Quotor — Home & Auto Insurance Quotes
REMOTE · MCP.QUOTOR.AI
Real, bindable home & auto insurance quotes via MCP (Texas, expanding); human-completed bind.
Available components
Last scanned (19 hours ago)
Scores higher than 84% of remote servers
Reachable. Last reached 4 Nov 2026.
Category Finance and Payments
Recent critical change
Authorization (2 Oct 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (get_bind_link). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability81
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2737 tokens (~171/item across 16 items; 12 tools + 4 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities73
- Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail
- Supports UI / widget rendering.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 21 Oct 26 0
- Resource “quotor_quote_options” now points somewhere else: ui://quotor/options.56dc12dd.html → ui://quotor/options.6ac69d80.html security
- 17 Oct 26 +1
- Stability: 0.97 → pass security
- 16 Oct 26 −1
- Stability: pass → 0.97 functional
- 4 Oct 26 0
- The server rewrote its instructions, which are the text every model session reads security
- Tool “check_quote_status” rewrote its description, which is the text the model reads security
- Tool “get_option_details” rewrote its description, which is the text the model reads security
- Tool “request_bind_inline” rewrote its description, which is the text the model reads security
- 2 Oct 26 −3
- Authorization: partial → fail ▼ critical
- The server rewrote its instructions, which are the text every model session reads security
- Tool “check_eligibility” rewrote its description, which is the text the model reads security
- Tool “check_late_arrivals” rewrote its description, which is the text the model reads security
- Tool “check_quote_status” rewrote its description, which is the text the model reads security
- Tool “get_bind_link” rewrote its description, which is the text the model reads security
- Tool “get_option_details” rewrote its description, which is the text the model reads security
- Tool “get_quote_options” rewrote its description, which is the text the model reads security
- Tool “request_bind_inline” rewrote its description, which is the text the model reads security
- Tool “resume_quote” rewrote its description, which is the text the model reads security
- Tool “start_quote” rewrote its description, which is the text the model reads security
- Tool “submit_lead” rewrote its description, which is the text the model reads security
- Tool “update_quote” rewrote its description, which is the text the model reads security
- Tool “get_bind_link” is now declared destructive security
- Tool “request_bind_inline” is now declared destructive security
- Tool “submit_lead” is now declared destructive security
- Schema quality: 313 → 170 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- The server now declares the “resources” capability functional
- First check of Capabilities: pass functional
- Destructive annotations: pass → 100 functional
- New resource “quotor_bind_handoff” functional
- New resource “quotor_eligibility” functional
- New resource “quotor_option_detail” functional
- New resource “quotor_quote_options” functional
- Server version: 0.2.0 → 0.4.0 functional
- New tool “stop_contact” functional
- “check_eligibility” added an optional parameter “state” cosmetic
- “update_quote” reworded the description of “patch” cosmetic
- Tool “check_eligibility” changed its title: Check eligibility cosmetic
- Tool “check_late_arrivals” changed its title: Check for better late rates cosmetic
- Tool “check_quote_status” changed its title: Check quote status cosmetic
- Tool “get_bind_link” changed its title: Email a secure bind link cosmetic
- Tool “get_option_details” changed its title: Get option details cosmetic
- Tool “get_quote_options” changed its title: Get quote options cosmetic
- Tool “request_bind_inline” changed its title: Request to bind cosmetic
- Tool “resume_quote” changed its title: Resume a quote cosmetic
- Tool “start_quote” changed its title: Start a quote cosmetic
- Tool “submit_lead” changed its title: Ask an agent to follow up cosmetic
- Tool “update_quote” changed its title: Update quote details cosmetic
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 17 Sept 26 0
- Injection markers: unverified → pass ▲ security
- Stability: unverified → pass ▲ security
- Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 5 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
- Tool “get_bind_link” rewrote its description, which is the text the model reads security
- MCP protocol: unverified → fail ▼ functional
- Endpoint reachability: unreachable → reachable ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- “get_bind_link” reworded the description of “option_id” cosmetic
- “get_bind_link” reworded the description of “quote_id” cosmetic
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Probed https://mcp.quotor.ai
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=*.quotor.ai | CN=YE2,O=Let's Encrypt,C=US | 21 Oct 2026 | 19 Jan 2027 | ECDSA 256 | ECDSA-SHA384 | 5d890a47a7d813268de963156c8758b679e |
| SANs: *.quotor.ai, quotor.ai | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.quotor.ai. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| ai. | present | 1814, 3799 | 8, 8 | Verified |
| quotor.ai. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.quotor.ai | Verified | 200 | |
| http (plaintext) | http://mcp.quotor.ai | HTTPS enforced | 301 | https://mcp.quotor.ai/ |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
check_eligibility Check eligibility ~178
Checks whether Libertas Insurance, a licensed independent agency, can quote and bind home, auto, or bundled (home + auto) insurance in the customer's state. A good first step when someone asks about insurance prices, switching carriers, or shopping for coverage, before collecting personal details. Pass the customer's two-letter state if you know it; otherwise the result lists the states Libertas serves so you can ask. Returns whether quoting and binding are available, plus a plain-language explanation.
| Name | Type | Req | Description |
|---|---|---|---|
| intent | string | – | Whether you're checking ability to 'quote' or to 'bind' (default 'quote'). |
| product | string | yes | Line of business: 'auto', 'home', or 'bundle' (home + auto). |
| state | string | – | The customer's two-letter U.S. state, if known (e.g. 'TX'). |
| Name | Type | Req | Description |
|---|---|---|---|
| can_bind | boolean | – | – |
| can_quote | boolean | – | – |
| explanation | string | – | – |
| next_step | string | – | – |
| state | string|null | – | – |
No examples provided.
check_late_arrivals Check for better late rates ~106
Checks whether a slower carrier has come back with a better price since the options were first shown. has_improvement is true only when a new rate beats the earlier best by at least $100 a year or 5%. Useful when the customer hesitates over price after seeing options. If nothing improved, it's best to say so plainly rather than suggest a better price is coming.
| Name | Type | Req | Description |
|---|---|---|---|
| quote_id | string | yes | The quote session id to check for late-arriving carrier rates. |
| Name | Type | Req | Description |
|---|---|---|---|
| has_improvement | boolean | – | – |
| message | string | – | – |
| options | array | – | – |
No examples provided.
check_quote_status Check quote status ~275
Reports rating progress and, once available, the quote options. status is one of: - running: prices are still arriving; check again in a turn or two. - quoted: options are ready. While finishing.active is true, Libertas is still capturing exact rates, so ranges are estimates (the final number may land within or below the range, but that isn't guaranteed); check back later. Options marked 'verified' are exact, bindable numbers. - needs_data: carriers need more information first. needs.prompts lists each item, who it's for, and the update_quote field to set; apply the customer's answers, then call get_quote_options again. When needs.secure_link is present, that item (a driver's license number) is entered on Libertas's secure page instead of in chat: share the link with the customer, and rates re-run automatically once they submit it. - timeout or error: offer to try again with get_quote_options. Carriers appear as 'Carrier A-Home', 'Carrier B-Auto', and so on; the real carrier name is shown on Libertas's secure bind page.
| Name | Type | Req | Description |
|---|---|---|---|
| max_options | integer | – | Maximum options to return per line (1-5, default 3). |
| quote_id | string | yes | The quote session id to poll. |
| Name | Type | Req | Description |
|---|---|---|---|
| carrier_names_revealed | boolean | – | – |
| data_warnings | array | – | – |
| needs | object|null | – | – |
| options | array | – | – |
| progress_pct | integer | – | – |
| quote_id | string | – | – |
| status | string | – | – |
No examples provided.
get_bind_link Email a secure bind link ~132
Emails the customer a single-use secure link (valid 7 days) to Libertas's bind page, where they review the chosen option, see the carrier's name, and submit their request; a licensed agent completes the purchase. Uses the email address already on the quote and reports whether it was sent; no text message is sent. Useful when the customer wants to finish later or on another device. Nothing is purchased by this call.
| Name | Type | Req | Description |
|---|---|---|---|
| option_id | string | yes | Selected option to include on the secure bind-request page. |
| quote_id | string | yes | Quote whose saved customer email will receive the secure link. |
| Name | Type | Req | Description |
|---|---|---|---|
| bind_url | string | – | – |
| carrier_name | string | – | – |
| expires_at | string | – | – |
| option_id | string | – | – |
| quote_id | string | – | – |
No examples provided.
get_option_details Get option details ~93
Returns the coverage breakdown, deductibles, discounts applied, and payment plans for one option (for example opt_home_a), so the customer can compare before choosing. The carrier stays masked as 'Carrier A-Home' and so on.
| Name | Type | Req | Description |
|---|---|---|---|
| option_id | string | yes | The option to detail, e.g. 'opt_home_a' from get_quote_options. |
| quote_id | string | yes | The quote session id. |
| Name | Type | Req | Description |
|---|---|---|---|
| coverages | object | – | – |
| premium_annual | number|null | – | – |
| premium_monthly | number|null | – | – |
No examples provided.
get_quote_options Get quote options ~153
Starts rating with Libertas's panel of A-rated carriers and returns right away. First prices usually arrive within 30-90 seconds as honest ranges (the low end is the carrier's own preliminary figure). Libertas then keeps working for 2-10 minutes to capture exact, bindable rates directly from carrier systems, so options move from 'estimate' to 'verified'. Follow progress with check_quote_status every turn or two. Calling this again with unchanged details returns the run already in progress; changed details start a fresh run.
| Name | Type | Req | Description |
|---|---|---|---|
| max_options | integer | – | Maximum options to return per line (1-5, default 3). |
| quote_id | string | yes | The quote session id returned by start_quote. |
| Name | Type | Req | Description |
|---|---|---|---|
| expected_seconds | integer | – | – |
| message | string | – | – |
| quote_id | string | – | – |
| status | string | – | – |
No examples provided.
request_bind_inline Request to bind ~313
Sends the customer's chosen option(s) to Libertas's licensed team as a bind request and returns a secure checkout link on Libertas's site. This is a request, not a purchase: no payment is taken and no coverage starts from this call. A licensed agent verifies underwriting, collects payment on the secure page, and confirms coverage with the carrier, and the customer can change or cancel before then. Appropriate once the customer clearly picks an option (for example "I'll take Carrier A-Home"); pay_plan is required when an auto option is included.
| Name | Type | Req | Description |
|---|---|---|---|
| best_time | string | – | Best time to reach the customer, e.g. 'weekday afternoons'. |
| contact_pref | string | – | How the customer prefers to be reached: 'call', 'text', or 'email'. |
| customer_notes | string | – | Optional free-text notes from the customer for the agent. |
| option_id | string | – | The single option to bind (or use option_ids for a bundle/split). |
| option_ids | array | – | Multi-option bind. Either option_id or option_ids must be provided. |
| pay_plan | string | – | Pay plan: 'monthly_eft' or 'pay_in_full' (required when an auto line is included). |
| quote_id | string | yes | The quote session id. |
| water_selections | object | – | Customer-selected water-coverage add-ons for home options (service line, water seepage, foundation water, sewer backup); the agent configures these at the carrier portal at bind. |
| Name | Type | Req | Description |
|---|---|---|---|
| bind_url | string | – | – |
| quote_id | string | – | – |
No examples provided.
resume_quote Resume a quote ~91
Looks up a quote started earlier, by its quote_id. Returns the quote's status, whether options are ready, and what's still needed. Saved personal details are returned only to the same platform user who started the quote.
| Name | Type | Req | Description |
|---|---|---|---|
| quote_id | string | yes | The quote session id to resume. |
| verification | object | – | Ownership verification (email code, platform identity, or magic link); required to return PII. |
| Name | Type | Req | Description |
|---|---|---|---|
| quote_id | string | – | – |
| status | string | – | – |
| verification_required | boolean | – | – |
No examples provided.
start_quote Start a quote ~300
Opens a new home, auto, or bundled (home + auto) quote with Libertas Insurance and returns a quote_id that every later call uses. For outside assistants the result also carries short notices Libertas must give the customer; notices.how_to_use explains when each applies. What the quote needs (one topic at a time keeps it quick): 1. Full name and date of birth for each person on the policy, with their relationship to the main applicant. 2. Home: the address of the home to insure and whether it's a new purchase (if so, also where the customer lives today), mortgage/escrow, and roof age if known ("not sure" is fine). 3. Auto: year, make, and model of each vehicle, plus the name and date of birth of any other drivers. 4. Email, phone, and the requested coverage start date (policy_terms.effective_date, YYYY-MM-DD). Then call get_quote_options. Libertas never needs a Social Security number, driver's license number, or payment details in the conversation; when one is required, the customer enters it on Libertas's own secure page.
| Name | Type | Req | Description |
|---|---|---|---|
| meta_codes | array | – | Optional internal meta codes; ignored unless recognized. |
| product | string | yes | Line of business to quote: 'auto', 'home', or 'bundle'. |
| referral_source | string | – | Optional referral/partner source tag for attribution. |
| Name | Type | Req | Description |
|---|---|---|---|
| next_required_inputs | array | – | – |
| notices | object | – | – |
| quote_id | string | – | – |
| session_expires_at | string | – | – |
No examples provided.
stop_contact Stop contact from Libertas ~157
Records that the customer doesn't want Libertas to contact them by phone call, text, email, or any of these. Appropriate whenever the customer asks, in any wording, to stop hearing from Libertas; Libertas honors it across its follow-up systems. Pass the quote_id when there is one, or the email and/or phone the customer wants removed.
| Name | Type | Req | Description |
|---|---|---|---|
| channels | array | – | Which contact to stop: 'calls', 'texts', 'email', or 'all' (default 'all'). |
| string | – | Email address to stop contacting. | |
| phone | string | – | Phone number to stop calling or texting. |
| quote_id | string | – | The quote whose saved contact details should be opted out, if there is one. |
| Name | Type | Req | Description |
|---|---|---|---|
| channels | array | – | – |
| message | string | – | – |
| status | string | – | – |
No examples provided.
submit_lead Ask an agent to follow up ~269
Asks a licensed Libertas agent to follow up with the customer: for insurance Libertas doesn't quote in chat (renters, condo, landlord, umbrella, life, commercial, motorcycle, boat, RV, and more), or when a home/auto customer would rather talk to someone later. Needs what they're interested in plus an email or phone number. Creates a follow-up task; an agent typically reaches out within one business day by phone or email. Best to confirm with the customer before sending their contact details.
| Name | Type | Req | Description |
|---|---|---|---|
| string | – | Customer email. | |
| first_name | string | – | Customer first name. |
| interest | string | yes | What the customer wants us to follow up about (e.g. 'renters insurance', 'life insurance', 'commercial auto') |
| last_name | string | – | Customer last name. |
| notes | string | – | Optional notes for the follow-up. |
| phone | string | – | Customer phone number. |
| preferred_contact_method | string | – | How the customer prefers to be reached: 'phone', 'email', 'text', or 'any'. |
| preferred_contact_time | string | – | e.g. 'weekday afternoons', 'after 5pm', 'tomorrow morning' |
| quote_id | string | – | Optional quote id to associate the lead with. |
| Name | Type | Req | Description |
|---|---|---|---|
| lead_id | string|null | – | – |
| message | string | – | – |
| status | string | – | – |
No examples provided.
update_quote Update quote details ~323
Adds or changes details on a quote: people, drivers, vehicles, the property, coverages, discounts, prior insurance, and policy terms. The patch schema lists every field Libertas accepts. Safe to call repeatedly; the latest value for a field wins, and lists replace earlier lists. Returns which fields were applied, which were rejected and why, and whether the quote has enough to run. Credit scores, driving and claims records, and decoded vehicle or public-record property details come straight from data providers, so they aren't accepted here, and carrier choice is made by the rating engine. If the customer changes a coverage after prices come back, apply it here and call get_quote_options again; re-quoting is free and takes about a minute. Coverage choices are the customer's, and a licensed Libertas agent can advise on what limits make sense.
| Name | Type | Req | Description |
|---|---|---|---|
| meta_codes | array | – | Optional internal meta codes; ignored unless recognized. |
| patch | object | yes | Quote details to add or change. Branches: pni (main applicant), drivers[], vehicles[], property, coverages, discounts, policy_terms, prior_insurance, mortgage fields (has_mortgagee, mortgage_billed_b… |
| quote_id | string | yes | The quote session id returned by start_quote. |
| Name | Type | Req | Description |
|---|---|---|---|
| applied | array | – | – |
| completeness | number | – | – |
| not_applied_warning | string | – | – |
| quote_id | string | – | – |
| ready_to_quote | boolean | – | – |
| rejected | array | – | – |
No examples provided.
How do I install the Quotor — Home & Auto Insurance Quotes MCP server?
Quotor — Home & Auto Insurance Quotes is a hosted endpoint at https://mcp.quotor.ai/, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.quotor.ai
claude mcp add --transport http quotor-home-auto-insurance-quotes 'https://mcp.quotor.ai/'
What is the Quotor — Home & Auto Insurance Quotes MCP server?
Quotor — Home & Auto Insurance Quotes is an MCP server listed in the public MCP registry as io.github.quotor/home-auto-insurance-quotes. Real, bindable home & auto insurance quotes via MCP (Texas, expanding); human-completed bind. This page covers its hosted endpoint (https://mcp.quotor.ai).
Is the Quotor — Home & Auto Insurance Quotes MCP server safe to use?
Quotor — Home & Auto Insurance Quotes scores 81 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Quotor — Home & Auto Insurance Quotes MCP server expose?
Quotor — Home & Auto Insurance Quotes exposes 12 tools: check_eligibility, start_quote, update_quote, get_quote_options, check_quote_status, and 7 more. Their descriptions and schemas cost roughly 2,390 tokens of context every time the server is loaded.
Does the Quotor — Home & Auto Insurance Quotes MCP server require authentication?
No. We connected to Quotor — Home & Auto Insurance Quotes without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Quotor — Home & Auto Insurance Quotes MCP server still maintained?
Quotor — Home & Auto Insurance Quotes is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.