Acrisure

aid: acrisure
name: Acrisure
description: Acrisure is a global fintech and insurance brokerage headquartered in Grand Rapids, Michigan, founded in 2005
  and grown from $38M to roughly $5B in revenue with more than 19,000 colleagues across 500+ offices in over 20 countries.
  It sells commercial and personal insurance, employee benefits, payroll and HR, reinsurance, surety bonds, trade credit,
  mortgages, managed IT and cybersecurity through a partner-agency model rather than a developer platform. Acrisure publishes
  no developer portal, no API reference and no machine-readable specification of any kind, but it does operate an undocumented,
  OAuth-protected Model Context Protocol server at api.acrisure.com/v1/mcp behind Microsoft Entra ID — discoverable only from
  the `mcp_user` scope in its RFC 8414 authorization-server metadata.
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  - scopes
  - security
  generated: '2026-09-02'
  method: derived
image: https://edge.sitecorecloud.io/acrisurellc1-acrisure-prod-0dbe/media/Project/Acrisure/Acrisure-Site/Master-Site/Acrisure-Logo/acrisure-logo-large.png
url: https://raw.githubusercontent.com/api-evangelist/acrisure/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.23'
created: '2026-08-06'
modified: '2026-08-06'
tags:
- Insurance
- Insurance Brokerage
- Fintech
- Employee Benefits
- payroll-hr
- Reinsurance
- Risk Management
- Cybersecurity
- Mortgage
- Surety Bonds
- MCP
- Authentication
tags_raw:
- insurance
- insurance-brokerage
- fintech
- employee-benefits
- payroll-hr
- reinsurance
- risk-management
- cybersecurity
- mortgage
- surety-bonds
- mcp
- oauth2
apis:
- name: Acrisure MCP Server
  description: 'Hosted Model Context Protocol server operated by Acrisure at https://api.acrisure.com/v1/mcp. Production and
    live, protected by Microsoft Entra ID via an authorization-code + PKCE flow carrying the single application scope `api://bc250bc0-7689-4f21-b164-72a6b57c273b/mcp_user`.
    Undocumented: Acrisure publishes no tool list, no schemas and no reference for it, and RFC 9728 protected-resource metadata
    is absent, so the endpoint is only discoverable by probing the API host''s authorization-server metadata directly.'
  humanURL: https://www.acrisure.com/
  baseURL: https://api.acrisure.com/v1/mcp
  tags:
  - MCP
  - Authentication
  - Fintech
  - Insurance
  tags_raw:
  - mcp
  - oauth2
  - fintech
  - insurance
  properties:
  - type: MCPServer
    url: mcp/acrisure-mcp.yml
  - type: Authentication
    url: authentication/acrisure-authentication.yml
  - type: OAuthScopes
    url: scopes/acrisure-scopes.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: VulnerabilityDisclosure
  url: security/acrisure-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/acrisure-domain-security.yml
- type: Website
  url: https://www.acrisure.com/
- type: About
  url: https://www.acrisure.com/about-acrisure
- type: Blog
  url: https://www.acrisure.com/blog
- type: News
  url: https://www.acrisure.com/news
- type: Support
  url: https://www.acrisure.com/contact-us
- type: SignUp
  url: https://customer.acrisure.com/portal
- type: TermsOfService
  url: https://www.acrisure.com/terms-of-use
- type: PrivacyPolicy
  url: https://www.acrisure.com/privacy
- type: Careers
  url: https://www.acrisure.com/careers
- type: SecondaryMarket
  url: https://forgeglobal.com/acrisure_stock/
- type: WellKnown
  url: well-known/acrisure-well-known.yml
- type: SecurityTxt
  url: well-known/acrisure-security.txt
- type: Security
  url: https://www.acrisure.com/.well-known/security.txt
- type: Authentication
  url: authentication/acrisure-authentication.yml
- type: OAuthScopes
  url: scopes/acrisure-scopes.yml
- type: MCPServer
  url: mcp/acrisure-mcp.yml
- type: Conformance
  url: conformance/acrisure-conformance.yml
x-enrichment:
  date: '2026-08-06'
  status: minimal
  artifacts_added: 11
  pass: local-v1
x-coverage:
  state: unreadable
  reason: no-machine-readable-spec
  detail: Acrisure runs a live OAuth-protected MCP server at api.acrisure.com/v1/mcp — proven by an application-level 403
    on tools/list against a control sibling path that 404s — but publishes no OpenAPI, no tool list and no documentation for
    it anywhere, and its llms.txt and /ai/*.json endpoints still serve the unshipped Sitecore XM Cloud demo fixture for a
    fictional "Skate Park" skate-brand wholesaler instead of anything about Acrisure.
  evidence:
  - url: https://api.acrisure.com/v1/mcp
    status: 403
  - url: https://api.acrisure.com/v1/mcpZZZ
    status: 404
  - url: https://api.acrisure.com/.well-known/oauth-authorization-server
    status: 200
  - url: https://api.acrisure.com/.well-known/oauth-protected-resource
    status: 404
  - url: https://www.acrisure.com/llms.txt
    status: 200
  - url: https://www.acrisure.com/ai/summary.json
    status: 200
  - url: https://api.acrisure.com/v1/openapi.json
    status: 404
  checked: '2026-08-06'