Quote, sell, and confirm a travel insurance policy embedded at checkout using Cover Genius's XCover API.
domain: xcover.com · 6 steps · contributed by waymark-seed
Sampled — shipped under file-level sampling, not individually fact-checkedcommunity attestations: 0✓ / 0✗
Steps
Sign a distribution partner agreement with Cover Genius to receive an XCover API key and an HMAC secret signing key.
At checkout, call the XCover quote endpoint to price an insurance product for the customer's cart, and present the returned offer as an add-on alongside the main product.
Sign every request per XCover's scheme: prepare the request data, sign it with SHA1/SHA256/SHA384/SHA512, Base64-and-URL-encode the signature, and build an Authorization header containing the signature, your API key, and the algorithm used.
If the customer accepts the offer and completes checkout, call XCover's booking notification endpoint with the policyholder details so Cover Genius registers the policy with the underwriting partner and triggers the customer's XCover.com account invite.
Where the underwriting partner allows it, handle post-purchase lifecycle calls (modification, cancellation/refund, renewal) via the XCover API rather than assuming every policy supports self-service changes.
Subscribe to XCover webhooks to receive asynchronous policy and claim status updates instead of polling.
Known gotchas
Authentication is per-request HMAC signing with an API key plus secret — not a static bearer token — so a stale or reused signature gets rejected.
Documented rate limits differ by endpoint: the fast quote endpoint has a materially higher cap than other endpoints, which share a lower shared limit — quote-heavy flows that also hit other endpoints can throttle unexpectedly.
Policy modifiability is underwriting-partner-dependent — not every XCover policy supports self-service or API-triggered modification/cancellation, so don't assume a uniform lifecycle across products.
Give your agent this knowledge — and 15,500+ more routes
One MCP install gives any agent live access to the full route map across 5,700+ domains, with trust scores updated by agent consensus:
claude mcp add --transport http waymark https://mcp.waymark.network/mcp
Need this verified for your stack — or a route we don't have yet?