Steadfast Group

aid: steadfast-group
url: https://raw.githubusercontent.com/api-evangelist/steadfast-group/refs/heads/main/apis.yml
name: Steadfast Group
kind: company
description: 'Steadfast Group Limited (ASX:SDF) is the largest general insurance broker network and the largest group of insurance
  underwriting agencies in Australasia, headquartered in Sydney, Australia. It is a broker-intermediary rather than a risk
  carrier: the Steadfast Network comprises 414 independent brokerages placing approximately $12.7 billion in gross written
  premium, alongside 31 underwriting agencies writing roughly 100 products across business pack, liability, professional indemnity,
  cyber, construction, marine, aviation, farm, strata, motor and home and contents lines, plus complementary businesses covering
  premium funding (IQumulate), life insurance, workplace risk, legal and compliance. Its trading technology is the Steadfast
  Client Trading Platform (SCTP), launched in 2009, which lets network brokers send one question set to a panel of insurers
  for instant comparative quotes and which transacted over $1.5 billion in GWP in CY25 across 9 insurer lines and 23 connected
  partners; SCTP and the INSIGHT policy management platform are being consolidated into a broader "Steadfast Apps" broking
  platform. API posture, recorded honestly - Steadfast Group publishes NO developer portal, NO API documentation and NO specification
  of any kind, and a full crawl of all 311 pages in the public sitemap returned zero references to a developer portal, REST
  API, OpenAPI or Swagger. Two genuinely machine-readable surfaces nonetheless exist and neither is announced anywhere. The
  consumer Flood Risk Tracker is backed by a public, anonymous, undocumented JSON API that resolves Australian addresses against
  the national G-NAF dataset and returns Swiss Re river-flood and storm-surge risk layers, returning RFC 9457 problem details
  and advertising api-supported-versions 1.0; the OpenAPI in this record was derived from the tool''s own client JavaScript
  and from live probes. Separately, idp.steadfast.com.au is an Okta-hosted OpenID Connect provider publishing a complete anonymous
  discovery document with PKCE S256 and DPoP, though client registration is commercially gated. The commercial surfaces remain
  closed: broker.steadfast.com.au is a credentialed broker login wall, and api.steadfast.com.au and api-sf.steadfast.com.au
  are live but undocumented hosts returning HTTP 403 at the root. Insurer and partner connectivity into SCTP is arranged commercially,
  not through self-serve onboarding. The company''s most notable standards signal is governance rather than implementation:
  founder, Managing Director and CEO Robert B. Kelly AM is Chair of the ACORD Board in New York, though no ACORD, AL3, ACORD
  XML or NGDS implementation detail is published anywhere on the public site. Australia has the legal machinery for open insurance
  but no live obligation - the Consumer Data Right was designated to extend to general insurance and then deferred, so no
  regulatory forcing function pushes a broker network of this scale toward a public API.'
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: high
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  - scopes
  - security
  generated: '2026-09-02'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Insurance
- Australia
- Brokers
- Insurance Broker Network
- General Insurance
- Property and Casualty
- Underwriting Agency
- Agency Management
- ACORD
- Partner Gated
- New Zealand
tags_raw:
- Insurance
- Australia
- Broker
- Insurance Broker Network
- General Insurance
- Property and Casualty
- Underwriting Agency
- Agency Management
- ACORD
- Partner Gated
- New Zealand
created: '2026-07-25'
modified: '2026-07-25'
specificationVersion: '0.23'
apis:
- aid: steadfast-group:identity
  name: Steadfast Identity (OpenID Connect)
  description: Steadfast Group's Okta-hosted OpenID Connect provider, issuer https://idp.steadfast.com.au. It fronts the credentialed
    broker portal used by the Steadfast Network's 414 brokerages and, by inference from the shared estate, internal and partner
    applications. The discovery document is anonymously readable and advertises authorization, token, userinfo, JWKS, introspection,
    revocation, device-authorization, dynamic-client-registration and logout endpoints, with PKCE S256 and DPoP proof-of-possession
    supported. Client credentials are not self-serve - anonymous dynamic client registration returns 403 - so this is a discoverable
    but commercially gated surface, listed because its contract is genuinely machine-readable.
  humanURL: https://broker.steadfast.com.au/
  baseURL: https://idp.steadfast.com.au
  tags:
  - Identity
  - OpenID Connect
  - Authentication
  - Single Sign-On
  - Partner Gated
  tags_raw:
  - Identity
  - OpenID Connect
  - OAuth 2.0
  - Single Sign-On
  - Partner Gated
  properties:
  - type: OpenIDConnect
    url: well-known/steadfast-group-openid-configuration.json
    name: OpenID Connect discovery document (harvested verbatim)
  - type: WellKnown
    url: well-known/steadfast-group-well-known.yml
  - type: OAuthScopes
    url: scopes/steadfast-group-scopes.yml
  - type: Authentication
    url: authentication/steadfast-group-authentication.yml
- aid: steadfast-group:steadfast-group-address-api
  name: Steadfast Group Address API
  description: Australian address resolution against G-NAF identifiers.
