orchestrating event-driven automation across partner ledgers, our endpoints operate on standard JSON contracts. For architectural guidance on protecting your system of record, read our modernise without replacing core guide.
Separate API keys for staging and production environments, with granular permission boundaries for quote generation, underwriting review, and binding.
Every webhook delivery includes an HMAC-SHA256 signature calculated with your organisation secret, allowing your systems to verify authenticity.
Receive standard RFC-7807 problem details with field-level validation errors, calculation warnings, and actionable error messages.
Request rates, create quotes, issue policies, fetch history. JSON in and out, with clear errors at every step.
{
"rating_factors": {
"cover_start_date": "2025-01-20",
"sum_insured": 10000,
"cover_type": "comprehensive",
"driver_age": 18
}
}{
"calculation_id": "c-x7dhe",
"premium": "2970.0000",
...
}Every endpoint publishes standard OpenAPI 3 definitions. Inspect resource schemas, test request payloads with sandbox tokens, and export machine-readable definitions directly into your SDK generation toolchains.
Every meaningful state change in the platform dispatches a real-time event. Subscribing systems receive asynchronous, HMAC-signed webhooks with monotonic event ordering and timestamp replay capabilities.
See automationThe API uses a RESTful JSON design with standard HTTP status codes and predictable resource routes. This pattern ensures straightforward integration with partner portals, external aggregators, and enterprise accounting systems.
Yes. The pre-built quoting widget operates as a client of the public REST API. Any product rating, validation rule, or payment step supported by the widget is completely accessible via direct API requests.
Every webhook request includes an HTTP header containing an HMAC-SHA256 signature calculated from the raw payload body using your unique organisation secret key. Your webhook receiver verifies this signature before processing.
Yes. Every emitted event receives a strictly monotonic sequence identifier and timestamp. The management console and replay endpoint allow developers to re-dispatch events from a specific point in time to recover missing records.
Tokens are issued per organisation and partitioned between staging and production environments. Specific access scopes restrict keys to quote rating, binding authorization, or reporting tasks, with automated rotation supported without service interruptions.
Validation and rating errors return structured JSON objects identifying the specific input field, rule violation code, and human-readable explanation, allowing client applications to highlight the exact form input requiring correction.
Online quoting
Embed a real quote-to-bind flow
Automatic rating
Product definitions, rules, tables, explainable factors
Third-party integrations
Plug in the tools you already run
Payment collection
Cards, bank transfers, finance
Renewals
Re-rate, payments, automatic renewals
Document generation
Branded policy docs, certificates, receipts
Automation
Webhooks, events, integrations