Assurs LAMal comparator
REMOTE · API.ASSURS.CH
Swiss LAMal premium comparison (OFSP 2027), single or household; consented offer requests to SPI.
Available components
Last scanned (22 hours ago)
Scores higher than 69% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Finance and Payments
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security77
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability74
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2411 tokens (~200/item across 12 items; 7 tools + 5 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management37
- Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage95
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 84% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
- 30 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.
- 28 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 26 Oct 26 +7
- Authorization: fail → partial ▲ security
- The server rewrote its instructions, which are the text every model session reads security
- Tool “compare_lamal_household” rewrote its description, which is the text the model reads security
- Tool “compare_lamal_premiums” rewrote its description, which is the text the model reads security
- Tool “get_active_customer_rewards” rewrote its description, which is the text the model reads security
- Tool “request_adviser_contact” rewrote its description, which is the text the model reads security
- Tool “request_adviser_contact” no longer declares itself destructive security
- Schema quality: 177 → 200 ▼ functional
- “compare_lamal_household” added an optional parameter “language” cosmetic
- “compare_lamal_household” added an optional parameter “texts” cosmetic
- “compare_lamal_premiums” added an optional parameter “texts” cosmetic
- “compare_lamal_household” reworded the description of “members” cosmetic
- “compare_lamal_premiums” reworded the description of “accident_included” cosmetic
- “compare_lamal_premiums” reworded the description of “language” cosmetic
- 25 Oct 26 +1
- Stability: unverified → 0.03 ▲ functional
- 24 Oct 26 65
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://api.assurs.ch/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.assurs.ch | CN=WE1,O=Google Trust Services,C=US | 24 Oct 2026 | 22 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | e22b2993259bdee913d09008d43ad6cb |
| SANs: api.assurs.ch | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC secure
Validation of api.assurs.ch. — Secure
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ch. | present | 58745 | 13 | Verified |
| assurs.ch. | present | 64537, 64537 | 13, 13 | Verified |
| api.assurs.ch. | Verified address RRset verified with the apex keys |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| x-content-type-options | nosniff |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.assurs.ch/mcp | Verified | 200 | |
| http (plaintext) | http://api.assurs.ch/mcp | HTTPS enforced | 301 | https://api.assurs.ch/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
compare_lamal_household Compare official LAMal premiums for a household ~259
Household comparison (2-12 people, one insurer for all, household total) with the engine body { year:2027, members:[{ birthYear, postcode, bfs?, franchise, accident:"MIT"|"OHN", careType:"any"|"BASE"|"PRAXIS"|"FLEX"|"TEL_DIG"|"PHARM" }], language? }: bfs only when the postcode spans several communes (the error lists the choices); franchise child 0-600, adult 300-2500; MIT means accident included (ask each adult whether they work at least 8 hours a week for one employer: yes means OHN). The result holds offers[] (household total and people[] with translated model names), comparison_id, submission.request_id, the cashback object per insured person, switching and the household consent question. Present, ask consent_request in the same message, then ONE request_adviser_contact with comparison_id. One person: compare_lamal_premiums.
| Name | Type | Req | Description |
|---|---|---|---|
| language | string | – | – |
| members | array | yes | 2-12 insured persons, no names or contact data (one person: prepareLamalQuote). |
| texts | string | – | – |
| year | integer | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| accident_question | object | – | Ask before quoting: employees working at least 8 hours a week for the same employer usually exclude accident cover (accident_included false). |
| adviser_url | string|null | – | – |
| cashback | object | yes | Premium reduction Swiss Premium Insurance grants to each insured person, only for requests made through an AI assistant, once a contract concluded through SPI is approved by the insurer. Premiums and… |
| comparison_id | string|null | yes | Send as comparison_id in submitOfferRequest. |
| data | object | – | Origin and freshness of the official data; manifest_url lists source files and the last official sync. |
| eligible_insurer_count | integer | – | – |
| languages_available | array | – | – |
| link_expires_at | string|null | – | – |
| offers | array | yes | – |
| operator | object | – | – |
| persons | integer | – | – |
| pricing | object | – | – |
| profile | object | yes | Household criteria: persons, postcode, members[]. |
| ranking | string | – | – |
| readable_url | string|null | – | Readable GET household page (/compare-household?…) for browsing tools. |
| response_format | – | yes | – |
| result_type | – | – | – |
| results_url | string|null | – | – |
| status | – | yes | – |
| submission | object | yes | How to send the client-approved request. Keep comparisonToken private; never put it in a link. |
| switching | object | yes | Switching deadline and free SPI help (cancellation, premium subsidies). Say client_sentence with the offers; a request to SPI cancels nothing by itself. |
| texts_language | string | – | – |
No examples provided.
