Origami Risk

Origami Risk is a Chicago-headquartered risk, safety and insurance SaaS company founded in 2009 that began as a single-version cloud RMIS (risk management information system) and grew into a core-systems platform for the United States property and casualty market. It sells policy administration, digital underwriting, rating, billing, premium audit, claims administration, compliance and EHS/GRC modules to carriers, MGAs, program administrators, third-party administrators, risk pools, brokers, healthcare systems and large self-insureds, across workers' compensation, medical professional liability, personal auto and homeowners lines. Unlike most US insurance organizations, Origami Risk sits in the software layer between carriers and distribution and therefore does publish a genuinely public, self-serve developer portal at developers.origamirisk.com — a ReadMe-hosted reference readable without login, covering quote and proposal creation, rating, bind, policy issue/endorse/cancel, billing and payments, claims-from-incident and first-report actions, files, reports, domain metadata and outbound webhooks. Four OpenAPI definitions are downloadable from the portal's spec registry, though three of the four are thin scaffolds and the bulk of the reference is hand-authored per-endpoint documentation rather than a complete machine-readable spec. Access to a live tenant is still commercial — the base URL is a per-customer https://{environment}.origamirisk.com host and authentication is token-based or HMAC against a provisioned account — and no ACORD, AL3, IVANS or NGDS conformance is claimed anywhere in the marketing site or the developer portal.

Origami Risk publishes 3 APIs on the APIs.io network: Authentication API, Public API, and Standard Rating API. Tagged areas include Insurance, United States, Property and Casualty, Policy Administration, and Claims.

The Origami Risk catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Origami Risk’s developer surface includes authentication, changelog, sandbox, documentation, API reference, getting-started guide, support, and 29 more developer resources.

57.8/100 developing ▬ flat Agent 64/100 agent native Full breakdown ↓
scored 2026-07-27 · rubric v0.5
9 APIs 1 MCP Servers
InsuranceUnited StatesProperty and CasualtyPolicy AdministrationClaimsUnderwritingCore SystemsRisk ManagementWorkers CompensationInsurtechBilling

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 57.8/100 · developing
Contract Quality 15.1 / 25
Developer Ergonomics 14.8 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 5.8 / 13
Governance 0.0 / 12
Discoverability 8.8 / 10
Agent readiness — 64/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 0 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/origami-risk: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 9

Individual APIs this provider publishes, each with its own machine-readable definition.

Origami Risk Authentication API

Token issuance and session verification for the Origami Risk platform APIs. Two documented token formats — a simple JSON payload (Account, User, Password, ClientName) and an OAu...

Origami Risk Public API

The core Origami Risk platform API — generic domain and entity CRUD (get, upsert, bulk insert, bulk upsert, delete), domain metadata and data dictionary lookups, screen configur...

Origami Risk Standard Rating API

Standalone standard rating service that accepts a rating request referencing a rater and intake payloads and returns rating results, offered in both synchronous and asynchronous...

Origami Risk Quotes and Proposals API

Quote-side policy lifecycle — create and patch proposals, add and remove policy lines, coverages, schedules and linked schedules, list insurance programs, carriers, policy lines...

Origami Risk Policies API

Issue-side policy administration — accept, reject, undo-accept, undo-reject and undo-binding a bound proposal to issue a policy, then endorse, cancel, reinstate, change billing ...

Origami Risk Billing and Payments API

Billing account operations including making and reversing payments, plus an online policy payment surface integrated with the One Inc payment gateway covering payment submission...

Origami Risk Actions API

Real-time and queued platform actions triggered against any domain record — including creating a claim from an incident (the FNOL path), FirstReport, Reserve, Review, RootCause,...

Origami Risk Webhooks API

Inbound webhook surface for the Origami Risk platform. An Origami "webhook handler" is a bespoke endpoint built inside Origami by the services team that an external system posts...

Origami Risk Reports API

Reporting surface for requesting a report run, retrieving report details and options, validating a report filter, and converting between the platform's view-filter string form a...

Scroll for all 9

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Rate Limits 1

Documented rate limits and quota policies.

