TAL is Australia's largest life insurer by inforce risk-only premium (NMG Consulting, 2023), owned by Japan's Dai-ichi Life Group and underwriting through TAL Life Limited (ABN 70 050 109 450, AFSL 237848). Operating in the Australian market for roughly 150 years, TAL writes life cover, income protection, total and permanent disability and critical illness, and reports paying $4.7 billion in benefits to 57,000 customers and their families in its most recent year. It distributes through three channels — financial advisers via the login-gated TAL Adviser Centre, group insurance inside superannuation funds, and direct/embedded offers including backd by TAL, a payroll-embedded product built with Sydney insurtech Cover Genius. TAL is not API-less, it is API-private: certificate transparency and live probing surface a real partner API estate — an OpenID Connect partner identity tenant, a bearer-protected Group Life B2B integration estate (glsb2b), per-distributor API hosts including one named for the Iress adviser software, and a production Underwriting Rules Engine GraphQL endpoint — none of which is documented, registrable or self-serve. There is no developer portal, no public API reference, no downloadable OpenAPI, and no published ACORD or AL3 position. Australia's Consumer Data Right was designated to extend to insurance but was deferred, so no open-insurance mandate forces a public surface here.
TAL is listed with 3 APIs on the APIs.io network. Tagged areas include Insurance, Australia, Life Insurance, Income Protection, and Group Insurance.
TAL’s developer surface includes authentication, support, FAQ, engineering blog, and 23 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Insurance regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for
this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero:
never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and
several others — scorable at all.
The six quality facets above are damped to 85 points between them,
because the conditional facet above carries the other
15. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 85% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/tal-australia/"><img src="https://apis.io/badge/tal-australia/card.svg" alt="TAL on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
A2A Agent Card+8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Rate-Limit Signaling+7 pts — OpenAPI responses document X-RateLimit-* / RateLimit headers (verified), else a rate_limits artifact or RateLimits link (documented)
9 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
The Kin Score Market layer reads a provider inside its market:
its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted:
not part of the Kin Score or agent readiness.
Registered MCP server and declares compatibility are report only — not weighted.
Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
TAL's partner-facing OpenID Connect identity tenant (Okta org talpartner-au.okta.com), and the only machine-readable API contract TAL serves anonymously. Full OIDC discovery and...
The integration estate behind TAL's group insurance business with superannuation funds — underwriting in/out (uwin, uwout), claims in/out (claimsin, claimsout), a common service...
A live production GraphQL endpoint serving TAL's Underwriting Rules Engine. It answers anonymous POSTs and reports a query root type of CaseQuery with no mutation or subscriptio...
aid: tal-australia
url: https://raw.githubusercontent.com/api-evangelist/tal-australia/refs/heads/main/apis.yml
name: TAL
kind: company
description: 'TAL is Australia''s largest life insurer by inforce risk-only premium (NMG Consulting, 2023), owned by Japan''s
Dai-ichi Life Group and underwriting through TAL Life Limited (ABN 70 050 109 450, AFSL 237848). Operating in the Australian
market for roughly 150 years, TAL writes life cover, income protection, total and permanent disability and critical illness,
and reports paying $4.7 billion in benefits to 57,000 customers and their families in its most recent year. It distributes
through three channels — financial advisers via the login-gated TAL Adviser Centre, group insurance inside superannuation
funds, and direct/embedded offers including backd by TAL, a payroll-embedded product built with Sydney insurtech Cover Genius.
TAL is not API-less, it is API-private: certificate transparency and live probing surface a real partner API estate — an
OpenID Connect partner identity tenant, a bearer-protected Group Life B2B integration estate (glsb2b), per-distributor API
hosts including one named for the Iress adviser software, and a production Underwriting Rules Engine GraphQL endpoint —
none of which is documented, registrable or self-serve. There is no developer portal, no public API reference, no downloadable
OpenAPI, and no published ACORD or AL3 position. Australia''s Consumer Data Right was designated to extend to insurance
but was deferred, so no open-insurance mandate forces a public surface here.'
deliveryModel:
model: saas
open_source: false
commercial: true
callable_host: false
label: Hosted service · you call their endpoint
confidence: medium
source:
- pricing
generated: '2026-08-28'
method: derived
accessModel:
pricing: unknown
onboarding: unknown
trial: false
try_now: false
public: false
gated: partner
gated_source:
- tag:Partner Gated
label: Unknown
confidence: low
source:
- authentication
- scopes
- security
generated: '2026-11-06'
method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Insurance
- Australia
- Life Insurance
- Income Protection
- Group Insurance
- Superannuation
- Underwriting
- Claims
- Carrier
- Embedded Insurance
- GraphQL
- Identity
created: '2026-07-25'
modified: '2026-07-25'
specificationVersion: '0.23'
apis:
- name: TAL Partner Identity
description: TAL's partner-facing OpenID Connect identity tenant (Okta org talpartner-au.okta.com), and the only machine-readable
API contract TAL serves anonymously. Full OIDC discovery and RFC 8414 authorization-server metadata return 200, advertising
authorization-code with PKCE (S256), device code, CIBA, refresh tokens, pushed authorization requests and DPoP, plus introspection,
revocation and logout endpoints. It authenticates partner applications into TAL's gated API estate; TAL operates no open
client registration, so obtaining a client requires a partner agreement. Two sibling tenants exist for ACP (auth.acp.tal.com.au)
and TAL Claims Assist (auth.claimsassist.tal.com.au).
