Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Quotor — Home & Auto Insurance Quotes

REMOTE · MCP.QUOTOR.AI

Real, bindable home & auto insurance quotes via MCP (Texas, expanding); human-completed bind.

Available components

0 this week 81 Trust /100

Last scanned (19 hours ago)

Scores higher than 84% of remote servers

Reachable. Last reached 4 Nov 2026.

Category Finance and Payments

Recent critical change

Authorization (2 Oct 2026). See the changelog before you install this server.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security63
Transport & Reachability100
Schema Quality & AI Usability81
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2737 tokens (~171/item across 16 items; 12 tools + 4 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
  • Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
  • Supports UI / widget rendering.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 21 Oct 26 0
    • Resource “quotor_quote_options” now points somewhere else: ui://quotor/options.56dc12dd.html → ui://quotor/options.6ac69d80.html security
  • 17 Oct 26 +1
    • Stability: 0.97 → pass security
  • 16 Oct 26 −1
    • Stability: pass → 0.97 functional
  • 4 Oct 26 0
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “check_quote_status” rewrote its description, which is the text the model reads security
    • Tool “get_option_details” rewrote its description, which is the text the model reads security
    • Tool “request_bind_inline” rewrote its description, which is the text the model reads security
  • 2 Oct 26 −3
    • Authorization: partial → fail ▼ critical
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “check_eligibility” rewrote its description, which is the text the model reads security
    • Tool “check_late_arrivals” rewrote its description, which is the text the model reads security
    • Tool “check_quote_status” rewrote its description, which is the text the model reads security
    • Tool “get_bind_link” rewrote its description, which is the text the model reads security
    • Tool “get_option_details” rewrote its description, which is the text the model reads security
    • Tool “get_quote_options” rewrote its description, which is the text the model reads security
    • Tool “request_bind_inline” rewrote its description, which is the text the model reads security
    • Tool “resume_quote” rewrote its description, which is the text the model reads security
    • Tool “start_quote” rewrote its description, which is the text the model reads security
    • Tool “submit_lead” rewrote its description, which is the text the model reads security
    • Tool “update_quote” rewrote its description, which is the text the model reads security
    • Tool “get_bind_link” is now declared destructive security
    • Tool “request_bind_inline” is now declared destructive security
    • Tool “submit_lead” is now declared destructive security
    • Schema quality: 313 → 170 ▲ functional
    • Schema quality: unverified → 100 ▲ functional
    • The server now declares the “resources” capability functional
    • First check of Capabilities: pass functional
    • Destructive annotations: pass → 100 functional
    • New resource “quotor_bind_handoff” functional
    • New resource “quotor_eligibility” functional
    • New resource “quotor_option_detail” functional
    • New resource “quotor_quote_options” functional
    • Server version: 0.2.0 → 0.4.0 functional
    • New tool “stop_contact” functional
    • “check_eligibility” added an optional parameter “state” cosmetic
    • “update_quote” reworded the description of “patch” cosmetic
    • Tool “check_eligibility” changed its title: Check eligibility cosmetic
    • Tool “check_late_arrivals” changed its title: Check for better late rates cosmetic
    • Tool “check_quote_status” changed its title: Check quote status cosmetic
    • Tool “get_bind_link” changed its title: Email a secure bind link cosmetic
    • Tool “get_option_details” changed its title: Get option details cosmetic
    • Tool “get_quote_options” changed its title: Get quote options cosmetic
    • Tool “request_bind_inline” changed its title: Request to bind cosmetic
    • Tool “resume_quote” changed its title: Resume a quote cosmetic
    • Tool “start_quote” changed its title: Start a quote cosmetic
    • Tool “submit_lead” changed its title: Ask an agent to follow up cosmetic
    • Tool “update_quote” changed its title: Update quote details cosmetic
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 17 Sept 26 0
    • Injection markers: unverified → pass ▲ security
    • Stability: unverified → pass ▲ security
    • Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
    • Tool “get_bind_link” rewrote its description, which is the text the model reads security
    • MCP protocol: unverified → fail ▼ functional
    • Endpoint reachability: unreachable → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • “get_bind_link” reworded the description of “option_id” cosmetic
    • “get_bind_link” reworded the description of “quote_id” cosmetic
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Probed https://mcp.quotor.ai

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=*.quotor.ai CN=YE2,O=Let's Encrypt,C=US 21 Oct 2026 19 Jan 2027 ECDSA 256 ECDSA-SHA384 5d890a47a7d813268de963156c8758b679e
SANs: *.quotor.ai, quotor.ai
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd

Background: What to check on a remote MCP endpoint →

DNSSEC insecure

Validation of mcp.quotor.ai. — Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
ai. present 1814, 3799 8, 8 Verified
quotor.ai. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result No authorisation required
HTTP status 200
Header Value
strict-transport-security max-age=31536000; includeSubDomains; preload

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.quotor.ai Verified 200
http (plaintext) http://mcp.quotor.ai HTTPS enforced 301 https://mcp.quotor.ai/
MCP tools · 12 exposed · ~2,390 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
check_eligibility ~178

Checks whether Libertas Insurance, a licensed independent agency, can quote and bind home, auto, or bundled (home + auto) insurance in the customer's state. A good first step when someone asks about insurance prices, switching carriers, or shopping for coverage, before collecting personal details. Pass the customer's two-letter state if you know it; otherwise the result lists the states Libertas serves so you can ask. Returns whether quoting and binding are available, plus a plain-language explanation.

NameTypeReqDescription
intentstring–Whether you're checking ability to 'quote' or to 'bind' (default 'quote').
productstringyesLine of business: 'auto', 'home', or 'bundle' (home + auto).
statestring–The customer's two-letter U.S. state, if known (e.g. 'TX').
NameTypeReqDescription
can_bindboolean––
can_quoteboolean––
explanationstring––
next_stepstring––
statestring|null––

No examples provided.

check_late_arrivals ~106

Checks whether a slower carrier has come back with a better price since the options were first shown. has_improvement is true only when a new rate beats the earlier best by at least $100 a year or 5%. Useful when the customer hesitates over price after seeing options. If nothing improved, it's best to say so plainly rather than suggest a better price is coming.

NameTypeReqDescription
quote_idstringyesThe quote session id to check for late-arriving carrier rates.
NameTypeReqDescription
has_improvementboolean––
messagestring––
optionsarray––

No examples provided.

check_quote_status ~275

Reports rating progress and, once available, the quote options. status is one of: - running: prices are still arriving; check again in a turn or two. - quoted: options are ready. While finishing.active is true, Libertas is still capturing exact rates, so ranges are estimates (the final number may land within or below the range, but that isn't guaranteed); check back later. Options marked 'verified' are exact, bindable numbers. - needs_data: carriers need more information first. needs.prompts lists each item, who it's for, and the update_quote field to set; apply the customer's answers, then call get_quote_options again. When needs.secure_link is present, that item (a driver's license number) is entered on Libertas's secure page instead of in chat: share the link with the customer, and rates re-run automatically once they submit it. - timeout or error: offer to try again with get_quote_options. Carriers appear as 'Carrier A-Home', 'Carrier B-Auto', and so on; the real carrier name is shown on Libertas's secure bind page.

NameTypeReqDescription
max_optionsinteger–Maximum options to return per line (1-5, default 3).
quote_idstringyesThe quote session id to poll.
NameTypeReqDescription
carrier_names_revealedboolean––
data_warningsarray––
needsobject|null––
optionsarray––
progress_pctinteger––
quote_idstring––
statusstring––

No examples provided.

get_bind_link ~132

Emails the customer a single-use secure link (valid 7 days) to Libertas's bind page, where they review the chosen option, see the carrier's name, and submit their request; a licensed agent completes the purchase. Uses the email address already on the quote and reports whether it was sent; no text message is sent. Useful when the customer wants to finish later or on another device. Nothing is purchased by this call.

NameTypeReqDescription
option_idstringyesSelected option to include on the secure bind-request page.
quote_idstringyesQuote whose saved customer email will receive the secure link.
NameTypeReqDescription
bind_urlstring––
carrier_namestring––
expires_atstring––
option_idstring––
quote_idstring––

No examples provided.

get_option_details ~93

Returns the coverage breakdown, deductibles, discounts applied, and payment plans for one option (for example opt_home_a), so the customer can compare before choosing. The carrier stays masked as 'Carrier A-Home' and so on.

NameTypeReqDescription
option_idstringyesThe option to detail, e.g. 'opt_home_a' from get_quote_options.
quote_idstringyesThe quote session id.
NameTypeReqDescription
coveragesobject––
premium_annualnumber|null––
premium_monthlynumber|null––

No examples provided.

get_quote_options ~153

Starts rating with Libertas's panel of A-rated carriers and returns right away. First prices usually arrive within 30-90 seconds as honest ranges (the low end is the carrier's own preliminary figure). Libertas then keeps working for 2-10 minutes to capture exact, bindable rates directly from carrier systems, so options move from 'estimate' to 'verified'. Follow progress with check_quote_status every turn or two. Calling this again with unchanged details returns the run already in progress; changed details start a fresh run.

NameTypeReqDescription
max_optionsinteger–Maximum options to return per line (1-5, default 3).
quote_idstringyesThe quote session id returned by start_quote.
NameTypeReqDescription
expected_secondsinteger––
messagestring––
quote_idstring––
statusstring––

No examples provided.

request_bind_inline ~313

Sends the customer's chosen option(s) to Libertas's licensed team as a bind request and returns a secure checkout link on Libertas's site. This is a request, not a purchase: no payment is taken and no coverage starts from this call. A licensed agent verifies underwriting, collects payment on the secure page, and confirms coverage with the carrier, and the customer can change or cancel before then. Appropriate once the customer clearly picks an option (for example "I'll take Carrier A-Home"); pay_plan is required when an auto option is included.

NameTypeReqDescription
best_timestring–Best time to reach the customer, e.g. 'weekday afternoons'.
contact_prefstring–How the customer prefers to be reached: 'call', 'text', or 'email'.
customer_notesstring–Optional free-text notes from the customer for the agent.
option_idstring–The single option to bind (or use option_ids for a bundle/split).
option_idsarray–Multi-option bind. Either option_id or option_ids must be provided.
pay_planstring–Pay plan: 'monthly_eft' or 'pay_in_full' (required when an auto line is included).
quote_idstringyesThe quote session id.
water_selectionsobject–Customer-selected water-coverage add-ons for home options (service line, water seepage, foundation water, sewer backup); the agent configures these at the carrier portal at bind.
NameTypeReqDescription
bind_urlstring––
quote_idstring––

No examples provided.

resume_quote ~91

Looks up a quote started earlier, by its quote_id. Returns the quote's status, whether options are ready, and what's still needed. Saved personal details are returned only to the same platform user who started the quote.

NameTypeReqDescription
quote_idstringyesThe quote session id to resume.
verificationobject–Ownership verification (email code, platform identity, or magic link); required to return PII.
NameTypeReqDescription
quote_idstring––
statusstring––
verification_requiredboolean––

No examples provided.

start_quote ~300

Opens a new home, auto, or bundled (home + auto) quote with Libertas Insurance and returns a quote_id that every later call uses. For outside assistants the result also carries short notices Libertas must give the customer; notices.how_to_use explains when each applies. What the quote needs (one topic at a time keeps it quick): 1. Full name and date of birth for each person on the policy, with their relationship to the main applicant. 2. Home: the address of the home to insure and whether it's a new purchase (if so, also where the customer lives today), mortgage/escrow, and roof age if known ("not sure" is fine). 3. Auto: year, make, and model of each vehicle, plus the name and date of birth of any other drivers. 4. Email, phone, and the requested coverage start date (policy_terms.effective_date, YYYY-MM-DD). Then call get_quote_options. Libertas never needs a Social Security number, driver's license number, or payment details in the conversation; when one is required, the customer enters it on Libertas's own secure page.

NameTypeReqDescription
meta_codesarray–Optional internal meta codes; ignored unless recognized.
productstringyesLine of business to quote: 'auto', 'home', or 'bundle'.
referral_sourcestring–Optional referral/partner source tag for attribution.
NameTypeReqDescription
next_required_inputsarray––
noticesobject––
quote_idstring––
session_expires_atstring––

No examples provided.

stop_contact ~157

Records that the customer doesn't want Libertas to contact them by phone call, text, email, or any of these. Appropriate whenever the customer asks, in any wording, to stop hearing from Libertas; Libertas honors it across its follow-up systems. Pass the quote_id when there is one, or the email and/or phone the customer wants removed.

NameTypeReqDescription
channelsarray–Which contact to stop: 'calls', 'texts', 'email', or 'all' (default 'all').
emailstring–Email address to stop contacting.
phonestring–Phone number to stop calling or texting.
quote_idstring–The quote whose saved contact details should be opted out, if there is one.
NameTypeReqDescription
channelsarray––
messagestring––
statusstring––

No examples provided.

submit_lead ~269

Asks a licensed Libertas agent to follow up with the customer: for insurance Libertas doesn't quote in chat (renters, condo, landlord, umbrella, life, commercial, motorcycle, boat, RV, and more), or when a home/auto customer would rather talk to someone later. Needs what they're interested in plus an email or phone number. Creates a follow-up task; an agent typically reaches out within one business day by phone or email. Best to confirm with the customer before sending their contact details.

NameTypeReqDescription
emailstring–Customer email.
first_namestring–Customer first name.
intereststringyesWhat the customer wants us to follow up about (e.g. 'renters insurance', 'life insurance', 'commercial auto')
last_namestring–Customer last name.
notesstring–Optional notes for the follow-up.
phonestring–Customer phone number.
preferred_contact_methodstring–How the customer prefers to be reached: 'phone', 'email', 'text', or 'any'.
preferred_contact_timestring–e.g. 'weekday afternoons', 'after 5pm', 'tomorrow morning'
quote_idstring–Optional quote id to associate the lead with.
NameTypeReqDescription
lead_idstring|null––
messagestring––
statusstring––

No examples provided.

update_quote ~323

Adds or changes details on a quote: people, drivers, vehicles, the property, coverages, discounts, prior insurance, and policy terms. The patch schema lists every field Libertas accepts. Safe to call repeatedly; the latest value for a field wins, and lists replace earlier lists. Returns which fields were applied, which were rejected and why, and whether the quote has enough to run. Credit scores, driving and claims records, and decoded vehicle or public-record property details come straight from data providers, so they aren't accepted here, and carrier choice is made by the rating engine. If the customer changes a coverage after prices come back, apply it here and call get_quote_options again; re-quoting is free and takes about a minute. Coverage choices are the customer's, and a licensed Libertas agent can advise on what limits make sense.

NameTypeReqDescription
meta_codesarray–Optional internal meta codes; ignored unless recognized.
patchobjectyesQuote details to add or change. Branches: pni (main applicant), drivers[], vehicles[], property, coverages, discounts, policy_terms, prior_insurance, mortgage fields (has_mortgagee, mortgage_billed_b…
quote_idstringyesThe quote session id returned by start_quote.
NameTypeReqDescription
appliedarray––
completenessnumber––
not_applied_warningstring––
quote_idstring––
ready_to_quoteboolean––
rejectedarray––

No examples provided.

Install

How do I install the Quotor — Home & Auto Insurance Quotes MCP server?

Quotor — Home & Auto Insurance Quotes is a hosted endpoint at https://mcp.quotor.ai/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · mcp.quotor.ai

# add to Claude Code
claude mcp add --transport http quotor-home-auto-insurance-quotes 'https://mcp.quotor.ai/'
Common questions

What is the Quotor — Home & Auto Insurance Quotes MCP server?

Quotor — Home & Auto Insurance Quotes is an MCP server listed in the public MCP registry as io.github.quotor/home-auto-insurance-quotes. Real, bindable home & auto insurance quotes via MCP (Texas, expanding); human-completed bind. This page covers its hosted endpoint (https://mcp.quotor.ai).

Is the Quotor — Home & Auto Insurance Quotes MCP server safe to use?

Quotor — Home & Auto Insurance Quotes scores 81 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Quotor — Home & Auto Insurance Quotes MCP server expose?

Quotor — Home & Auto Insurance Quotes exposes 12 tools: check_eligibility, start_quote, update_quote, get_quote_options, check_quote_status, and 7 more. Their descriptions and schemas cost roughly 2,390 tokens of context every time the server is loaded.

Does the Quotor — Home & Auto Insurance Quotes MCP server require authentication?

No. We connected to Quotor — Home & Auto Insurance Quotes without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

Is the Quotor — Home & Auto Insurance Quotes MCP server still maintained?

Quotor — Home & Auto Insurance Quotes is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.