Insuro
Server Details
Free insurance vault MCP: OAuth policies, renewals, coverage Q&A, file PDFs. Global; not advice.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
6 toolsadd_policyAdd policyAInspect
Manually create a user-entered policy in the same table as the website form. Requires insurer and type. Policy number, renewal/expiry, start date, and premium are optional. Requires vault.write. Insuro does not sell insurance or give financial advice.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Display name. Defaults to insurer + type. | |
| type | Yes | Policy type: home, auto, health, life, tpd, income_protection, travel, other (car maps to auto). | |
| expiry | No | Alias for renewal_date. | |
| number | No | Policy number if known. | |
| insurer | Yes | Insurer / provider name. | |
| premium | No | Premium amount, optional. | |
| start_date | No | Start date YYYY-MM-DD. | |
| renewal_date | No | Renewal date YYYY-MM-DD. | |
| premium_frequency | No | e.g. yearly, monthly. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already signal a non-read-only, non-idempotent, non-destructive operation. The description adds a useful permission requirement ('Requires vault.write') and a domain boundary ('Insuro does not sell insurance or give financial advice'), but it does not describe what happens on duplicate creation or what the response looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences and front-loaded with the main purpose and requirements. The vault.write and no-advice statements are useful but not strictly about invocation mechanics, so a small deduction is warranted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 9-parameter create tool with no output schema, the description covers required inputs, optional fields, permission requirements, and domain boundaries. The main gaps are explicit exclusion of ingest_document and return-value expectations, but these are not crippling for a reasonably typed schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all 9 parameters. The description repeats the required/optional split and mentions renewal/expiry as a pair, but it adds no substantive meaning beyond the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific action ('manually create') and a specific resource ('policy') in a specific location ('same table as the website form'), so an agent can distinguish it from siblings like list_policies or ingest_document. It is not a tautology and gives concrete operational scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly states the required inputs (insurer, type) and implies manual entry vs. document ingestion, but it never explicitly names alternatives or says when NOT to use this tool. The context is clear but exclusions are left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ask_coverageAsk coverageARead-onlyIdempotentInspect
Ask a natural-language coverage question about the connected vault (same assistant as the Insuro website). Optional policy_id hint from list_policies. Returns a short answer, which policy/document was used, and a financial-advice disclaimer. Never returns PDS text or document bodies. Requires vault.read.
| Name | Required | Description | Default |
|---|---|---|---|
| question | Yes | Natural-language coverage question, e.g. "Am I covered for flood?" | |
| policy_id | No | Optional policy to focus on (from list_policies). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only, non-destructive, idempotent behavior. The description adds meaningful behavioral details: it returns a short answer plus which policy/document was used, includes a financial-advice disclaimer, never returns PDS text or document bodies, and requires vault.read. These go well beyond the annotations and set clear expectations for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences with no wasted words. It front-loads the core action, then lists return contents, constraints, and the required permission in a logical order. Every sentence carries useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter tool with no output schema, the description explains what will be returned, what will never be returned, the required permission, and the relationship to list_policies. This is sufficient for an agent to invoke the tool and interpret the result correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already explains both parameters. The description's mention of 'policy_id hint from list_policies' overlaps with the schema's own 'from list_policies' text, adding little new semantic value beyond the word 'hint,' which is minor.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Ask a natural-language coverage question about the connected vault.' It clearly distinguishes this tool from siblings like list_policies or ingest_document by framing it as a Q&A tool that returns answers rather than raw policy data or documents.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when this tool is appropriate: when the user has a natural-language coverage question. It also hints at a workflow by mentioning policy_id comes from list_policies. However, it does not explicitly state when not to use it or name alternative tools for cases like listing policies or ingesting documents.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_renewalsGet renewalsARead-onlyIdempotentInspect
Policies renewing within a window. Optional input { days?: number }, default 90. Same summary fields as list_policies — no document bodies.