humanURL: https://www.tal.com.au/adviser-partners
baseURL: https://login.talpartner.tal.com.au
tags:
- Identity
- OpenID Connect
- OAuth
- Partners
- Authentication
tags_raw:
- Identity
- OpenID Connect
- OAuth 2.0
- Partner
- Authentication
properties:
- type: OpenIDConnect
url: https://login.talpartner.tal.com.au/.well-known/openid-configuration
- type: WellKnown
url: well-known/tal-australia-well-known.yml
- type: Authentication
url: authentication/tal-australia-authentication.yml
- type: OAuthScopes
url: scopes/tal-australia-scopes.yml
- name: TAL Group Life B2B (glsb2b)
description: The integration estate behind TAL's group insurance business with superannuation funds — underwriting in/out
(uwin, uwout), claims in/out (claimsin, claimsout), a common service, a delivery service and clpapi, all under glsb2b.tal.com.au.
The common service is an ASP.NET application on Azure App Service that answers anonymous requests with HTTP 401 and WWW-Authenticate
Bearer, confirming an OAuth 2.0 bearer-protected API rather than a website; the delivery service is an Azure Function
App. No OpenAPI, Swagger UI or documentation is served — every discovery path returns 401. Access is bilateral, negotiated
per fund administrator.
humanURL: https://www.grouphq.tal.com.au/
baseURL: https://common.glsb2b.tal.com.au
tags:
- Group Insurance
- Superannuation
- Underwriting
- Claims
- Partners
tags_raw:
- Group Insurance
- Superannuation
- Underwriting
- Claims
- Partner
properties:
- type: Authentication
url: authentication/tal-australia-authentication.yml
- type: ErrorCatalog
url: errors/tal-australia-error-codes.yml
- name: TAL Underwriting Rules Engine (URE) GraphQL
description: A live production GraphQL endpoint serving TAL's Underwriting Rules Engine. It answers anonymous POSTs and
reports a query root type of CaseQuery with no mutation or subscription type, but field-level introspection is filtered
— types and fields return empty — so no SDL can be captured and none is fabricated here. It is linked from nothing and
documented nowhere; it was located by enumerating certificate transparency records for tal.com.au. Sibling hosts cover
UAT, the Individual Life and Group underwriting engines, and the URE single-page app.
humanURL: https://www.tal.com.au/adviser-partners
baseURL: https://ure-prod-graphql-app.tal.com.au/graphql
tags:
- GraphQL
- Underwriting
- Rules Engine
properties:
- type: GraphQL
url: graphql/tal-australia-ure-graphql.yml
- type: ErrorCatalog
url: errors/tal-australia-error-codes.yml
common:
- type: WellKnown
url: well-known/tal-australia-well-known.yml
- type: OpenIDConnect
url: https://login.talpartner.tal.com.au/.well-known/openid-configuration
- type: Authentication
url: authentication/tal-australia-authentication.yml
- type: OAuthScopes
url: scopes/tal-australia-scopes.yml
- type: GraphQL
url: graphql/tal-australia-ure-graphql.yml
- type: Conformance
url: conformance/tal-australia-conformance.yml
- type: ErrorCatalog
url: errors/tal-australia-error-codes.yml
- type: Conventions
url: conventions/tal-australia-conventions.yml
- type: Lifecycle
url: lifecycle/tal-australia-lifecycle.yml
- type: Packages
url: packages/tal-australia-packages.yml
- type: LLMsTxt
url: llms/tal-australia-llms.txt
- type: DomainSecurity
url: security/tal-australia-domain-security.yml
- type: Website
url: https://www.tal.com.au/
- type: About
url: https://www.tal.com.au/about-us
- type: PartnerPortal
url: https://adviser.tal.com.au/
- type: PartnerPortal
url: https://www.grouphq.tal.com.au/
- type: Support
url: https://www.tal.com.au/contact-us
- type: FAQ
url: https://www.tal.com.au/tools-and-faqs/insurance-faqs
- type: Login
url: https://mytal.tal.com.au/login
- type: Blog
url: https://www.tal.com.au/slice-of-life-blog
- type: Press
url: https://www.tal.com.au/about-us/media-centre
- type: PrivacyPolicy
url: https://www.tal.com.au/privacy-policy
- type: Security
url: https://www.tal.com.au/security
- type: Complaints
url: https://www.tal.com.au/contact-us/complaint-handling-process
- type: Careers
url: https://www.tal.com.au/about-us/careers
- type: Sitemap
url: https://www.tal.com.au/sitemap.xml
- type: LinkedIn
url: https://www.linkedin.com/company/tal-australia
maintainers:
- FN: Kin Lane
email: kin@apievangelist.com
x-tags-removed:
- OpenID Connect
- No Public API
- Partner Gated
TAL API — frequently asked questions
Does TAL have an API?
Yes. APIs.io lists 3 APIs from TAL, including TAL Partner Identity, TAL Group Life B2B (glsb2b) and TAL Underwriting Rules Engine (URE) GraphQL.
How do I authenticate with the TAL API?
TAL documents its authentication (openIdConnect/oauth2/http · 5 schemes). The details are profiled on APIs.io as Tal Australia Authentication.
Is the TAL API ready for AI agents?
TAL has a Kin Score of 19.6 out of 100 (emerging) and an Agent Readiness score of 15.8 (agent-aware), scored by API Evangelist on 2026-11-06.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.
Kin Score
How this is scored →
It updates itself when the score changes. Paste this where you link to your API docs: