aid: acrisure
name: Acrisure
description: >-
  Acrisure is a global fintech and insurance brokerage headquartered in Grand Rapids,
  Michigan, founded in 2005 and grown from $38M to roughly $5B in revenue with more than
  19,000 colleagues across 500+ offices in over 20 countries. It sells commercial and
  personal insurance, employee benefits, payroll and HR, reinsurance, surety bonds, trade
  credit, mortgages, managed IT and cybersecurity through a partner-agency model rather
  than a developer platform. Acrisure publishes no developer portal, no API reference and
  no machine-readable specification of any kind, but it does operate an undocumented,
  OAuth-protected Model Context Protocol server at api.acrisure.com/v1/mcp behind
  Microsoft Entra ID — discoverable only from the `mcp_user` scope in its RFC 8414
  authorization-server metadata.
image: https://edge.sitecorecloud.io/acrisurellc1-acrisure-prod-0dbe/media/Project/Acrisure/Acrisure-Site/Master-Site/Acrisure-Logo/acrisure-logo-large.png
url: https://raw.githubusercontent.com/api-evangelist/acrisure/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.23'
created: '2026-08-06'
modified: '2026-08-06'
tags:
- insurance
- insurance-brokerage
- fintech
- employee-benefits
- payroll-hr
- reinsurance
- risk-management
- cybersecurity
- mortgage
- surety-bonds
- mcp
- oauth2
apis:
- name: Acrisure MCP Server
  description: >-
    Hosted Model Context Protocol server operated by Acrisure at
    https://api.acrisure.com/v1/mcp. Production and live, protected by Microsoft Entra ID
    via an authorization-code + PKCE flow carrying the single application scope
    `api://bc250bc0-7689-4f21-b164-72a6b57c273b/mcp_user`. Undocumented: Acrisure publishes
    no tool list, no schemas and no reference for it, and RFC 9728 protected-resource
    metadata is absent, so the endpoint is only discoverable by probing the API host's
    authorization-server metadata directly.
  humanURL: https://www.acrisure.com/
  baseURL: https://api.acrisure.com/v1/mcp
  tags:
  - mcp
  - oauth2
  - fintech
  - insurance
  properties:
  - type: MCPServer
    url: mcp/acrisure-mcp.yml
  - type: Authentication
    url: authentication/acrisure-authentication.yml
  - type: OAuthScopes
    url: scopes/acrisure-scopes.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: VulnerabilityDisclosure
  url: security/acrisure-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/acrisure-domain-security.yml
- type: Website
  url: https://www.acrisure.com/
- type: About
  url: https://www.acrisure.com/about-acrisure
- type: Blog
  url: https://www.acrisure.com/blog
- type: News
  url: https://www.acrisure.com/news
- type: Support
  url: https://www.acrisure.com/contact-us
- type: SignUp
  url: https://customer.acrisure.com/portal
- type: TermsOfService
  url: https://www.acrisure.com/terms-of-use
- type: PrivacyPolicy
  url: https://www.acrisure.com/privacy
- type: Careers
  url: https://www.acrisure.com/careers
- type: SecondaryMarket
  url: https://forgeglobal.com/acrisure_stock/
- type: WellKnown
  url: well-known/acrisure-well-known.yml
- type: SecurityTxt
  url: well-known/acrisure-security.txt
- type: Security
  url: https://www.acrisure.com/.well-known/security.txt
- type: Authentication
  url: authentication/acrisure-authentication.yml
- type: OAuthScopes
  url: scopes/acrisure-scopes.yml
- type: MCPServer
  url: mcp/acrisure-mcp.yml
- type: Conformance
  url: conformance/acrisure-conformance.yml
x-enrichment:
  date: '2026-08-06'
  status: minimal
  artifacts_added: 11
  pass: local-v1
x-coverage:
  state: unreadable
  reason: no-machine-readable-spec
  detail: >-
    Acrisure runs a live OAuth-protected MCP server at api.acrisure.com/v1/mcp — proven by
    an application-level 403 on tools/list against a control sibling path that 404s — but
    publishes no OpenAPI, no tool list and no documentation for it anywhere, and its
    llms.txt and /ai/*.json endpoints still serve the unshipped Sitecore XM Cloud demo
    fixture for a fictional "Skate Park" skate-brand wholesaler instead of anything about
    Acrisure.
  evidence:
  - url: https://api.acrisure.com/v1/mcp
    status: 403
  - url: https://api.acrisure.com/v1/mcpZZZ
    status: 404
  - url: https://api.acrisure.com/.well-known/oauth-authorization-server
    status: 200
  - url: https://api.acrisure.com/.well-known/oauth-protected-resource
    status: 404
  - url: https://www.acrisure.com/llms.txt
    status: 200
  - url: https://www.acrisure.com/ai/summary.json
    status: 200
  - url: https://api.acrisure.com/v1/openapi.json
    status: 404
  checked: '2026-08-06'