Cooper (Mandl) vs Prismatic

Cooper (Mandl)

Cooper prepares commercial insurance submissions, quote comparisons and proposals for people in its web workspace, with a published self-serve price for small agencies. It has no API, MCP server or webhooks for an outside agent, and its SOC 2 and HIPAA claims come with no report and apply only to full Cooper.

Prismatic

The GraphQL API covers 120 queries and 124 mutations with typed inputs, cursor pagination and Markdown documentation, and tokens follow seven user roles. No price is published, paid use runs under an agreement that is not public, and no API rate limit or idempotency key was found in the reviewed documentation.

Cooper (Mandl)

1. Don't plan to call Cooper from another agent. It's operated by people in its web workspace
2. If a user's agency uses Cooper, hand them the account documents to forward to Cooper themselves
3. Don't send client insurance data or PHI to Cooper without the agency's signed agreement and, for PHI, a business associate agreement

Prismatic

1. Have a person run prism login once, then store the output of prism me:token --type refresh as PRISM_REFRESH_TOKEN. Access tokens last 7 days
2. Read the errors array on every mutation. A failed mutation still returns HTTP 200
3. Pass sortBy with CREATED_AT when paging. Without a sort order pages can repeat or skip records
4. Use the regional host for the tenant, such as app.eu-west-1.prismatic.io and mcp.eu-west-1.prismatic.io
5. Create a guest user for a read-only agent, because tokens have no scopes of their own