Origami Risk Rate Limits

0 limits

RATE LIMITS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Origami Risk Authentication

apiKey/token-endpoint/hmac · 6 schemes

SECURITY

Origami Risk Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Origami Risk Trust Center

trust center published

SECURITY

Resources

Get Started 4

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 5

Authentication, authorization, and security posture

Operate 7

Status, limits, changes, and where to get help

Scroll for all 7

Commercial 3

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: origami-risk
url: https://raw.githubusercontent.com/api-evangelist/origami-risk/refs/heads/main/apis.yml
name: Origami Risk
kind: company
description: Origami Risk is a Chicago-headquartered risk, safety and insurance SaaS company founded in 2009 that began as
  a single-version cloud RMIS (risk management information system) and grew into a core-systems platform for the United States
  property and casualty market. It sells policy administration, digital underwriting, rating, billing, premium audit, claims
  administration, compliance and EHS/GRC modules to carriers, MGAs, program administrators, third-party administrators, risk
  pools, brokers, healthcare systems and large self-insureds, across workers' compensation, medical professional liability,
  personal auto and homeowners lines. Unlike most US insurance organizations, Origami Risk sits in the software layer between
  carriers and distribution and therefore does publish a genuinely public, self-serve developer portal at developers.origamirisk.com
  — a ReadMe-hosted reference readable without login, covering quote and proposal creation, rating, bind, policy issue/endorse/cancel,
  billing and payments, claims-from-incident and first-report actions, files, reports, domain metadata and outbound webhooks.
  Four OpenAPI definitions are downloadable from the portal's spec registry, though three of the four are thin scaffolds and
  the bulk of the reference is hand-authored per-endpoint documentation rather than a complete machine-readable spec. Access
  to a live tenant is still commercial — the base URL is a per-customer https://{environment}.origamirisk.com host and authentication
  is token-based or HMAC against a provisioned account — and no ACORD, AL3, IVANS or NGDS conformance is claimed anywhere
  in the marketing site or the developer portal.
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Insurance
- United States
- Property and Casualty
- Policy Administration
- Claims
- Underwriting
- Core Systems
- Risk Management
- Workers Compensation
- Insurtech
- Billing
created: '2026-07-25'
modified: '2026-07-25'
specificationVersion: '0.19'
apis:
- aid: origami-risk:origami-risk-authentication-api
  name: Origami Risk Authentication API
  description: Token issuance and session verification for the Origami Risk platform APIs. Two documented token formats —
    a simple JSON payload (Account, User, Password, ClientName) and an OAuth-style client_credentials request combining Client_ID
    and Client_Secret — plus HMAC authorization for per-call signing, an availability ping, and a token-expiry check.
  humanURL: https://developers.origamirisk.com/reference/authentication-methods
  baseURL: https://{environment}.origamirisk.com/OrigamiApi-v2
  tags:
  - Authentication
  - OAuth
  - HMAC
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/authentication-methods
  - type: OpenAPI
    url: openapi/origami-risk-authentication-openapi.json
  - type: Overlay
    url: overlays/origami-risk-authentication-overlay.yaml
  - type: Authentication
    url: authentication/origami-risk-authentication.yml
- aid: origami-risk:origami-risk-public-api
  name: Origami Risk Public API
  description: The core Origami Risk platform API — generic domain and entity CRUD (get, upsert, bulk insert, bulk upsert,
    delete), domain metadata and data dictionary lookups, screen configuration, notes, emails, files and external storage
    upload, record linking, mail merge, and query/filter syntax validation across every configurable Origami domain.
  humanURL: https://developers.origamirisk.com/reference/domains-entities
  baseURL: https://{environment}.origamirisk.com/OrigamiApi
  tags:
  - Domains
  - Entities
  - Metadata
  - Files
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/domains-entities
  - type: OpenAPI
    url: openapi/origami-risk-public-api-openapi.json
  - type: Overlay
    url: overlays/origami-risk-public-api-overlay.yaml
  - type: DataModel
    url: data-model/origami-risk-data-model.yml
  - type: AgentSkill
    url: skills/origami-risk-domain-data-access.md
    name: Read and write Origami Risk domain data safely
- aid: origami-risk:origami-risk-standard-rating-api
  name: Origami Risk Standard Rating API
  description: Standalone standard rating service that accepts a rating request referencing a rater and intake payloads and
    returns rating results, offered in both synchronous and asynchronous modes with request retrieval and cancellation. The
    only one of Origami's four published OpenAPI definitions that carries a complete set of request/response schemas.
  humanURL: https://developers.origamirisk.com/reference
  tags:
  - Rating
  - Quote
  properties:
  - type: APIReference
    url: https://developers.origamirisk.com/reference
  - type: OpenAPI
    url: openapi/origami-risk-standard-rating-api-openapi.json
  - type: OpenAPI
    url: openapi/origami-risk-rating-api-openapi.json
  - type: Overlay
    url: overlays/origami-risk-standard-rating-api-overlay.yaml
  - type: Overlay
    url: overlays/origami-risk-rating-api-overlay.yaml
  - type: ErrorCatalog
    url: errors/origami-risk-problem-types.yml
  - type: AgentSkill
    url: skills/origami-risk-standard-rating-service.md
    name: Submit a rating request to the Origami Risk Standard Rating service
- aid: origami-risk:origami-risk-quotes-and-proposals-api
  name: Origami Risk Quotes and Proposals API
  description: Quote-side policy lifecycle — create and patch proposals, add and remove policy lines, coverages, schedules
    and linked schedules, list insurance programs, carriers, policy lines and states, run or queue rating and check rating
    status, run and waive validations, retrieve billing and endorsement billing options, then bind the quote synchronously
    or by queue and poll bind status.
  humanURL: https://developers.origamirisk.com/reference/quotes-and-proposals
  baseURL: https://{environment}.origamirisk.com/OrigamiApi
  tags:
  - Quote
  - Bind
  - Rating
  - Underwriting
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/quotes-and-proposals
  - type: AgentSkill
    url: skills/origami-risk-quote-to-bind.md
    name: Quote a risk and bind it into a policy on Origami Risk
- aid: origami-risk:origami-risk-policies-api
  name: Origami Risk Policies API
  description: Issue-side policy administration — accept, reject, undo-accept, undo-reject and undo-binding a bound proposal
    to issue a policy, then endorse, cancel, reinstate, change billing frequency and take payment against the issued policy,
    with cancellation and reinstatement reason code lookups.
  humanURL: https://developers.origamirisk.com/reference/policies
  baseURL: https://{environment}.origamirisk.com/OrigamiApi
  tags:
  - Policy Administration
  - Issue
  - Endorsement
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/policies
  - type: AgentSkill
    url: skills/origami-risk-issue-and-service-policy.md
    name: Issue and service a policy on Origami Risk
- aid: origami-risk:origami-risk-billing-accounts-api
  name: Origami Risk Billing and Payments API
  description: Billing account operations including making and reversing payments, plus an online policy payment surface integrated
    with the One Inc payment gateway covering payment submission, payment-method acknowledgement, autopay management feedback
    and payment feedback callbacks.
  humanURL: https://developers.origamirisk.com/reference/billing-accounts
  baseURL: https://{environment}.origamirisk.com/OrigamiApi
  tags:
  - Billing
  - Payments
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/billing-accounts
- aid: origami-risk:origami-risk-actions-api
  name: Origami Risk Actions API
  description: Real-time and queued platform actions triggered against any domain record — including creating a claim from
    an incident (the FNOL path), FirstReport, Reserve, Review, RootCause, EDIReport state reporting, AuditResponse, Abstract,
    AddressValid, AssignSurvey, CorrAction, DataUpdate, DRFScoring, Email, Fax, SMS, MailMerge, Note, Report, RoundRobin,
    SendMobileForm, StateForm, Task and User actions.
  humanURL: https://developers.origamirisk.com/reference/actions
  baseURL: https://{environment}.origamirisk.com/OrigamiApi
  tags:
  - Claims
  - FNOL
  - Workflow
  - EDI
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/actions
  - type: AgentSkill
    url: skills/origami-risk-fnol-claim-from-incident.md
    name: Create a claim from an incident (FNOL) on Origami Risk
- aid: origami-risk:origami-risk-webhooks-api
  name: Origami Risk Webhooks API