  humanURL: https://floodrisktracker.steadfast.com.au/
  baseURL: https://floodrisktracker.steadfast.com.au
  tags:
  - Address
  properties:
  - type: OpenAPI
    url: openapi/steadfast-group-address-api-openapi.yml
  - type: Examples
    url: examples/steadfast-group-flood-risk-tracker-examples.yml
  - type: ErrorCatalog
    url: errors/steadfast-group-problem-types.yml
  - type: DataModel
    url: data-model/steadfast-group-data-model.yml
  - type: Conventions
    url: conventions/steadfast-group-conventions.yml
  - type: ToolCrosswalk
    url: mcp/steadfast-group-tool-crosswalk.yml
  - type: Authentication
    url: authentication/steadfast-group-authentication.yml
- aid: steadfast-group:steadfast-group-risk-api
  name: Steadfast Group Risk API
  description: Natural-catastrophe flood risk layers for a resolved address.
  humanURL: https://floodrisktracker.steadfast.com.au/
  baseURL: https://floodrisktracker.steadfast.com.au
  tags:
  - Risk
  properties:
  - type: OpenAPI
    url: openapi/steadfast-group-risk-api-openapi.yml
  - type: Examples
    url: examples/steadfast-group-flood-risk-tracker-examples.yml
  - type: ErrorCatalog
    url: errors/steadfast-group-problem-types.yml
  - type: DataModel
    url: data-model/steadfast-group-data-model.yml
  - type: Conventions
    url: conventions/steadfast-group-conventions.yml
  - type: ToolCrosswalk
    url: mcp/steadfast-group-tool-crosswalk.yml
  - type: Authentication
    url: authentication/steadfast-group-authentication.yml
common:
- type: Overlay
  url: overlays/steadfast-group-flood-risk-tracker-overlay.yaml
- type: X-MCPServerCandidate
  url: mcp/steadfast-group-mcp.yml
  note: 'Renamed from MCPServer 2026-09-03 (roadmap#247): the manifest self-describes as status: candidate — a tool list derived
    from the published API contracts, not an existing server. The scorer already read the manifest and reported mcp_server
    correctly; the MCPServer type was crediting the artifact-type surfaces with a server that does not exist.'
- type: AgentSkill
  url: skills/steadfast-group-flood-risk-lookup.md
- type: AgenticAccess
  url: agentic-access/steadfast-group-agentic-access.yml
- type: DomainSecurity
  url: security/steadfast-group-domain-security.yml
- type: Website
  url: https://www.steadfast.com.au/
- type: About
  url: https://www.steadfast.com.au/about-us/
- type: BoardAndManagement
  url: https://www.steadfast.com.au/about-us/board-and-management/
- type: InvestorRelations
  url: https://investor.steadfast.com.au/investor-centre/
- type: LinkedIn
  url: https://www.linkedin.com/company/steadfast-group-limited/
- type: Blog
  url: https://www.steadfast.com.au/well-covered/
- type: Contact
  url: https://www.steadfast.com.au/contact-us/
- type: PrivacyPolicy
  url: https://www.steadfast.com.au/privacy-policy/
- type: Legal
  url: https://www.steadfast.com.au/legal/
- type: CodeOfPractice
  url: https://www.steadfast.com.au/codes-of-practice/
- type: PartnerPortal
  url: https://broker.steadfast.com.au/
  name: Steadfast Broker Login - credentialed broker portal (login wall, not a developer portal)
- type: Website
  url: https://steadfastagencies.com.au/
  name: Steadfast Underwriting Agencies
- type: Website
  url: https://www.steadfastlife.com.au/
  name: Steadfast Life
- type: Website
  url: https://www.steadfastnz.nz/
  name: Steadfast New Zealand
- type: Website
  url: https://www.steadfast.com.sg/
  name: Steadfast Singapore
- type: Tool
  url: https://floodrisktracker.steadfast.com.au/
  name: Steadfast Flood Risk Tracker - public web tool; its undocumented JSON API is captured in openapi/
- type: Support
  url: https://www.steadfast.com.au/contact-us/
  name: Contact Steadfast - the only support channel; there is no developer support surface
- type: TermsOfService
  url: https://www.steadfast.com.au/legal/
  name: Website legal terms and disclaimer (Steadfast Group Limited ABN 98 073 659 677)
- type: Careers
  url: https://www.steadfast.com.au/about-us/careers/
- type: FindABroker
  url: https://www.steadfast.com.au/find-an-insurance-broker
  name: Find an insurance broker in the Steadfast Network
- type: WellKnown
  url: well-known/steadfast-group-well-known.yml
  name: Every /.well-known/ probe across the Steadfast estate, with HTTP status
- type: OpenIDConnect
  url: well-known/steadfast-group-openid-configuration.json
  name: OpenID Connect discovery document for idp.steadfast.com.au (harvested verbatim)
- type: Authentication
  url: authentication/steadfast-group-authentication.yml
- type: OAuthScopes
  url: scopes/steadfast-group-scopes.yml
- type: Conventions
  url: conventions/steadfast-group-conventions.yml
- type: Conformance
  url: conformance/steadfast-group-conformance.yml
- type: Lifecycle
  url: lifecycle/steadfast-group-lifecycle.yml
- type: ErrorCatalog
  url: errors/steadfast-group-problem-types.yml
- type: DataModel
  url: data-model/steadfast-group-data-model.yml
- type: Packages
  url: packages/steadfast-group-packages.yml
  name: No first-party client libraries exist - registries searched, homonym traps recorded
- type: LLMsTxt
  url: llms/steadfast-group-llms.txt
- type: AgentSkill
  url: skills/_index.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com