bswift

bswift is a benefits administration platform used by employers, brokers and channel partners to run health and welfare benefits — eligibility, annual enrollment, life events, COBRA, billing and ACA compliance — with an AI assistant (Emma) layered over the employee experience. Founded in Chicago in 2000, bswift was acquired by Aetna in 2014, moved into CVS Health, and has operated as an independent company backed by Francisco Partners since the 2022 carve-out. It runs a large connectivity estate: 450+ active carrier file feeds, 300+ pre-built and API integrations, and 150+ API and SSO connections into HCM and payroll platforms including ADP, UKG, Paylocity and Workday. Its production API gateway is live at api.bswift.com, but the REST contract — along with the OpenAPI specs, sandbox environments and webhook event topics bswift describes publicly — is issued only to alliance, integration and channel partners; there is no public developer portal or API reference.

bswift publishes 1 API on the APIs.io network. Tagged areas include Company, Benefits Administration, Human Resources, Insurance, and Health Insurance.

bswift’s developer surface includes engineering blog, changelog, and 11 more developer resources.

🌐 Visit website 📡 Source on GitHub
21.4/100 emerging ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
1 APIs
CompanyBenefits AdministrationHuman ResourcesInsuranceHealth InsuranceEmployee BenefitsHR TechnologyCOBRAEnrollmentPayrollHealth and WelfareCompliance

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 21.4/100 · emerging
Contract Quality 0.0 / 21
Developer Ergonomics 0.4 / 17
Commercial Clarity 4.5 / 17
Operational Transparency 2.9 / 11
Governance 1.3 / 10
Discoverability 6.5 / 9
Regulatory Posture 5.9 / 15
Agent readiness — 0/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Regulatory Posture applies to this provider. Its tags matched the Insurance regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.
The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/bswift: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

bswift Partner API

bswift's partner-facing REST API, served from an AWS API Gateway at api.bswift.com. bswift publicly describes API coverage for demographics and employment data, with lifecycle d...

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Bswift Domain Security

TLSv1.3 · DMARC

SECURITY

Bswift Vulnerability Disclosure

disclosure policy published

SECURITY

Bswift Trust Center

SOC 1 Type II, SOC 2 Type II, SOC 3, HIPAA, HITRUST

SECURITY

Resources

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

LLMsTxt
LLMsTxt

Design & Contract 1

Pagination, idempotency, versioning, errors, and events

Conformance
Conformance

Access & Security 5

Authentication, authorization, and security posture

Security
Security
 VulnerabilityDisclosure
VulnerabilityDisclosure
 TrustCenter
TrustCenter
 Compliance
Compliance
 DomainSecurity
DomainSecurity

Operate 2

Status, limits, changes, and where to get help

ChangeLog
ChangeLog
 ChangeLog
ChangeLog

Commercial 1

Pricing, plans, and the legal terms of use

PrivacyPolicy
PrivacyPolicy

Company 3

The organization behind the API

Website
Website
 Blog
Blog
 Partners
Partners

Source (apis.yml)

apis.yml Raw ↑ 
aid: bswift
name: bswift
description: 'bswift is a benefits administration platform used by employers, brokers and channel partners to run health and
  welfare benefits — eligibility, annual enrollment, life events, COBRA, billing and ACA compliance — with an AI assistant
  (Emma) layered over the employee experience. Founded in Chicago in 2000, bswift was acquired by Aetna in 2014, moved into
  CVS Health, and has operated as an independent company backed by Francisco Partners since the 2022 carve-out. It runs a
  large connectivity estate: 450+ active carrier file feeds, 300+ pre-built and API integrations, and 150+ API and SSO connections
  into HCM and payroll platforms including ADP, UKG, Paylocity and Workday. Its production API gateway is live at api.bswift.com,
  but the REST contract — along with the OpenAPI specs, sandbox environments and webhook event topics bswift describes publicly
  — is issued only to alliance, integration and channel partners; there is no public developer portal or API reference.'
url: https://raw.githubusercontent.com/api-evangelist/bswift/refs/heads/main/apis.yml
image: https://www.bswift.com/wp-content/uploads/2024/10/header-logo.svg
x-type: company
x-source: harvest:insurance-benefits-admin
specificationVersion: '0.20'
created: '2026-08-06'
modified: '2026-08-06'
tags:
- Company
- Benefits Administration
- Human Resources
- Insurance
- Health Insurance
- Employee Benefits
- HR Technology
- COBRA
- Enrollment
- Payroll
- Health and Welfare
- Compliance
apis:
- name: bswift Partner API
  description: bswift's partner-facing REST API, served from an AWS API Gateway at api.bswift.com. bswift publicly describes
    API coverage for demographics and employment data, with lifecycle domains (plan, rate, enrollment) plus standardized schemas,
    OpenAPI specs, sandbox environments and event-driven webhook subscriptions as active investments. Every route on the gateway
    answers MISSING_AUTHENTICATION_TOKEN without partner credentials; the contract is not published.
  humanURL: https://www.bswift.com/connectivity-hub/
  baseURL: https://api.bswift.com
  tags:
  - Benefits Administration
  - Eligibility
  - Enrollment
  - Employee Benefits
  properties:
  - type: Authentication
    url: https://www.bswift.com/partnership-opportunities/
    name: API credentials are issued through the partner/alliance program
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.bswift.com/
- type: Blog
  url: https://www.bswift.com/research-insights/
- type: PrivacyPolicy
  url: https://www.bswift.com/privacy-policy/
- type: Security
  url: https://www.bswift.com/bswift-vulnerability-disclosure-program/
- type: VulnerabilityDisclosure
  url: security/bswift-vulnerability-disclosure.yml
- type: TrustCenter
  url: security/bswift-trust-center.yml
- type: Compliance
  url: https://trust.bswift.com/
- type: DomainSecurity
  url: security/bswift-domain-security.yml
- type: Conformance
  url: conformance/bswift-conformance.yml
- type: ChangeLog
  url: changelog/bswift-changelog.yml
- type: ChangeLog
  url: https://www.bswift.com/research-insights/product-updates/
  name: bswift Product Updates
- type: LLMsTxt
  url: llms/bswift-llms.txt
- type: Partners
  url: https://www.bswift.com/connectivity-hub/
  name: bswift Connectivity Hub
x-enrichment:
  date: '2026-08-06'
  status: minimal
  artifacts_added: 6
  pass: local-v1
x-coverage:
  state: gated
  reason: sales-gate
  detail: api.bswift.com is a live AWS API Gateway whose /ping route returns 200 "healthy", but every functional route answers
    MISSING_AUTHENTICATION_TOKEN and the only public path to the OpenAPI specs, sandbox and webhook topics bswift says it
    ships is the Partnership Opportunities contact form — bswift runs no developer portal, docs host or API reference anywhere
    on bswift.com.
  evidence:
  - url: https://api.bswift.com/ping
    status: 200
  - url: https://api.bswift.com/openapi.json
    status: 400
  - url: https://api.bswift.com/v1/openapi.json
    status: 403
  - url: https://www.bswift.com/connectivity-hub/
    status: 200
  checked: '2026-08-06'