nib holdings limited (ASX:NHF), trading as nib, is an Australian private health insurer headquartered in Newcastle, New South Wales, and one of the country's largest health funds alongside Medibank, Bupa and HCF. Its lines of business span Australian residents health insurance, New Zealand health insurance through nib nz insurance limited, international workers and overseas student health cover (OSHC), travel insurance, and nib Thrive, its National Disability Insurance Scheme plan-management arm. As a private health insurer it is regulated by APRA and the Private Health Insurance Act rather than by an open-data mandate — Australia's Consumer Data Right was designated to extend to general insurance and then deferred, and it never reached private health insurance at all, so there is no regulatory forcing function pushing nib toward public APIs. Its API posture reflects that exactly: nib publishes no public, self-serve developer portal and no downloadable OpenAPI definitions. Probes of developer.nib.com.au, developers.nib.com.au, docs.nib.com.au and api.nib.com.au do not resolve, and /developers, /api, /developer, /partners and /integrations on nib.com.au all return 404. A real AWS API Gateway host, api-gateway.nib.com.au, is referenced by nib's own web front-end Content-Security-Policy and answers anonymously with HTTP 403 {"message":"Forbidden"}, confirming a first-party, credential-gated gateway with no public documentation. Healthcare provider integration runs through the login-walled nib HCP portal and through third-party claiming terminals — HICAPS and HealthPoint — plus Honeysuckle Health for medical network and MediGap registration, not through an nib-published API. Member identity is an Auth0-backed OpenID Connect tenant at id.nib.com.au whose discovery document is publicly readable, as is an RFC 9116 security.txt at www.nib.com.au naming security@nib.com.au. nib also publishes three first-party npm scopes (@nib, @nib-styles, @nib-components) across four public GitHub organisations, but they carry frontend and DevOps tooling rather than any API client library. nib is recorded here as an honest partner-gated stub.
nib is listed with 1 API on the APIs.io network. Tagged areas include Insurance, Australia, Health Insurance, Carrier, and Claims.
nib’s developer surface includes pricing, documentation, authentication, engineering blog, support, signup flow, and 25 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Insurance regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for
this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero:
never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and
several others — scorable at all.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/nib-health-funds/"><img src="https://apis.io/badge/nib-health-funds/card.svg" alt="nib on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
Stable Error Semantics+8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes
A2A Agent Card+8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
9 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
The Kin Score Market layer reads a provider inside its market:
its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted:
not part of the Kin Score or agent readiness.
Registered MCP server and declares compatibility are report only — not weighted.
Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
The Auth0-backed OpenID Connect tenant behind nib member sign-in, issuer https://id.nib.com.au/. It is the only nib API surface with anonymously readable, machine-readable metad...
aid: nib-health-funds
url: https://raw.githubusercontent.com/api-evangelist/nib-health-funds/refs/heads/main/apis.yml
name: nib
kind: company
description: 'nib holdings limited (ASX:NHF), trading as nib, is an Australian private health insurer headquartered in Newcastle,
New South Wales, and one of the country''s largest health funds alongside Medibank, Bupa and HCF. Its lines of business
span Australian residents health insurance, New Zealand health insurance through nib nz insurance limited, international
workers and overseas student health cover (OSHC), travel insurance, and nib Thrive, its National Disability Insurance Scheme
plan-management arm. As a private health insurer it is regulated by APRA and the Private Health Insurance Act rather than
by an open-data mandate — Australia''s Consumer Data Right was designated to extend to general insurance and then deferred,
and it never reached private health insurance at all, so there is no regulatory forcing function pushing nib toward public
APIs. Its API posture reflects that exactly: nib publishes no public, self-serve developer portal and no downloadable OpenAPI
definitions. Probes of developer.nib.com.au, developers.nib.com.au, docs.nib.com.au and api.nib.com.au do not resolve, and
/developers, /api, /developer, /partners and /integrations on nib.com.au all return 404. A real AWS API Gateway host, api-gateway.nib.com.au,
is referenced by nib''s own web front-end Content-Security-Policy and answers anonymously with HTTP 403 {"message":"Forbidden"},
confirming a first-party, credential-gated gateway with no public documentation. Healthcare provider integration runs through
the login-walled nib HCP portal and through third-party claiming terminals — HICAPS and HealthPoint — plus Honeysuckle Health
for medical network and MediGap registration, not through an nib-published API. Member identity is an Auth0-backed OpenID
Connect tenant at id.nib.com.au whose discovery document is publicly readable, as is an RFC 9116 security.txt at www.nib.com.au
naming security@nib.com.au. nib also publishes three first-party npm scopes (@nib, @nib-styles, @nib-components) across
four public GitHub organisations, but they carry frontend and DevOps tooling rather than any API client library. nib is
recorded here as an honest partner-gated stub.'
