This is not our API. This repository is an independent, third-party profile of a company's publicly available API surface, maintained by API Evangelist. API Evangelist does not operate, host, resell, or support this company's APIs, and is not affiliated with or endorsed by the company unless stated on the profile.
Where the information came from. Everything here is assembled from material a member of the public can reach with a browser and no credentials — the company's own website, developer portal and documentation, the specifications it publishes for public use (OpenAPI, AsyncAPI, JSON Schema,
apis.json,llms.txtand similar), its public repositories, and its public status, pricing and changelog pages. Nothing here is obtained by breaching a system, defeating an access control, or using credentials of any kind.The rating is an independent assessment. The Kin Score and Agent Readiness rating are independently calculated scores of a company's public API artifacts, produced by API Evangelist against a published rubric. They are not certifications, endorsements, security assessments, or audits, and they score published artifacts — not the quality, safety, or security of the software.
Corrections, re-scores, and removal are free. No partnership, contract, or purchase is required, and you do not need to justify the request.
- Something wrong? Open an issue on this repository, or email info@apievangelist.com.
- Published something new? Ask for a re-score and we will re-run the rating.
- Want the listing taken down? Say so and we will honor it. The profile is reduced to your company name, a factual description, and a link to your own site, and the company is recorded as unrated — never scored zero for having asked.
Response times. Acknowledgement within one business day; removal or restriction within two business days; corrections and re-scores within five business days.
On a security or compliance team? Email info@apievangelist.com with security in the subject line and you will get a person, not a form. We will tell you exactly which public URLs this profile was built from so your team can see the same surface we did, and we will take the listing down on request while you work through it.
Full detail: Where this data comes from
Direct Line Group is a United Kingdom personal-lines and small-commercial general insurance carrier, founded in 1985 as the UK's first telephone-only motor insurer and listed on the London Stock Exchange from its 2012 IPO until Aviva plc completed its GBP 3.7 billion acquisition of the group on 1 July 2025. The group underwrites motor, home, pet, travel, landlord, breakdown and small-business insurance through the Direct Line, Churchill, Privilege, Darwin, By Miles, Direct Line for Business and Green Flag brands, and is regulated in its home market by the Financial Conduct Authority and the Prudential Regulation Authority.
APIs.json: https://raw.githubusercontent.com/api-evangelist/direct-line-group/refs/heads/main/apis.yml
- Insurance
- United Kingdom
- Property and Casualty
- Personal Lines
- Motor Insurance
- Home Insurance
- Carrier
- Roadside Assistance
- Partner Gated
- Created: 2026-07-25
- Modified: 2026-07-25
None. Direct Line Group publishes no public, self-serve API and no developer portal. This is not an omission in the record — it is the finding.
What was probed on 2026-07-25:
directlinegroup.co.ukandwww.directlinegroup.co.ukreturn HTTP 301 to https://www.aviva.com/. The corporate site was retired into Aviva after the acquisition completed on 1 July 2025, so every historical/developers,/api,/developer,/partnersand/integrationspath now lands on the Aviva homepage.developer.,developers.anddocs.directlinegroup.co.ukdo not exist in DNS (NXDOMAIN).api.directlinegroup.co.ukdoes exist and resolves todlg-production-load-balancer.lb.anypointdns.net— a MuleSoft Anypoint Platform production load balancer. It serves HTTP 403 Forbidden at the root, behind an expired TLS certificate, and requests a client certificate during the TLS handshake (mutual TLS)./openapi.json,/swagger.json,/api-docs,/console,/healthand/statusare all 404. This is an internal and partner integration gateway, not a developer surface.- Every live consumer brand site — directline.com, churchill.com, greenflag.com, privilege.com, darwin-insurance.com, bymiles.co.uk, directlineforbusiness.co.uk — returns 404 on
/developers,/apiand/partners. docs.directline.comreturns HTTP 200 but is a login wall titled "DirectLine - Login", with no reference documentation. It is not a developer portal.- No OpenAPI or Swagger document, no GraphQL endpoint, no gRPC or
.proto, no AsyncAPI, no webhook or event catalog, no public Postman workspace. No/.well-known/openid-configurationor/.well-known/oauth-authorization-serveron any brand host. - github.com/Direct-Line-Group exists (created 2019-07-03, "Direct Line org for all new code Projects") with zero public repositories.
A second, wider pass re-confirmed the "no public API" finding and changed three things.
- A second gated API host exists.
api.bymiles.co.ukresolves and is an Amazon API Gateway deployment — the root returns HTTP 403{"message":"Forbidden"}withx-amzn-errortype: ForbiddenExceptionand anx-amz-apigw-idheader, and/v1/*returns{"message":"Missing Authentication Token"}. Its certificate is valid. It is gated and undocumented, but it establishes a second, AWS-based integration estate alongside the group's MuleSoft gateway.api.darwin.co.ukalso resolves to AWS anycast addresses but presents no certificate for that SNI name. www.darwin.co.ukis not a group property, and was recorded in error in the first pass. It redirects toforsale.godaddy.comand its/llms.txtis a GoDaddy aftermarket for-sale notice. The real Darwin brand site is www.darwin-insurance.com, whose footer states policies are underwritten by U K Insurance Limited (FCA No. 536726) and arranged and administered by iGO4 Limited.- The group privacy notice was located at brandsprivacypolicy.co.uk/policy — published by U K Insurance Limited and covering Direct Line, Churchill, Privilege, Darwin and Green Flag.
Everything else re-confirmed negative: 49 /.well-known/ probes across 11 hosts returned zero discovery documents (the HTTP 200s on www.privilege.com and docs.directline.com are soft 404s serving HTML templates, verified by body inspection); no security.txt; no first-party package on npm, PyPI, Maven Central, NuGet, pkg.go.dev, RubyGems, Packagist or crates.io — note that npm hits for "direct-line" are all Microsoft Bot Framework Direct Line chat-protocol clients, an unrelated namespace collision; no vulnerability-disclosure programme and no trust center.
| Artifact | File | Method |
|---|---|---|
| Domain security | security/direct-line-group-domain-security.yml |
probed |
| Well-known probe matrix | well-known/direct-line-group-well-known.yml |
probed (zero documents) |
| Conformance | conformance/direct-line-group-conformance.yml |
derived |
| Packages | packages/direct-line-group-packages.yml |
searched (none exist) |
| llms.txt | llms/direct-line-group-llms.txt |
generated |
No openapi/, asyncapi/, graphql/, mcp/, skills/, scopes/, authentication/, sandbox/, changelog/, cli/, errors/ or lifecycle/ artifact exists, because there is no machine-readable contract and no published developer documentation to ground one in. Fabricating any of them would be the wrong outcome for this record.
No ACORD reference found. Nothing referencing ACORD, AL3, ACORD XML, ACORD certification or NGDS appears on any Direct Line Group or brand property. That is consistent with the UK personal-lines market, where broker/insurer data exchange runs on Polaris Standards and the imarket platform rather than on ACORD — and Direct Line Group is a direct writer that exited the brokered commercial channel entirely when it sold NIG and FarmWeb to RSA in September 2023.
None of the four insurance verbs is exposed through a public API. Quote and bind are consumer web and telephone journeys plus price-comparison-website placement (notably via the Darwin brand); issue and FNOL happen in logged-in customer self-service and by phone.
The UK has the FCA and PRA but no open-insurance obligation — the FCA's Open Finance work is still consultation, not rule. The country's only market-wide data and API infrastructure effort is the London Market modernization programme (Blueprint Two, PPL, Whitespace, Ki), and it is aimed at brokers and syndicates in the subscription market, not at developers. Direct Line Group does not participate in that market. As a direct-to-consumer carrier with no broker channel, it sits outside every seam that would otherwise produce a public API.