CrowBar | Overview | Corvus Skip to main content
Sign in

Corvus Insurance API

Quote-to-bind for Smart Cyber and Smart Tech E+O over a single GraphQL endpoint. Set productType to CYBER or TECH_EO; the brokerage you submit for decides the product variant.

Release notes Get your API key
The sandbox moved on 10-19-2026. Sandbox API keys issued before that date no longer work. Get your new key from the sandbox Developer Portal. Production keys are unchanged.

Environments

Each environment has its own Developer Portal, login and API key. All requests are HTTP POST.

This is a GraphQL API, not a REST API. Each environment has one endpoint, and every query and mutation is sent to it. Errors come back in the response body, usually with HTTP 200. See GraphQL for how requests and responses are shaped.

Environments
Environment GraphQL endpoint Developer Portal
Sandbox api-sandbox.corvusinsurance.com/developer
Production crowbar.corvusinsurance.com/developer

The webhook source IP addresses for each environment are shown to partners who sign in to the Developer Portal.

Make your first request

  1. 1

    Get invited

    Access is by invitation. Email api@corvusinsurance.com with each developer's name and which environments they need.

  2. 2

    Copy your API key

    Sign in to the Developer Portal for that environment, pick your API partner and reveal the key.

  3. 3

    Send the required headers

    Then create a client and a quote request. Send each operation as the query field of the body and its inputs as variables. See Authentication for what each header does.

Copied 
X-API-KEY: <your API key>X-USER-EMAIL: <email of the user making the request>X-USER-NAME: <name of the user making the request>X-API-VERSION: v2.0        # optionalContent-Type: application/jsonAccept: application/json

Explore the API

How quoting works

  • Set productType to CYBER or TECH_EO. The brokerage you submit for decides the variant: wholesale brokerages get Smart Cyber and Smart Tech E+O, and retail brokerages get CyberRisk and CyberRisk Tech, reported as CYBER_ES_RETAIL or TECH_EO_RETAIL.
  • Eligible Smart Cyber submissions auto-quote: limits up to and including $3M for companies up to $100M in annual revenue, and up to and including $2M for companies under $10M. Others are referred to an underwriter.
  • Smart Tech E+O does not auto-quote. Every submission is referred.
  • Referred quotes are reviewed within 24–48 hours and end in a quote or a decline.
  • Excess product lines (CYBER_EXCESS, CYBER_EXCESS_RETAIL, TECH_EO_EXCESS) are not supported through the API, even though they appear in the ProductType enum.

Latest release

All release notes
11-12-2026 API key only access to quote requests and policies

You can now retrieve and list your quote requests and policies with only your X-API-KEY. Send neither X-USER-EMAIL nor X-USER-NAME and you no longer need to know which broker a record belongs to, so the quoteRequestId or policyId in a webhook is enough to look it up. Requests that send both user headers work as before.

  • quoteRequest and policy return a record only if your API partner submitted it. Any other record returns an unauthorized error, even if it belongs to a brokerage you work with.
  • quoteRequests and policies require a brokerageId for a brokerage linked to your API partner, and list only that brokerage's records that your API partner submitted.
  • Other queries still need both user headers. Mutations always require both user headers so that every change is attributed to a broker. A mutation sent with only your API key is rejected.

See Authentication.