# Bupa

**Canonical:** https://apis.io/providers/bupa/  
**Website:** https://www.bupa.com/  
**APIs profiled:** 2

Bupa is a United Kingdom headquartered international healthcare group that writes private medical insurance and also runs the clinics, dental practices, hospitals and aged-care homes that deliver the care it funds. It has no shareholders, is owned by the British United Provident Association Limited and reinvests its profits, and operates market units across the UK, Australia and New Zealand, Spain and Latin America (Sanitas, Bupa Chile), Turkiye, Poland, Hong Kong SAR, India and the Middle East, plus the Bupa Global international private medical insurance business. Its lines of business are health insurance, health provision and aged care rather than property and casualty or life, so the ACORD data standards that shape the rest of the insurance sector are absent from its published surface. Bupa's API posture is partner-gated: the group site bupa.com publishes no developer portal at all (developer, developers, docs and api subdomains do not resolve, and /developers, /api and /developer return 404), and the only first-party developer surfaces belong to market units. Bupa Australia runs a real Azure API Management developer portal at portal.api.bupa.com.au that returns HTTP 200 but lists no APIs publicly, instructing prospective consumers to contact the Bupa Integration Fabric Team to get access to API specifications; Bupa Chile runs apidoc.bupa.cl behind a Microsoft Entra ID login wall whose backend returns HTTP 401 to anonymous callers; and the Bupa Global portal host api-portal.bupaglobal.com no longer resolves. No public OpenAPI or Swagger definition, no Postman collection, no GraphQL or gRPC surface, and no event or webhook catalog could be confirmed anywhere on Bupa's public web estate as of 2026-07-25, and none of the four insurance API verbs — quote, bind, issue or FNOL — is exposed to unauthenticated developers.

## Kin Score — 32.9 / 100 (thin)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 32.9).

| Facet | Score |
|---|---|
| Discoverability | 87.0 |
| Contract Quality | 0.0 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 28.9 |
| Developer Ergonomics | 57.1 |
| Commercial Clarity | 23.7 |
| Access Clarity | 23.7 |

Regulatory layer — **Insurance**: 40.9 (matched via tags).

## Agent readiness — 12.0 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | yes |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## APIs (2)

- **Bupa Australia APIs (Integration Fabric)** — The Bupa Australia API estate, published through an Azure API Management managed developer portal at portal.api.bupa.com.au and served from the api.bupa.com.au gateway host. The...
- **Portal de APIs Bupa (Bupa Chile)** — The Bupa Chile API portal at apidoc.bupa.cl — an Angular single-page application that ships Swagger UI and renders API definitions fetched from the backend controller at https:/...

## Security (3)

- **Bupa Authentication** — oauth2/openIdConnect/apiKey · 3 schemes
- **Bupa Domain Security** — TLSv1.3 · HSTS · DMARC
- **Bupa Vulnerability Disclosure** — Hackerone

## Tags

Insurance, United Kingdom, Health Insurance, Life and Health, Carrier, Healthcare, Aged Care, Claims, Policy Administration, Partner Gated

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/bupa/). Scores are computed from the provider's own public artifacts under a published rubric.