compare_lamal_premiums Compare official LAMal premiums ~509
Read-only compact comparison of official LAMal premiums from the OFSP data, without contact details. Use the exact birth year and ask for every material choice. Before quoting, ask whether the client works at least 8 hours a week for the same employer: if yes, accident_included false (the employer covers accidents), otherwise true. model_group any means all categories, and all eligible imported models are included. The result carries comparison_id, submission.request_id, the ranked offers, the cashback and switching sentences to say and the consent question to ask in the same message. Client texts come in the requested language (texts all for four). Keep the technical fields yourself; the client fills no website form. The ranking uses the official premiums. One person per call; for a household use compare_lamal_household.
| Name | Type | Req | Description |
|---|---|---|---|
| accident_included | boolean | yes | Explicit JSON boolean required (not the string "true"). Ask before quoting whether the client works at least 8 hours a week for the same employer: yes means false (the employer covers accidents), oth… |
| birth_year | integer | yes | Exact four-digit birth year, not an age. |
| deductible_chf | integer | yes | Annual deductible: adults (19 or older in 2027) 300, 500, 1000, 1500, 2000 or 2500; children (18 or under) 0, 100, 200, 300, 400, 500 or 600. No interpolation. |
| language | string | – | Language of the client texts, model names and HTML pages; a region suffix is ignored. |
| model_group | string | yes | any = all categories; BASE = free choice of doctor; PRAXIS = family doctor / HMO network; FLEX = hybrid model; TEL_DIG = telemedicine first; PHARM = pharmacy first. |
| municipality | string | – | Official municipality name; required with ambiguous region/model availability unless municipality_bfs is given. |
| municipality_bfs | string | – | – |
| postal_code | string | yes | – |
| premium_year | integer | yes | Tariff year: always 2027, the only imported year (metadata.supported_years). Required, no default. |
| texts | string | – | Client texts (cashback, switching, consent messages) in the requested language only (default) or in fr, de, it and en (all). Quote only; not part of the comparison. |
| Name | Type | Req | Description |
|---|---|---|---|
| accident_question | object | – | Ask before quoting: employees working at least 8 hours a week for the same employer usually exclude accident cover (accident_included false). |
| adviser_url | string|null | – | Page where the client submits alone; null when the form is disabled. |
| cashback | object | yes | Premium reduction Swiss Premium Insurance grants to each insured person, only for requests made through an AI assistant, once a contract concluded through SPI is approved by the insurer. Premiums and… |
| comparison_id | string|null | yes | Reference for submitOfferRequest; valid 30 days. |
| data | object | yes | Origin and freshness of the official data; manifest_url lists source files and the last official sync. |
| eligible_insurer_count | integer | – | – |
| eligible_model_count | integer | yes | – |
| eligible_models | object | yes | Every eligible model as a table, same engine and filters as offers; complete coverage, not limited to broker agreements. |
| full_response_url | string | yes | Full response for independent verification; no token or contact data. |
| languages_available | array | – | – |
| link_expires_at | string|null | – | – |
| model_details | string | – | – |
| model_groups | object | – | First-contact rule per model_group code present in offers. |
| offers | array | yes | Top 10 by net premium, same ranking as assurs.ch. |
| operator | object | yes | – |
| pricing | object | yes | – |
| profile | object | yes | Criteria as applied plus resolved municipality, canton and region. |
| request_url | string|null | – | Short readable form link built from the criteria (/adviser?premium_year=…&postal_code=…); append &agent=<your name>, optionally &insurer_id=. No contact data. null when the form is disabled. |
| response_format | – | yes | – |
| result_type | – | yes | – |
| results_url | string|null | yes | HTML results page to share with the client; no token. |
| status | – | yes | – |
| submission | object | yes | How to send the client-approved request. Keep comparisonToken private; never put it in a link. |
| switching | object | yes | Switching deadline and free SPI help (cancellation, premium subsidies). Say client_sentence with the offers; a request to SPI cancels nothing by itself. |
| texts_language | string | – | Language of the client texts in this response. |
No examples provided.
