Great-West Lifeco

Canada Life API Gateway (OAuth 2.0 / OpenID Connect)

The production API gateway of Canada Life, Great-West Lifeco's Canadian operating brand, at api.canadalife.com. It publishes no documentation, but it does serve a real OpenID Connect discovery document anonymously at /.well-known/openid-configuration (HTTP 200) - the only machine-readable contract published anywhere in the Great-West Lifeco group. The document declares issuer https://api.canadalife.com, a token endpoint at /oauth2/v1/generate, live JWKS at /oauth2/v1/jwks (HTTP 200), revocation at /oauth2/v1/revoke and userinfo at /oauth2/v1/userinfo, with RS256 ID-token signing and client_secret_basic / client_secret_post / client_secret_jwt client authentication. The authorization endpoint is deliberately published as /oauth2/v1/authorize-NOT-SUPPORTED, so the gateway is machine-to-machine only, and scopes_supported is an empty array. Anonymous calls to protected paths return an Apigee error envelope naming the Consumer-Key and pointing to https://apimarketplace.canadalife.com - a digitalML-hosted Canada Life API marketplace whose hostname CNAMEs to canadalife.digitalml.com and does not resolve on the public internet. Entitlement is therefore partner-only, with no public request path.

GitHub

Documentation

📖
Authentication
https://raw.githubusercontent.com/api-evangelist/great-west-lifeco/refs/heads/main/authentication/great-west-lifeco-authentication.yml

Other Resources

🔗
OpenIDConnect
https://raw.githubusercontent.com/api-evangelist/great-west-lifeco/refs/heads/main/well-known/great-west-lifeco-openid-configuration.json
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/great-west-lifeco/refs/heads/main/errors/great-west-lifeco-problem-types.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/canada-life-api-gateway"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

API entry from apis.yml

apis.yml Raw ↑ 
aid: great-west-lifeco:canada-life-api-gateway
name: Canada Life API Gateway (OAuth 2.0 / OpenID Connect)
description: The production API gateway of Canada Life, Great-West Lifeco's Canadian operating brand,
  at api.canadalife.com. It publishes no documentation, but it does serve a real OpenID Connect discovery
  document anonymously at /.well-known/openid-configuration (HTTP 200) - the only machine-readable contract
  published anywhere in the Great-West Lifeco group. The document declares issuer https://api.canadalife.com,
  a token endpoint at /oauth2/v1/generate, live JWKS at /oauth2/v1/jwks (HTTP 200), revocation at /oauth2/v1/revoke
  and userinfo at /oauth2/v1/userinfo, with RS256 ID-token signing and client_secret_basic / client_secret_post
  / client_secret_jwt client authentication. The authorization endpoint is deliberately published as /oauth2/v1/authorize-NOT-SUPPORTED,
  so the gateway is machine-to-machine only, and scopes_supported is an empty array. Anonymous calls to
  protected paths return an Apigee error envelope naming the Consumer-Key and pointing to https://apimarketplace.canadalife.com
  - a digitalML-hosted Canada Life API marketplace whose hostname CNAMEs to canadalife.digitalml.com and
  does not resolve on the public internet. Entitlement is therefore partner-only, with no public request
  path.
humanURL: https://www.canadalife.com/
baseURL: https://api.canadalife.com
tags:
- Authentication
- OpenID Connect
- Authorization
- Canada
- Partner Gated
tags_raw:
- OAuth
- OpenID Connect
- Authorization
- Canada
- Partner Gated
properties:
- type: OpenIDConnect
  url: well-known/great-west-lifeco-openid-configuration.json
- type: Authentication
  url: authentication/great-west-lifeco-authentication.yml
- type: ErrorCatalog
  url: errors/great-west-lifeco-problem-types.yml