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | Look-ahead window in days. Defaults to 90. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already communicate that this is a read-only, idempotent, non-destructive operation. The description adds useful behavioral context by stating that results share list_policies' summary fields and contain no document bodies. It does not disclose ordering, pagination, or other edge -case behavior, but the annotation coverage lowers the bar and the additional context is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three concise sentences with the core purpose front-loaded. Each sentence earns its place: the purpose, the optional parameter/default, and the output shape comparison. There is no redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple, single-optional-parameter read tool with no output schema, the description covers what the tool does, how the parameter behaves, and what the return content looks like. The return description relies on the sibling list_policies to define the exact summary fields, which is reasonable in a shared MCP context but not fully self-contained. Overall it is sufficient for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully describes the sole parameter, days, including type, range, and default value. The description repeats that days is optional and defaults to 90 without adding new semantics. Since schema description coverage is 100%, the baseline of 3 is appropriate and the description adds no meaningful parameter insight beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the resource as policies renewing within a look-ahead window, which is a specific, actionable scope. The reference to list_policies and the note about document bodies helps distingish it from the sibling list_policies and other tools. The name, title, and description align with no ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The intended use case is explicit: retrieve policies that renew within a configurable window, defaulting to 90 days. It also implies that document bodies are not included, which signals when list_policies may be more appropriate. However, it does not explicitly state when not to use this tool or name an alternative for full-document retrievals, so it falls just short of perfect guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_vaultGet vaultARead-onlyIdempotentInspect
Read-only summary of the connected Insuro vault. Returns the private @insuro.com.au vault email, the account email, how many policies are on file, and upcoming renewal dates. Does not return documents, PDS text, or policy numbers.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds value by specifying exactly what the tool returns and what it deliberately excludes, giving the agent a precise behavioral contract without contradicting any annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no wasted words: the first leads with the read-only nature and scope, the second crisply lists included and excluded return data. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter read-only tool with rich annotations, the description is complete. It explains the return content, the exclusions, and the read-only nature, so an agent knows what to expect and what not to attempt to retrieve.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema is complete, so there are no parameter semantics to add. Per the baseline for no-parameter tools, the description appropriately focuses on output behavior rather than arguments.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies a specific resource ('connected Insuro vault') with a specific action ('Read-only summary') and enumerates the exact returned fields: private vault email, account email, policy count, and upcoming renewal dates. The explicit 'Does not return...' clause further distinguishes it from document- and policy-number-related tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description conveys a clear scope — a high-level vault summary — which implies when an agent would want this rather than, say, list_policies or get_renewals. However, it does not explicitly name alternatives or state when not to use this tool, leaving usage routing partly to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ingest_documentIngest documentAInspect
File a policy PDF into the vault. Send the file as content_base64 (standard base64, optional data: URL). Same storage, inbox, and parse path as the website. Links to a matching policy when the parser can; otherwise lands in the inbox. Returns a structured summary only — never PDS text. Max decoded size 4MB (Streamable HTTP limit). Requires vault.write.
