| Ids |
UUIDs, except event ids (whole numbers, used as cursors) and references like VS-000624 |
| Money |
Plain numbers in dollars: 2100000, never "$2.1M" |
| Dates |
YYYY-MM-DD; timestamps are ISO 8601 with a time zone |
| Lines |
GL PROP XS LL BR IM PL AUTO ENV, or their names (“General Liability”) on input |
| States |
SC or South Carolina on input; two-letter codes on output |
| Idempotency |
Send client_reference on every create, or an Idempotency-Key header (letters, numbers, . _ : -, up to 80). The same value returns the same file with 200 and duplicate: true |
| Dry runs |
?dry_run=1 on creating a submission and on asking to bind: every check runs, nothing is saved or sent, and you get back what would happen |
| Undoing |
What each call does, who acts on it, and how to undo it is in each operation’s x-agentic-access in the OpenAPI spec. In short: answers can be corrected by answering again, a bind request can be withdrawn until it reaches the market, webhooks can be deleted, and anything else goes through your broker |
| Rate limits |
120 requests a minute per key. Every response carries RateLimit-Policy: "per-key";q=120;w=60; over it you get 429 with Retry-After |
| Machine discovery |
/.well-known/api-catalog (RFC 9727) lists the API, the MCP connector, the specs and these docs. llms.txt maps the docs for AI tools, and an agent skill packages the rules |
| Unknown fields |
Request bodies are strict: an unknown field is a 400 invalid_request |
| Paging |
limit and offset on lists; events use the after cursor |
| Data scoping |
A key sees only its own agency’s files, in its own book (live or demo). Market names appear only on presented quotes |
| Bodies |
JSON up to 64 KB; uploads as multipart (4 MB) or by upload link (25 MB) |
