7 endpoints · base URL https://flexysure.intrepidprojects.co.ke/api/v1
Everything after the sale, which Insurance Cloud does not expose: list and read policies, endorse them mid-term, preview and confirm a cancellation with its refund, and raise a renewal quote. Results respect visibility: an agent (by X-Agent-Code/X-Agent-Key, or a key whose actor is an agent) sees only what they created; a policy outside reach is a 404.
The list row plus client details, vehicles, members, travellers, benefits, debit notes, receipts allocated to them, certificates, endorsements, refunds, a claims summary and links.
Scope
read
Authentication
Bearer token
Rate limit
60 requests per minute per token (per-client override)
Idempotency
Safe to repeat (read only).
Agent headers
Accepts X-Agent-Code and X-Agent-Key: the call runs as that agent and sees only the agent's own records.
Headers
Header
Meaning
Authorization
Bearer <access_token> (scope read)
X-Agent-Code
Optional. Agent code; with X-Agent-Key results narrow to that agent's records and writes are recorded against them.
Mid-term change to an active policy, priced pro rata to expiry with current rates. A positive change raises an endorsement debit note; a negative one a credit and refund. changes by type: add_vehicle {reg_no, chassis_no, make, model, year, body_type, value}; remove_vehicle {vehicle_id}; change_value {value, vehicle_id?}; change_cover {cover_type comprehensive|tpo}; change_dates {end_on}; add_member {name, type, dob?, premium}; remove_member {member_id}; other {description, premium_delta}. Amounts in whole shillings.
Scope
bind
Authentication
Bearer token
Rate limit
60 requests per minute per token (per-client override)
Idempotency
Required: send an Idempotency-Key; a retry with the same key replays the first response.
Agent headers
Accepts X-Agent-Code and X-Agent-Key: the call runs as that agent and sees only the agent's own records.
Headers
Header
Meaning
Authorization
Bearer <access_token> (scope bind)
Idempotency-Key
Required. Unique per write; replays return the first response.
X-Agent-Code
Optional. Agent code; with X-Agent-Key results narrow to that agent's records and writes are recorded against them.
X-Agent-Key
Optional. The agent's key.
Parameters
Name
In
Type
Required
Description
uuid
path
string
Yes
Policy uuid (from a save response or the list).
Body fields
Field
Type
Required
Description
type
string
Yes
One of: add_vehicle, remove_vehicle, change_value, change_cover, change_dates, add_member, remove_member, other
What cancelling on effective_on would do, without changing anything: unearned premium (pro rata or short-period scale, levies not refunded) and the estimated refund after unpaid premium. outcome is cancel, void (never paid — nothing to refund) or not_cancellable.
Scope
read
Authentication
Bearer token
Rate limit
60 requests per minute per token (per-client override)
Idempotency
Safe to repeat (read only).
Agent headers
Accepts X-Agent-Code and X-Agent-Key: the call runs as that agent and sees only the agent's own records.
Headers
Header
Meaning
Authorization
Bearer <access_token> (scope read or bind)
X-Agent-Code
Optional. Agent code; with X-Agent-Key results narrow to that agent's records and writes are recorded against them.
Cancels an active policy (or voids one never paid): credits the unearned premium, reverses commission on it, cancels certificates and records a refund to the client (or to Flexysure Finance first for a premium-financed policy). Backdating is limited to 30 days; future dates are refused.
Scope
bind
Authentication
Bearer token
Rate limit
60 requests per minute per token (per-client override)
Idempotency
Required: send an Idempotency-Key; a retry with the same key replays the first response.
Agent headers
Accepts X-Agent-Code and X-Agent-Key: the call runs as that agent and sees only the agent's own records.
Headers
Header
Meaning
Authorization
Bearer <access_token> (scope bind)
Idempotency-Key
Required. Unique per write; replays return the first response.
X-Agent-Code
Optional. Agent code; with X-Agent-Key results narrow to that agent's records and writes are recorded against them.
Re-quotes the same risk with current rates for the next period and links the quote to the policy. Convert it like any other quote (travel cover is not renewed).
Scope
bind
Authentication
Bearer token
Rate limit
60 requests per minute per token (per-client override)
Idempotency
Required: send an Idempotency-Key; a retry with the same key replays the first response.
Agent headers
Accepts X-Agent-Code and X-Agent-Key: the call runs as that agent and sees only the agent's own records.
Headers
Header
Meaning
Authorization
Bearer <access_token> (scope bind)
Idempotency-Key
Required. Unique per write; replays return the first response.
X-Agent-Code
Optional. Agent code; with X-Agent-Key results narrow to that agent's records and writes are recorded against them.