API Reference

curl -X POST https://api.openinsure.dev/auth/better/exchange \
  -H "Authorization: Bearer <session-token>"

curl https://api.openinsure.dev/v1/policies?orgId=<org-uuid> \
  -H "Authorization: Bearer $API_SECRET"

curl -X POST https://api.openinsure.dev/auth/demo \
  -H "Content-Type: application/json" \
  -d '{"secret":"'"$API_SECRET"'"}'

POST /v1/api-keys
Authorization: Bearer <admin_jwt>
Content-Type: application/json

{
  "name": "Applied Epic Integration",
  "scopes": ["submissions:write", "policies:read", "coi:generate"],
  "expiresAt": null   // null = never expires (rotate manually)
}

# Response:
{
  "key": "oik_live_1a2b3c4d5e6f7g8h...",   // shown ONCE — store securely
  "id": "key_01J8...",
  "name": "Applied Epic Integration",
  "scopes": ["submissions:write", "policies:read", "coi:generate"]
}

curl https://api.openinsure.dev/v1/submissions \
  -H "X-API-Key: oik_live_1a2b3c4d5e6f7g8h..."

X-RateLimit-Limit: 1000
X-RateLimit-Remaining: 847
X-RateLimit-Reset: 1719878460

{
  "error": "validation_failed",
  "message": "Missing required field: effective_date",
  "details": {
    "field": "effective_date",
    "rule": "required"
  },
  "requestId": "req_01J8K3M4N5P6Q7R8"
}

{
  "id": "evt_01J8K3M4N5P6Q7R8S9T0",
  "type": "policy.bound",
  "orgId": "org_01J8...",
  "timestamp": "2026-03-08T14:32:00Z",
  "data": {
    "policyId": "pol_01J8...",
    "policyNumber": "GL-2026-000142",
    "grossPremium": 14250,
    "effectiveDate": "2026-04-01"
  }
}

import { createHmac, timingSafeEqual } from 'crypto';

function verifyWebhook(rawBody: string, signature: string, secret: string): boolean {
  const expected = createHmac('sha256', secret).update(rawBody).digest('hex');
  return timingSafeEqual(Buffer.from(signature), Buffer.from(`sha256=${expected}`));
}

// In your webhook handler:
const sig = request.headers.get('X-OpenInsure-Signature');
if (!verifyWebhook(rawBody, sig, process.env.WEBHOOK_SECRET)) {
  return new Response('Invalid signature', { status: 401 });
}

# Full submission → quote → bind in bash

API="https://api.openinsure.dev/v1"
TOKEN="your_api_key_here"

# Create submission
SUB_ID=$(curl -s -X POST $API/submissions \
  -H "X-API-Key: $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "insuredName": "Pacific Coast Builders",
    "naicsCode": "236220",
    "annualRevenue": 8000000,
    "requestedLimit": 1000000,
    "effectiveDate": "2026-05-01",
    "state": "OR",
    "lineOfBusiness": "GL"
  }' | jq -r '.id')

# Get quote
QUOTE=$(curl -s -X POST $API/submissions/$SUB_ID/quote \
  -H "X-API-Key: $TOKEN")
echo "Premium: $(echo $QUOTE | jq '.grossPremium')"

# Bind
POLICY=$(curl -s -X POST $API/submissions/$SUB_ID/bind \
  -H "X-API-Key: $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"installmentPlan":"MONTHLY_10"}')
echo "Policy: $(echo $POLICY | jq -r '.policyNumber')"

import { OpenInsureClient } from '@openinsure/api-client';

const client = new OpenInsureClient({
  apiKey: process.env.OI_API_KEY,
  baseUrl: 'https://api.openinsure.dev/v1',
});

async function bindPolicy() {
  // Create submission
  const submission = await client.submissions.create({
    insuredName: 'Pacific Coast Builders',
    naicsCode: '236220',
    annualRevenue: 8_000_000,
    requestedLimit: 1_000_000,
    effectiveDate: '2025-08-01',
    state: 'OR',
    lineOfBusiness: 'GL',
  });

  // Quote
  const quote = await client.submissions.quote(submission.id);
  console.log(`Gross premium: $${quote.grossPremium.toFixed(2)}`);

  // Check DA flags before binding
  if (!quote.bindable) {
    console.error('DA flags:', quote.daFlags);
    return;
  }

  // Bind
  const policy = await client.submissions.bind(submission.id, {
    installmentPlan: 'MONTHLY_10',
  });

  console.log(`Bound: ${policy.policyNumber}`);
  return policy;
}

bindPolicy().catch(console.error);

import os, httpx

BASE = "https://api.openinsure.dev/v1"
HEADERS = {"X-API-Key": os.environ["OI_API_KEY"]}

with httpx.Client(base_url=BASE, headers=HEADERS) as client:
    # Create submission
    sub = client.post("/submissions", json={
        "insuredName": "Pacific Coast Builders",
        "naicsCode": "236220",
        "annualRevenue": 8_000_000,
        "requestedLimit": 1_000_000,
        "effectiveDate": "2026-05-01",
        "state": "OR",
        "lineOfBusiness": "GL",
    }).raise_for_status().json()

    # Quote
    quote = client.post(f"/submissions/{sub['id']}/quote").raise_for_status().json()
    print(f"Premium: ${quote['grossPremium']:,.2f}")

    # Bind
    policy = client.post(f"/submissions/{sub['id']}/bind", json={
        "installmentPlan": "MONTHLY_10"
    }).raise_for_status().json()
    print(f"Policy: {policy['policyNumber']}")

https://api.openinsure.dev/openapi.json