  description: Inbound webhook surface for the Origami Risk platform. An Origami "webhook handler" is a bespoke endpoint built
    inside Origami by the services team that an external system posts data into — list the configured handlers, retrieve a
    named handler's request and response sample schema, and post a payload to it. A separate One Inc surface receives payment-gateway
    callbacks (payment method acknowledgement, payment feedback, autopay feedback), all called by One Inc into Origami. There
    is no outbound event subscription, no event catalog and no AsyncAPI document.
  humanURL: https://developers.origamirisk.com/reference/webhooks
  baseURL: https://{environment}.origamirisk.com/OrigamiApi
  tags:
  - Webhooks
  - Events
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/webhooks
  - type: Webhooks
    url: asyncapi/origami-risk-webhooks.yml
- aid: origami-risk:origami-risk-reports-api
  name: Origami Risk Reports API
  description: Reporting surface for requesting a report run, retrieving report details and options, validating a report filter,
    and converting between the platform's view-filter string form and its JSON tree form.
  humanURL: https://developers.origamirisk.com/reference/reports
  baseURL: https://{environment}.origamirisk.com/OrigamiApi
  tags:
  - Reporting
  - Analytics
  properties:
  - type: Documentation
    url: https://developers.origamirisk.com/docs
  - type: APIReference
    url: https://developers.origamirisk.com/reference/reports
common:
- type: TrustCenter
  url: security/origami-risk-trust-center.yml
- type: Compliance
  url: https://trust.origamirisk.com/
  name: Origami Risk Trust Center (Vanta)
- type: DomainSecurity
  url: security/origami-risk-domain-security.yml
- type: Authentication
  url: authentication/origami-risk-authentication.yml
- type: Conventions
  url: conventions/origami-risk-conventions.yml
- type: ErrorCatalog
  url: errors/origami-risk-problem-types.yml
- type: RateLimits
  url: rate-limits/origami-risk-rate-limits.yml
  name: Published limits and the runtime limits endpoint
- type: Lifecycle
  url: lifecycle/origami-risk-lifecycle.yml
- type: StatusPage
  url: https://status.origamirisk.com/
  name: Origami Risk system status (client authenticated)
- type: SLA
  url: https://www.origamirisk.com/serviceterms/sla/
  name: Service Level Agreement — 99.9% availability
- type: ChangeLog
  url: changelog/origami-risk-changelog.yml
- type: ChangeLog
  url: https://www.origamirisk.com/platform/product-updates/
  name: Product Updates (seasonal release train)
- type: Sandbox
  url: sandbox/origami-risk-sandbox.yml
  name: Environment matrix (preprod / staging / live, US, Gov and EU)
- type: Conformance
  url: conformance/origami-risk-conformance.yml
- type: DataModel
  url: data-model/origami-risk-data-model.yml
- type: Webhooks
  url: asyncapi/origami-risk-webhooks.yml
- type: Packages
  url: packages/origami-risk-packages.yml
- type: MCPServer
  url: mcp/origami-risk-mcp.yml
  name: Candidate MCP tool list (no official server published)
- type: LLMsTxt
  url: llms/origami-risk-llms.txt
- type: AgentSkill
  url: skills/_index.yml
  name: Origami Risk agent skills
- type: Website
  url: https://www.origamirisk.com/
- type: DeveloperPortal
  url: https://developers.origamirisk.com/
- type: Documentation
  url: https://developers.origamirisk.com/docs
- type: APIReference
  url: https://developers.origamirisk.com/reference
- type: GettingStarted
  url: https://developers.origamirisk.com/docs/getting-started
- type: Authentication
  url: https://developers.origamirisk.com/reference/authentication-methods
- type: RateLimits
  url: https://developers.origamirisk.com/reference/limits
- type: ProductOverview
  url: https://www.origamirisk.com/platform/api-access/
- type: Partners
  url: https://www.origamirisk.com/partners/
- type: Login
  url: https://developers.origamirisk.com/login?redirect_uri=/
  name: Developer portal login
- type: Support
  url: https://www.origamirisk.com/contact/
  name: Contact (support@origamirisk.com for P0/P1 incidents)
- type: Blog
  url: https://www.origamirisk.com/resources/insights/
- type: Pricing
  url: https://www.origamirisk.com/serviceterms/aipricing/
  name: Origami AI Pricing Schedule (token consumption model)
- type: TermsOfService
  url: https://www.origamirisk.com/origami-risk-website-terms-use/
- type: PrivacyPolicy
  url: https://www.origamirisk.com/privacy-policy/
- type: GitHubOrganization
  url: https://github.com/origamirisk
  name: Origami Risk LLC on GitHub (no public repositories)
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com