# The Co-operators

> The Co-operators is a Canadian insurance and financial services co-operative, owned by Canadian co-operatives, credit union centrals and farm organizations rather than public shareholders. It writes multi-line property and casualty, home, auto, farm, travel and life insurance alongside group benefits, group retirement and savings, wealth management and institutional asset management, with more than $62 billion in assets under administration and nearly 7,000 employees. Its API posture is partner-gated: there is no first-party developer portal on cooperators.ca, and the only API surface in the group belongs to its embedded-insurance brand Duuo.

Generated by the API Evangelist enrichment pipeline on 2026-07-25. Provider did not publish an llms.txt (probed https://www.cooperators.ca/llms.txt and https://duuo.ca/llms.txt — both 404).

## Read this first

- The Co-operators publishes no self-serve API, no developer portal, no OpenAPI, no SDK, no CLI, no webhooks and no status page. Every candidate developer subdomain fails to resolve in DNS and every candidate developer path on the corporate site returns 404.
- The one real API is the Duuo Platform API — partner-gated embedded tenant and event insurance. Access requires a discovery call, a signed partnership agreement, an assigned Partner Account Manager, issued OAuth client credentials, and a compliance review before go-live.
- Duuo's advertised developer portal, https://developer.duuo.ca/, is a Postman-hosted docs domain that returns HTTP 404 as of 2026-07-25. The collection has been unpublished; Duuo's marketing pages still link to it.
- The OpenAPI in this repo is a DERIVATION by API Evangelist from Duuo's own archived published Postman collection, not a provider-published artifact and not live-verified.
- No ACORD, AL3, ACORD XML, NGDS or CSIO standard is referenced anywhere in the group's public materials, and The Co-operators is not in the public CSIO member directory.

## APIs

- [Duuo Platform API](https://duuo.ca/embedded-partners/): Partner-gated embedded insurance API covering account, quote, payment and policy issuance for tenant and event insurance. OAuth 2.0 client_credentials. Ten documented operations across two strictly ordered product flows. No claims or FNOL surface.

## Specs

- [OpenAPI — Duuo Platform API](openapi/cooperators-duuo-platform-openapi.yml): OpenAPI 3.1.0, 10 operations, derived from Duuo's archived published Postman collection.
- [Overlay](overlays/cooperators-duuo-platform-overlay.yaml): API Evangelist enhancements over the derived spec.

## Artifacts

- [Authentication](authentication/cooperators-authentication.yml): OAuth 2.0 client credentials; HTTP Basic on the token call, Bearer on every API call, 60-minute token lifetime.
- [Conventions](conventions/cooperators-conventions.yml): ordering, versioning, error envelope, consent-as-contract, and the absence of idempotency, pagination, rate limits and webhooks.
- [Error catalog](errors/cooperators-problem-types.yml): proprietary envelope, two shapes by product, plain-text 404, dpTenApiStatus reference ids.
- [Data model](data-model/cooperators-data-model.yml): entity / quote / payment / policy graph for both products, with the internal-vs-customer-facing id split.
- [Sandbox](sandbox/cooperators-sandbox.yml): the Partner Accepted Testing (PAT) environment and Duuo's published test cards.
- [Lifecycle](lifecycle/cooperators-lifecycle.yml): uri-path v1, no status page, no deprecation policy, and the timeline of the developer portal going dark.
- [Conformance](conformance/cooperators-conformance.yml): what the API does and does not conform to, including the ACORD/CSIO absence.
- [Agentic access](agentic-access/cooperators-agentic-access.yml): recommended x-agentic-access execution contract per operation.
- [Domain security](security/cooperators-domain-security.yml): TLS, HSTS, DNSSEC, CAA, SPF and DMARC probe results for both domains.
- [Well-known](well-known/cooperators-well-known.yml): the full contract-discovery probe record (all 404 / no DNS).
- [Agent skills](skills/_index.yml): packaged operating instructions for the two marquee flows.
- [Arazzo workflows](arazzo/_index.yml): the two ordered quote-and-bind flows as executable workflows.

## Docs

- [Duuo embedded partners](https://duuo.ca/embedded-partners/): the live partner-program page and the closest thing to public API documentation.
- [Become a Duuo partner](https://duuo.ca/new-partners/): partner enquiry form; the only route to credentials.
- [Duuo help centre](https://intercom.help/duuo-support/en/)
- [Duuo terms of use](https://duuo.ca/terms-of-use)
- [Duuo privacy](https://duuo.ca/privacy)
- [Co-operators corporate overview](https://www.cooperators.ca/en/about-us/corporate-overview)
- [Co-operators security and privacy](https://www.cooperators.ca/en/security-privacy)
- [Co-operators legal / terms](https://www.cooperators.ca/en/security-privacy/legal)
- [Co-operators newsroom](https://www.cooperators.ca/en/about-us/newsroom)
- [Advisor and broker sign-in](https://www.cooperators.ca/en/advisors/sign-in): sign-in walls, not an integration surface.

## Dead ends (do not retry)

- https://developer.duuo.ca/ — 404
- https://documenter.getpostman.com/view/26639007/2s93sXcubU — 404
- api.duuo.ca, developers.duuo.ca, docs.duuo.ca — no DNS A record
- developer.cooperators.ca, developers.cooperators.ca, docs.cooperators.ca, api.cooperators.ca, apis.cooperators.ca, partners.cooperators.ca — no DNS A record
- www.cooperators.ca/developers, /developer, /api, /partners, /integrations — 404
- status.cooperators.ca, status.duuo.ca — no DNS A record
- /.well-known/security.txt, /.well-known/openid-configuration, /.well-known/oauth-authorization-server, /.well-known/api-catalog on both domains — 404