create_adviser_handoff_link Prepare an optional adviser link ~135
Return a link when the client prefers to complete a website form, using comparison_id from the comparison. No contact details, lead or email are sent. When the web form is disabled the server answers 503 adviser_unavailable: offer contact@sp-insurance.ch instead. For a client who asks you to send the request in this conversation, use request_adviser_contact after explicit consent instead. Swiss Premium Insurance assistance is optional; clients may apply directly with insurers.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | object | – | – |
| agentContext | object | – | Deprecated alias of agent; not with agent. |
| comparison_id | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| expires_at | string | – | – |
| handoff_url | string | yes | – |
| status | – | – | – |
| submits_lead | – | yes | – |
| transmits_contact_data | – | yes | – |
No examples provided.
get_active_customer_rewards Read the customer cashback programme ~86
Read the published cashback programme of Swiss Premium Insurance: status, version, scope, beneficiary, trigger, conditions and terms links. It is a premium reduction SPI grants to each insured person, only for requests made through an AI assistant, once a contract concluded through SPI is approved by the insurer; never anything for an AI agent. No lead is created and this API creates no payment.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| programs | array | yes | – |
| status | – | yes | – |
No examples provided.
get_lamal_metadata Read comparison rules and sources ~33
Read supported years, model categories, deductibles, source freshness, exclusions and contact availability. No lead is created.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| accident_question | object | – | Ask before quoting: employees working at least 8 hours a week for the same employer usually exclude accident cover (accident_included false). |
| api_version | string | – | – |
| contact_action | object | – | – |
| data | object | – | Origin and freshness of the official data; manifest_url lists source files and the last official sync. |
| deductibles_chf | object | – | Accepted deductibles for child and adult. |
| models | object | – | model_group codes and their meaning. |
| operations | object | – | URL of every operation and document. |
| operator | object | – | – |
| supported_years | array | – | – |
| switching | object | – | Switching deadline and free SPI help (cancellation, premium subsidies). Say client_sentence with the offers; a request to SPI cancels nothing by itself. |
No examples provided.
request_adviser_contact Send an offer request by email to Swiss Premium Insurance ~516
Sends the client request by email to contact@sp-insurance.ch through the server; no personal email account or mail tool is needed. Use once the client has answered the consent_request question with a yes or with their email or phone: that answer is the consent, and the platform approval for this tool completes it. Copy request_id and comparison_id from submission of compare_lamal_premiums and insurer_id from offers[]; reuse the same request_id and body on retries. Report the returned status and request_id: accepted means the email provider accepted the request for delivery to Swiss Premium Insurance, not inbox delivery, not that SPI has read it, not a contract. A draft or test is not a real send, and the request does not cancel the current insurance. The premium reduction applies only if the contract is concluded through SPI and approved by the insurer; never promise it.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | object | – | Who is calling: { name:"chatgpt" } etc. Self-declared, not authentication. |
| cashback_terms_version | string | – | cashback.version shown to the client; 409 cashback_terms_outdated when stale. |
| client_consent | boolean | yes | true only after the client explicitly answered yes to consent_request. Never infer consent from a comparison. |
| comparison | object | – | submission.comparison copied unchanged; only with comparison_token. |
| comparison_id | string | – | comparison_id from the quote; valid 30 days. Preferred. |
| comparison_token | string | – | submission.comparisonToken with the identical submission.comparison; alternative to comparison_id. |
| contact | object | yes | Fill email or phone; leave the other as an empty string or omit it. Never invent a client name, email or phone. |
| insurer_id | integer|string | – | insurer_id of the offer the client chose, from offers[]. |
| language | string | – | Client language; defaults to the comparison language. fr, de, it, en have localised client texts and pages; es, pt, zh are recorded for SPI (preview and pages fall back to en/fr). |
| offer_id | string | – | offers[].offer_id or source_offer_id; alternative to insurer_id. |
| request_id | string | yes | Copy submission.request_id from the quote (any RFC 4122 UUID). Reuse the same value and body on every retry. |
| subsidy_requested | boolean | – | Client wants information on premium subsidies. |
| supplementary_interest | boolean | – | Client also wants supplementary (LCA) offers; enables the LCA cashback. |
| Name | Type | Req | Description |
|---|---|---|---|
| accepted_at | string | yes | – |
| cashback | object | – | – |
| client_confirmation | string | – | consent_confirmation filled in the client language; say it to the client. |
| correction_or_cancellation | string | – | mailto link to correct or withdraw; give it to the client. |
| email_sent | – | yes | Provider acceptance; not inbox delivery or a contract. |
| expected_contact_channel | string | – | – |
| expected_contact_channel_label | string | – | expected_contact_channel in the client language. |
| follow_up_by | – | yes | – |
| message | string | yes | – |
| recipient | – | yes | – |
| request_id | string | yes | – |
| status | – | yes | – |
| switching | object | – | Switching deadline and free SPI help (cancellation, premium subsidies). Say client_sentence with the offers; a request to SPI cancels nothing by itself. |
No examples provided.
