Create a required additional insured

Vendors module

POST/required-additional-insuredsrequiredAdditionalInsureds.create

A party the org requires its vendors' certificates to name (1130): org-wide when project_id is null, or for vendors engaged on one project as well. app.verify_onboarding_insureds checks an engagement against them. Creates a required additional insured. Requires `Idempotency-Key`; a replay returns the original response. The organization is derived from the credential or the parent row, never from the body.

Requires the capability vendors.coi.write.
OAuth scopes: vendors.
Send an Idempotency-Key header. A replay with the same key returns the original response.
Error statuses: 400, 401, 409, 422, 429. Errors are RFC 9457 problem details.

Request body: RequiredAdditionalInsuredCreate

requiredAdditionalInsureds.create: RequiredAdditionalInsuredCreate
Field	Type	Required	Description
project_id	string (uuid) \| null	No	Identifier of the project the requirement adds to; null for every project.
insured_name	string	Yes	Party that must be named.Constraints: length 1 to 200
endorsement_kind	"Additional Insured" \| "Primary and Noncontributory" \| "Waiver of Subrogation"	Yes	Endorsement: Additional Insured, Primary and Noncontributory, or Waiver of Subrogation.

{
  "project_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "insured_name": "Example Venue Owner LLC",
  "endorsement_kind": "Additional Insured"
}

Response 201: RequiredAdditionalInsured

requiredAdditionalInsureds.create: RequiredAdditionalInsured
Field	Type	Required	Description
id	string (uuid)	Yes	Identifier of the required additional insured.
org_id	string (uuid)	Yes	Identifier of the owning organization, derived from the parent row and never accepted from the caller.
created_at	string (date-time)	Yes	When the row was created.
created_by	string (uuid) \| null	Yes	Identifier of the person who created the row.
updated_at	string (date-time)	Yes	When the row was last updated.
updated_by	string (uuid) \| null	Yes	Identifier of the person who last updated the row.
project_id	string (uuid) \| null	Yes	Identifier of the project the requirement adds to; null for every project.
insured_name	string	Yes	Party that must be named.Constraints: length 1 to 200
endorsement_kind	"Additional Insured" \| "Primary and Noncontributory" \| "Waiver of Subrogation"	Yes	Endorsement: Additional Insured, Primary and Noncontributory, or Waiver of Subrogation.

{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "updated_at": "2026-10-08T14:30:00Z",
  "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "project_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "insured_name": "Example Venue Owner LLC",
  "endorsement_kind": "Additional Insured"
}

Code samples

curl -X POST "$XOS_BASE_URL/required-additional-insureds" \
  -H "Authorization: Bearer $XOS_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"project_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","insured_name":"Example Venue Owner LLC","endorsement_kind":"Additional Insured"}'

const { data } = await xos.requiredAdditionalInsureds.create({
    "project_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
    "insured_name": "Example Venue Owner LLC",
    "endorsement_kind": "Additional Insured"
  });

response = xos.required_additional_insureds.create({"project_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f", "insured_name": "Example Venue Owner LLC", "endorsement_kind": "Additional Insured"})

xos required-additional-insureds create --data '{"project_id":"0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f","insured_name":"Example Venue Owner LLC","endorsement_kind":"Additional Insured"}'