deliveryModel:
model: saas
open_source: false
commercial: true
callable_host: false
label: Hosted service · you call their endpoint
confidence: medium
source:
- pricing
generated: '2026-08-28'
method: derived
accessModel:
pricing: unknown
onboarding: unknown
trial: false
try_now: false
public: false
gated: partner
gated_source:
- tag:Partner Gated
label: Unknown
confidence: low
probe_state: covered
source:
- authentication
- scopes
- security
generated: '2026-11-06'
method: derived
image: https://www.meshdesignsystem.com/images/brand/core/nib_RGB_PrimaryLogo_TrueGreen.svg
tags:
- Insurance
- Australia
- Health Insurance
- Carrier
- Claims
- Private Health Insurance
- Travel Insurance
- New Zealand
- NDIS
created: '2026-07-25'
modified: '2026-10-20'
specificationVersion: '0.23'
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
common:
- type: Hosts
url: hosts/nib-health-funds-hosts.yml
- type: IntegrationEdges
url: integrations/nib-health-funds-integration-edges.yml
- type: Vendors
url: vendors/nib-health-funds-vendors.yml
- type: SDKs
url: packages/nib-health-funds-packages.yml
- type: Pricing
url: https://www.nib.com.au/travel-insurance-cover/plans
- type: Documentation
url: https://www.nib.com.au/docs/fund-rules
- type: Authentication
url: authentication/nib-health-funds-authentication.yml
- type: OAuthScopes
url: scopes/nib-health-funds-scopes.yml
- type: WellKnown
url: well-known/nib-health-funds-well-known.yml
- type: SecurityTxt
url: well-known/nib-health-funds-security.txt
- type: Security
url: https://www.nib.com.au/.well-known/security.txt
- type: Conformance
url: conformance/nib-health-funds-conformance.yml
- type: Packages
url: packages/nib-health-funds-packages.yml
- type: TermsOfService
url: https://www.nib.com.au/docs/online-terms
- type: VulnerabilityDisclosure
url: security/nib-health-funds-vulnerability-disclosure.yml
- type: DomainSecurity
url: security/nib-health-funds-domain-security.yml
- type: Website
url: https://www.nib.com.au/
- type: GitHubOrganization
url: https://github.com/nib-health-funds
- type: LinkedIn
url: https://www.linkedin.com/company/nib-health
- type: Blog
url: https://www.nib.com.au/the-checkup
- type: Press
url: https://www.nib.com.au/media
- type: Login
url: https://my.nib.com.au/login
- type: PartnerPortal
url: https://www.nib.com.au/providers/hcp-portal/user/login
- type: Providers
url: https://www.nib.com.au/providers
- type: Support
url: https://www.nib.com.au/help
- type: Contact
url: https://www.nib.com.au/contact-us
- type: PrivacyPolicy
url: https://www.nib.com.au/legal/privacy-policy
- type: OpenIDConnectDiscovery
url: https://id.nib.com.au/.well-known/openid-configuration
- type: SignUp
url: https://www.nib.com.au/health-insurance/join/welcome
- type: Careers
url: https://www.nib.com.au/careers
- type: InvestorRelations
url: https://www.nib.com.au/shareholders
apis:
- aid: nib-health-funds:identity
name: nib Identity (OpenID Connect)
description: 'The Auth0-backed OpenID Connect tenant behind nib member sign-in, issuer https://id.nib.com.au/. It is the
only nib API surface with anonymously readable, machine-readable metadata: the OIDC discovery document, the RFC 8414 authorization-server
metadata and the JWKS all return HTTP 200 without credentials, and the protected endpoints (/userinfo, /oauth/token) return
401 to anonymous callers. It supports authorization code with PKCE (S256), client credentials, device code, token exchange,
JWT bearer, refresh, implicit and password grants, plus DPoP (ES256), CIBA backchannel authentication, backchannel logout
and dynamic client registration. This is CONSUMER SIGN-IN identity, not a product API — it publishes only the 14 standard
OIDC/Auth0 identity scopes and no policy, claims, quote, member-data or partner scopes. nib''s actual product APIs sit
behind api-gateway.nib.com.au, which returns 403 to every anonymous request and publishes nothing. A sibling tenant serves
nib New Zealand at https://id.nib.co.nz/.'
humanURL: https://my.nib.com.au/login
baseURL: https://id.nib.com.au
tags:
- Identity
- OpenID Connect
- OAuth
- Authentication
- Auth0
- SSO
tags_raw:
- Identity
- OpenID Connect
- OAuth 2.0
- Authentication
- Auth0
- Single Sign On
properties:
- type: OpenIDConnectDiscovery
url: https://id.nib.com.au/.well-known/openid-configuration
- type: Authentication
url: authentication/nib-health-funds-authentication.yml
- type: OAuthScopes
url: scopes/nib-health-funds-scopes.yml
- type: WellKnown
url: well-known/nib-health-funds-well-known.yml
x-tags-removed:
- Partner Gated
x-coverage:
state: covered
reason: identity-verified
detail: Website www.nib.com.au answered 200 with title 'Health Insurance, Travel Cover & Healthy Living | nib'; all existing
pointers re-fetched live on 2026-10-20; logo is the primary wordmark linked from the nib homepage (nib's Mesh design system).
evidence:
- url: https://www.nib.com.au/
status: 200
- url: https://www.meshdesignsystem.com/images/brand/core/nib_RGB_PrimaryLogo_TrueGreen.svg
status: 200
- url: https://www.nib.com.au/health-insurance/join/welcome
status: 200
- url: https://www.nib.com.au/careers
status: 200
- url: https://www.nib.com.au/shareholders
status: 200
x-enrichment:
date: '2026-10-20'
status: enriched
artifacts_added: 7
pass: modular-v1
engine: identity=anthropic,contract=anthropic,surfaces=anthropic,docs=anthropic,regulatory=anthropic
nib API — frequently asked questions
Does nib have an API?
Yes. APIs.io lists 1 API from nib, including nib Identity (OpenID Connect).
How do I authenticate with the nib API?
nib documents its authentication (oauth2/openIdConnect · 3 schemes). The details are profiled on APIs.io as Nib Health Funds Authentication.
Is the nib API ready for AI agents?
nib has a Kin Score of 25.6 out of 100 (emerging) and an Agent Readiness score of 17.6 (agent-aware), scored by API Evangelist on 2026-11-06.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →
It updates itself when the score changes. Paste this where you link to your API docs: