Confused.com API integration services (Open Insurance / UK)

Deliverables checklist

• OpenAPI 3.1 specification covering login, quote, vehicle and reminder endpoints
• Protocol report: TLS pinning, mobile token rotation, certificate transparency notes
• Runnable Python and Node.js source for car-insurance quotes plus VRM lookup
• Postman collection, sandbox fixtures and a regression test pack
• Consent & retention guidance aligned with UK GDPR and the FCA Consumer Duty

API example: car insurance quote (pseudocode)

// 1. Auth: exchange app credentials for a short-lived bearer token
POST /api/v1/confused/auth/token
Content-Type: application/json
{
  "client_id": "of-lab-xxxx",
  "client_secret": "***",
  "grant_type": "client_credentials"
}
=> { "access_token": "eyJhbGciOi...", "expires_in": 3600 }

// 2. Submit a normalised car-insurance quote request
POST /api/v1/confused/quotes/car
Authorization: Bearer <ACCESS_TOKEN>
{
  "registration": "AB12 CDE",
  "postcode": "CF10 1AA",
  "driver": {
    "dob": "1988-04-12",
    "licence_years": 12,
    "claims_5y": 0,
    "ncd_years": 9
  },
  "cover": "comprehensive",
  "annual_mileage": 8000,
  "voluntary_excess": 250
}
=> {
  "quote_id": "q_8f2c...",
  "currency": "GBP",
  "results": [
    {"insurer":"Hastings Direct","annual":462.18,"monthly":42.50,"excess":600},
    {"insurer":"Admiral","annual":478.04,"monthly":44.10,"excess":500},
    {"insurer":"Direct Line","annual":501.99,"monthly":46.30,"excess":450}
  ],
  "savings_estimate": {"vs_renewal":529.15,"percentile":51}
}

1. Broker quote aggregation

An independent broker wants to display Confused.com motor quotes alongside its own panel. We expose /quotes/car, /quotes/van and /quotes/motorbike behind a single normalised request schema (driver, vehicle, NCD, cover) and return one ranked JSON list. Maps directly to the FCA's Open Finance direction of consented multi-provider data sharing.

2. Dealer-floor vehicle history

A used-car dealership uses the VRM lookup at the roadside. We chain Confused.com's vehicle history surface with the official DVSA MOT history API and the DVLA Vehicle Enquiry Service so the salesperson sees model, MOT advisories and tax status in one screen. Integrates as a webhook into the dealer DMS.

3. Renewal & lifecycle CRM

An InsurTech runs a re-quote workflow 30 days before renewal. The reminder export endpoint streams MOT, tax and policy dates into HubSpot or Salesforce; a scheduled job calls /quotes/car with the saved risk profile and posts the cheaper quote into the customer's account. Field-level mapping covers renewal_date, last_premium, save_estimate.

4. Fleet & van compliance

A courier operator needs van insurance plus MOT compliance for 80 vehicles. The integration loops over the fleet's VRMs, pulls the MOT due date and the cheapest van quote per vehicle, then posts a daily compliance digest to Slack. Mirrors the OpenBanking pattern of bulk consented data pulls but applied to Open Insurance.

5. Loyalty & voucher reconciliation

A retailer that funds the £20 gift card promotion wants to reconcile redemptions. We expose a webhook that fires on reward state changes (issued, redeemed, expired) with the masked policy reference, so finance teams can match accruals to the underlying car/home/van policy and feed it into the general ledger.

VRM & MOT lookup (cURL)

curl -X POST https://api.openfinance-lab.com/v1/confused/vehicle \
  -H 'Authorization: Bearer $TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{"registration":"AB12 CDE"}'

200 OK
{
  "vrm": "AB12 CDE",
  "make": "Ford",
  "model": "Focus 1.0 EcoBoost",
  "fuel": "Petrol",
  "co2_g_km": 110,
  "tax_status": "Taxed",
  "tax_due": "2026-09-30",
  "mot": {
    "due": "2026-07-12",
    "last_test": "2025-07-08",
    "last_mileage": 64231,
    "advisories": ["Front tyre worn close to legal limit (5.2.3 (e))"]
  }
}

Renewal reminder webhook

POST https://your-crm.example.com/hooks/confused
X-Signature: sha256=...
Content-Type: application/json
{
  "event": "reminder.due",
  "user_id": "u_2f81",
  "kind": "insurance",
  "vehicle_vrm": "AB12 CDE",
  "renewal_date": "2026-06-12",
  "last_premium_gbp": 614.20,
  "issued_at": "2026-05-09T08:00:00Z"
}

Error handling & back-off

// Rate limit response
429 Too Many Requests
{
  "error": "rate_limited",
  "retry_after": 12,
  "limit_window": "60s",
  "limit_quota": 120
}

// Recommended client behaviour
- Honour Retry-After
- Exponential back-off: 1s, 2s, 4s, 8s (cap 30s)
- Idempotency-Key header on POST quote requests
- Persist quote_id for 24h to dedupe identical risk profiles

Regulatory framing

All work runs under explicit user authorisation and follows UK GDPR plus the Data Protection Act 2018. Confused.com itself is regulated by the Financial Conduct Authority (FCA); the FCA's October 2025 research note on Open Banking and Open Finance and the Data Protection and Digital Information Act 2024 together set the path for consented insurance data sharing in the UK. Our integrations respect Consumer Duty obligations on fair value and clear disclosure.

What we do not do

• No scraping of pricing without contractual or end-user consent
• No retention of raw passwords; tokens are encrypted at rest with KMS
• No transfer of personal data outside the UK/EEA without an SCC review
• No bypassing of bot-mitigation that would breach the Computer Misuse Act 1990

About us

OpenFinance Lab is an independent studio focused on protocol analysis and Open Insurance / Open Banking integration. Our engineers come from UK fintech, motor insurance pricing teams, mobile reverse engineering and cloud infrastructure. We have shipped quote, statement and reminder APIs for clients across the UK, EU and APAC under contract or NDA.

• Mobile protocol analysis on Android and iOS, including TLS pinning, Frida instrumentation and request signing
• InsurTech and motor pricing experience — quote, NCD and rating-engine flows
• Custom Python / Node.js / Go SDKs with type-safe client libraries
• End-to-end pipeline: scoping → protocol analysis → build → validation → compliance review
• Source code delivery from $300 — receive runnable API source code and full documentation; pay after delivery upon satisfaction
• Pay-per-call API billing — access our hosted endpoints and pay only per call, no upfront cost

Contact

Tell us the target app (Confused.com is already in scope), the verticals you need (car, home, van, etc.) and any sandbox or contractual context. We'll come back with a fixed-scope quote and a delivery timeline.

Contact page

Engagement workflow

1. Scope confirmation: which verticals, which screens, batch vs. real-time, hosted vs. self-hosted.
2. Protocol analysis on the latest Confused.com Android & iOS builds (2–5 business days).
3. Build and internal validation with sandbox VRMs and synthetic risk profiles (3–8 business days).
4. OpenAPI spec, sample collections and regression tests (1–2 business days).
5. First delivery typically lands in 5–15 business days; complex multi-vertical or fleet projects take longer.

FAQ

What data can be extracted from the Confused.com app?

How long does a Confused.com API integration take?

Is integrating UK insurance data legally compliant?

Can I get aggregated quotes across multiple comparison sites?