aid: bupa url: https://raw.githubusercontent.com/api-evangelist/bupa/refs/heads/main/apis.yml name: Bupa kind: company description: >- Bupa is a United Kingdom headquartered international healthcare group that writes private medical insurance and also runs the clinics, dental practices, hospitals and aged-care homes that deliver the care it funds. It has no shareholders, is owned by the British United Provident Association Limited and reinvests its profits, and operates market units across the UK, Australia and New Zealand, Spain and Latin America (Sanitas, Bupa Chile), Turkiye, Poland, Hong Kong SAR, India and the Middle East, plus the Bupa Global international private medical insurance business. Its lines of business are health insurance, health provision and aged care rather than property and casualty or life, so the ACORD data standards that shape the rest of the insurance sector are absent from its published surface. Bupa's API posture is partner-gated: the group site bupa.com publishes no developer portal at all (developer, developers, docs and api subdomains do not resolve, and /developers, /api and /developer return 404), and the only first-party developer surfaces belong to market units. Bupa Australia runs a real Azure API Management developer portal at portal.api.bupa.com.au that returns HTTP 200 but lists no APIs publicly, instructing prospective consumers to contact the Bupa Integration Fabric Team to get access to API specifications; Bupa Chile runs apidoc.bupa.cl behind a Microsoft Entra ID login wall whose backend returns HTTP 401 to anonymous callers; and the Bupa Global portal host api-portal.bupaglobal.com no longer resolves. No public OpenAPI or Swagger definition, no Postman collection, no GraphQL or gRPC surface, and no event or webhook catalog could be confirmed anywhere on Bupa's public web estate as of 2026-07-25, and none of the four insurance API verbs — quote, bind, issue or FNOL — is exposed to unauthenticated developers. image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg tags: - Insurance - United Kingdom - Health Insurance - Life and Health - Carrier - Healthcare - Aged Care - Claims - Policy Administration - Partner Gated created: '2026-07-25' modified: '2026-07-25' specificationVersion: '0.19' apis: - name: Bupa Australia APIs (Integration Fabric) description: >- The Bupa Australia API estate, published through an Azure API Management managed developer portal at portal.api.bupa.com.au and served from the api.bupa.com.au gateway host. The portal is publicly reachable (HTTP 200) and its own sitemap.xml declares Products, APIs, API Details and API Changelog routes, but the catalog renders client-side against an internal-only APIM management endpoint (management.api.internal.bupa.com.au, service banzprodapim01) and is therefore empty for anonymous visitors. Bupa's onboarding copy makes the gating explicit: "Contact the Bupa Integration Fabric Team with your interest to get access to our API specifications." The gateway host api.bupa.com.au resolves behind Imperva and returns HTTP 502 to anonymous callers, including for /openapi.json, /swagger.json, /api-docs and /.well-known/openid-configuration. No OpenAPI definition is retrievable without a partner agreement. humanURL: https://portal.api.bupa.com.au/ baseURL: https://api.bupa.com.au tags: - Insurance - Health Insurance - Australia - Partner Gated - Azure API Management properties: - type: DeveloperPortal url: https://portal.api.bupa.com.au/ - type: GettingStarted url: https://portal.api.bupa.com.au/get-started - type: APIReference url: https://portal.api.bupa.com.au/api-details - type: Documentation url: https://portal.api.bupa.com.au/apis - type: ChangeLog url: https://portal.api.bupa.com.au/api-changelog - type: SignUp url: https://portal.api.bupa.com.au/signin - type: TermsOfService url: https://www.bupa.com.au/terms-and-conditions - name: Portal de APIs Bupa (Bupa Chile) description: >- The Bupa Chile API portal at apidoc.bupa.cl — an Angular single-page application that ships Swagger UI and renders API definitions fetched from the backend controller at https://api.bupa.cl/portal/ms-controller. Every anonymous request to that backend returns HTTP 401, so no definition can be read without credentials. Access is fronted by Microsoft Entra ID (authority login.microsoftonline.com tenant 6faad805-0755-4412-981c-e2d4e4021ee7, client_id 744efffa-f93d-4137-b874-cef142712fa6, redirect https://apidoc.bupa.cl/public/login), whose OpenID Connect discovery document is publicly readable and is captured verbatim in well-known/. The portal is a login wall rather than a self-serve developer surface. humanURL: https://apidoc.bupa.cl/ baseURL: https://api.bupa.cl/portal/ms-controller tags: - Insurance - Health Insurance - Chile - Partner Gated - Login Wall properties: - type: DeveloperPortal url: https://apidoc.bupa.cl/ - type: Authentication url: authentication/bupa-authentication.yml common: - type: Website url: https://www.bupa.com/ - type: Blog url: https://www.bupa.com/news-and-press/news-and-stories - type: LinkedIn url: https://www.linkedin.com/company/bupa - type: GitHubOrganization url: https://github.com/bupa-digital - type: DeveloperPortal url: https://portal.api.bupa.com.au/ - type: Documentation url: https://portal.api.bupa.com.au/apis - type: GettingStarted url: https://portal.api.bupa.com.au/get-started - type: APIReference url: https://portal.api.bupa.com.au/api-details - type: ChangeLog url: changelog/bupa-changelog.yml - type: SignUp url: https://portal.api.bupa.com.au/signin - type: Support url: https://www.bupa.com/contacts - type: TermsOfService url: https://www.bupa.com.au/terms-and-conditions - type: PrivacyPolicy url: https://www.bupa.com/important-notices/privacy-notices - type: Authentication url: authentication/bupa-authentication.yml - type: Conformance url: conformance/bupa-conformance.yml - type: Lifecycle url: lifecycle/bupa-lifecycle.yml - type: Packages url: packages/bupa-packages.yml - type: LLMsTxt url: llms/bupa-llms.txt - type: DomainSecurity url: security/bupa-domain-security.yml - type: VulnerabilityDisclosure url: security/bupa-vulnerability-disclosure.yml - type: Security url: https://bugcrowd.com/engagements/bupa-aus-vdp-pro maintainers: - FN: Kin Lane email: kin@apievangelist.com