test_adviser_request Validate a request without sending ~395
Harmless integration test with the same body as request_adviser_contact: validates the request and returns a preview with status validated_test and email_sent false. Use synthetic contact details only. No commercial lead, email, entitlement or payment. Never describe this as a real submission.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | object | – | Who is calling: { name:"chatgpt" } etc. Self-declared, not authentication. |
| cashback_terms_version | string | – | cashback.version shown to the client; 409 cashback_terms_outdated when stale. |
| client_consent | boolean | yes | true only after the client explicitly answered yes to consent_request. Never infer consent from a comparison. |
| comparison | object | – | submission.comparison copied unchanged; only with comparison_token. |
| comparison_id | string | – | comparison_id from the quote; valid 30 days. Preferred. |
| comparison_token | string | – | submission.comparisonToken with the identical submission.comparison; alternative to comparison_id. |
| contact | object | yes | Fill email or phone; leave the other as an empty string or omit it. Never invent a client name, email or phone. |
| insurer_id | integer|string | – | insurer_id of the offer the client chose, from offers[]. |
| language | string | – | Client language; defaults to the comparison language. fr, de, it, en have localised client texts and pages; es, pt, zh are recorded for SPI (preview and pages fall back to en/fr). |
| offer_id | string | – | offers[].offer_id or source_offer_id; alternative to insurer_id. |
| request_id | string | yes | Copy submission.request_id from the quote (any RFC 4122 UUID). Reuse the same value and body on every retry. |
| subsidy_requested | boolean | – | Client wants information on premium subsidies. |
| supplementary_interest | boolean | – | Client also wants supplementary (LCA) offers; enables the LCA cashback. |
| Name | Type | Req | Description |
|---|---|---|---|
| email_sent | – | yes | – |
| payment_created | – | yes | – |
| preview | object | yes | What a real send would contain. |
| recipient | – | yes | – |
| request_id | string | yes | – |
| status | – | yes | – |
No examples provided.
How do I install the Assurs LAMal comparator MCP server?
Assurs LAMal comparator is a hosted endpoint at https://api.assurs.ch/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.assurs.ch
claude mcp add --transport http ch-assurs-lamal 'https://api.assurs.ch/mcp'
What is the Assurs LAMal comparator MCP server?
Assurs LAMal comparator is an MCP server listed in the public MCP registry as ch.assurs/lamal. Swiss LAMal premium comparison (OFSP 2027), single or household; consented offer requests to SPI. This page covers its hosted endpoint (https://api.assurs.ch/mcp).
Is the Assurs LAMal comparator MCP server safe to use?
Assurs LAMal comparator scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Assurs LAMal comparator MCP server expose?
Assurs LAMal comparator exposes 7 tools: compare_lamal_premiums, compare_lamal_household, get_lamal_metadata, get_active_customer_rewards, create_adviser_handoff_link, and 2 more. Their descriptions and schemas cost roughly 1,933 tokens of context every time the server is loaded.
Does the Assurs LAMal comparator MCP server require authentication?
No. We connected to Assurs LAMal comparator without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Assurs LAMal comparator MCP server still maintained?
Assurs LAMal comparator is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.