| Name | Required | Description | Default |
|---|---|---|---|
| blob | No | Alias for content_base64. | |
| filename | Yes | Original filename, e.g. nrma-car.pdf | |
| mime_type | No | Defaults to application/pdf. | |
| policy_id | No | Optional policy to link when already known. | |
| content_base64 | No | File bytes as standard base64. data:application/pdf;base64,... is accepted. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are all false, so the description carries the full behavioral burden. It discloses the return behavior (structured summary only, never PDS text), the fallback path (inbox when no policy matches), the size limit, the storage/parse path parity, and the required permission. This is rich, actionable transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core purpose. Every sentence adds a distinct operational fact: input format, storage parity, linking fallback, return type, size cap, and permission. There is no filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a write tool with no annotations and no output schema, the description covers the essential call-time concerns: required permission, size limit, input encoding, fallback behavior, and return type. The only notable gap is the exact shape/content of the structured summary, but the description makes clear that PDS text is not returned.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds value beyond the schema by stating the max decoded size, clarifying the accepted base64/data URL format, and tying policy_id behavior to automatic matching. It does not mention the blob alias or mime_type default, but the schema already covers those.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'File a policy PDF into the vault.' It clearly conveys what the tool does and adds useful scope limits like max size and summary-only output. However, it does not explicitly distinguish itself from the closely named sibling add_policy, so an agent must infer the difference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear operational context: use it for policy PDFs, send content_base64, respect the 4MB limit, and require vault.write. But it never explicitly says when not to use it or which sibling to prefer instead, so the usage guidance is implied rather than direct.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_policiesList policiesARead-onlyIdempotentInspect
Read-only summaries of policies in the connected vault: type, insurer/provider, policy number (if present), status, and renewal/start dates. Does not return PDS text, document bodies, notes, or coverage wording.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive behavior, and the description adds meaningful context beyond that: the output is summaries only, and it explicitly excludes PDS text, document bodies, notes, and coverage wording. This helps an agent set expectations and avoid misusing the tool for content retrieval.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two tight, front-loaded sentences. The first states the core function and return fields; the second lists exclusions. Every sentence adds value with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless, read-only listing tool with rich annotations, the description fully covers what an agent needs to invoke it correctly: what it returns, what it omits, and its non-destructive nature. No critical operational details are missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema is empty with 100% coverage, so there is nothing for the description to add. The baseline of 4 is appropriate since parameter semantics are trivially satisfied.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'read-only summaries of policies in the connected vault,' and enumerates the exact fields returned. It also clarifies what it does not return, which distinguishes it from document- and coverage-oriented siblings like ask_coverage and ingest_document.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description makes clear when this tool is appropriate: when the caller needs policy summaries and metadata, not full document text or coverage wording. It does not explicitly name alternative tools or provide exclusion conditions, so it falls just short of full routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
6 tool updates
- First observed
add_policy - First observed
ask_coverage - First observed
get_renewals - First observed
get_vault - First observed
ingest_document - First observed
list_policies
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Agent-native insurance quoting protocol — sandbox, MCP + REST, eligibility pre-flight
Real, bindable home & auto insurance quotes via MCP (Texas, expanding); human-completed bind.
- JustOnceOAuthai.justonce
Persistent memory for AI assistants — one shared, OAuth-secured vault for every MCP client.
Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables insurance policy analysis, risk assessment, and policy comparison with support for multiple editions (Lite free, Solo and Pro paid).41MIT
- AlicenseAqualityAmaintenanceZero-Knowledge Cloud Drive for Humans and Agents. Client-side AES-256-GCM encryption with 7 MCP tools for secure file vault management — the server never sees plaintext data.72471MIT
- AlicenseAqualityAmaintenanceZero-knowledge password manager with MCP credential gateway. BIP-39 seed phrase recovery, deterministic passwords, policy-gated AI agent access with scope, rate limits, time windows, and step-up approval. Supports 70+ API key providers with hash-chain audit trail.385MIT
- AlicenseAqualityCmaintenanceZero-knowledge document vault backed by Azure Blob Storage with built-in MCP server. Client-side AES-256-GCM encryption, five tools (list, get, search, create, update), and OAuth-gated access for Claude.91MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool targets a distinct action: adding a policy, asking a coverage question, listing renewals, viewing vault metadata, ingesting a document, and listing policies. Even the two list-like tools serve clearly different purposes, and descriptions reinforce the boundaries.
All tool names follow a consistent snake_case verb_noun pattern: add_policy, ask_coverage, get_renewals, get_vault, ingest_document, list_policies. There are no mixed conventions or vague generic verbs.
Six tools is well-scoped for an insurance vault assistant: the set covers ingestion, manual entry, policy summaries, renewal lookups, vault metadata, and natural-language coverage queries without bloat.
The core flows are covered—add/list policies, ingest documents, ask about coverage, and see renewals—but there is no update or delete for policies, and no way to list or manage documents that landed in the inbox. These are notable gaps for a lifecycle-complete surface, though they may be intentional for a privacy-focused read/input tool.