Terms of Service

These terms are a contract between you and Clawband ("Clawband", "we", "us") for use of the hosted Clawband service: the website at clawband.io, the dashboard, the API at api.clawband.io, and the MCP endpoint (together, the "Service"). By creating an account or using the Service you agree to them. If you are using the Service on behalf of a company, you confirm you have authority to bind that company, and "you" means the company.

Our Privacy Policy explains how we handle your data and is part of these terms.

These terms do not cover self-hosted Clawband. The source code is available under the PolyForm Noncommercial License 1.0.0, and that license alone governs the code when you run it yourself.

You must be at least 18 years old to use the Service. You must give us a working email address and keep it current, because that is how we reach you about security and billing.

You are responsible for everything that happens under your account, including every call made with a key you issued. Keep your password and your Clawband keys secret, enable two-factor authentication, and tell us promptly at ops@clawband.io if you believe either has been compromised. We are not liable for loss caused by someone else using your credentials.

Clawband is an execution gateway. You connect third-party provider accounts once, issue scoped Clawband keys to your agents, and the gateway executes the calls those agents make against the providers, using your connected credentials, within the grants you configured. The gateway refuses anything the key's grants do not permit.

The Service is young and changes often. We may add, change, or remove capabilities, providers, and features at any time. We will try to give notice of removals that affect working integrations, but cannot always do so, especially when a provider changes or shuts down its API.

When you connect a provider you authorise Clawband to store that provider's credentials and to use them to make calls on your behalf, as instructed by your agents. You confirm that you have the right to connect that account and to let software act on it.

Each provider has its own terms, rate limits, and acceptable use rules. You are responsible for complying with them. We are not a party to your relationship with any provider, and we have no control over what a provider does with the calls we relay, whether it stays available, or whether it changes its API.

Some providers charge for API usage or for actions taken through their API, such as sending a payment or an SMS. Those charges are between you and the provider.

Grants are a tool you configure. A call that a key's grants permit is an authorised call, whatever the agent intended by it. If an agent sends an email, moves money, or deletes a repository within the bounds you granted, that action is yours.

• Review the capabilities and parameter pins on each key before you hand it to an agent, and keep them as narrow as the task allows.
• Revoke keys you no longer need. A revoked key stops working on the next request.
• Use random, opaque idempotency keys. They are kept permanently and must not contain secrets or personal data.
• Do not share one key between agents or people you would not trust with every capability on it.

We make no promise that a call executes exactly once. If the gateway, a provider, or the network fails mid-call, the result can be unknown. Idempotency keys and provider-side reconciliation exist for this reason, and it is your responsibility to use them for operations where a duplicate would matter.

You may not use the Service, or let your agents use it, to:

• Break the law or help anyone else break it.
• Access any account, system, or data you do not have permission to access, or connect a provider account that is not yours to connect.
• Send spam, harass people, or run deceptive or fraudulent campaigns through any connected provider.
• Violate a provider's terms, evade its rate limits, or abuse its API in a way that could get Clawband's access to that provider revoked.
• Probe, scan, or attack the Service, interfere with its operation, or try to get around grants, quotas, or rate limits.
• Resell the Service, offer it as a managed or white-label product to third parties, or share one account between unrelated parties.
• Upload or transmit malware, or use the Service to store or distribute content that infringes anyone's rights.

Security research is welcome. Report findings to ops@clawband.io before disclosing them, and do not test against accounts or data that are not your own.

The Service has a Free plan and a Pro plan. Each plan carries a monthly quota of billable units. When you exhaust your quota, calls are refused until the next period begins or you upgrade. We may change plan limits and prices; changes to a paid plan take effect at your next renewal, and we will email you first.

Pro is billed monthly in advance through Stripe and renews automatically until you cancel. You can cancel from the billing page at any time. Cancellation takes effect at the end of the current period, and you keep Pro access until then. Fees are non-refundable except where the law requires otherwise or where we say so in writing.

If a payment fails we will retry it and notify you. If it keeps failing we may downgrade you to the Free plan or suspend the account. Prices exclude taxes; you are responsible for any VAT, sales tax, or similar tax that applies to you.

You own your data: your provider credentials, your grants, and everything that passes through the gateway on your behalf. You give us only the permission we need to run the Service, which means storing it, encrypting it, relaying it to providers, and showing it back to you.

We own the Service and the Clawband software, name, and marks. The software is source-available under a noncommercial license, which grants you rights to the code but no rights to the hosted Service beyond these terms.

If you send us feedback or suggestions, we may use them without owing you anything.

You can stop using the Service at any time. Disconnect providers and revoke keys from the dashboard, and email us to delete the account.

We may suspend or terminate your account if you breach these terms, if your usage threatens the security or stability of the Service or of a provider, if a payment remains unpaid, or if we are required to by law. We will tell you why unless the law prevents it. Where the problem can be fixed, we will give you a chance to fix it first.

We may also discontinue the Service altogether. If we do, we will give at least 30 days' notice by email and refund any prepaid fees for the period after shutdown.

On termination, your keys stop working, your provider credentials are removed, and the rest of your data is handled as described in the Privacy Policy. Sections on data ownership, disclaimers, liability, indemnity, and disputes survive termination.

The Service is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

We do not promise that the Service will be uninterrupted or error-free, that any provider will remain available or keep behaving the same way, that a call will execute exactly once, or that grants will catch every mistake an agent can make. An agent acting within its grants can still do something you did not want.

To the fullest extent the law allows, Clawband will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, data, or goodwill, arising out of or related to the Service, however caused and under any theory of liability, even if we were told such damages were possible.

Our total liability for all claims arising out of or related to the Service is limited to the greater of the amount you paid us in the twelve months before the claim arose and one hundred US dollars.

Some jurisdictions do not allow certain limitations, so parts of this section may not apply to you.

You will defend and indemnify Clawband against any third-party claim, and the resulting damages and reasonable legal costs, that arises from your use of the Service, from actions taken by your agents through it, from a provider account you connected, or from your breach of these terms.

We may update these terms. When we do, we will change the effective date at the top and, for material changes, email account holders at least 14 days before they take effect. If you keep using the Service after that date, you accept the new terms. If you do not agree, stop using the Service and ask us to delete your account.

These terms are governed by the laws of the United States and of the state in which Clawband's operator is organised, without regard to conflict-of-law rules. Any dispute that cannot be resolved informally will be brought in the state or federal courts of that state, and you consent to their jurisdiction.

Before filing a claim, email us. Most disagreements can be sorted out in a few messages, and we would rather do that.

• These terms and the Privacy Policy are the entire agreement between you and Clawband about the Service.
• If any part is found unenforceable, the rest remains in effect.
• Our not enforcing a term is not a waiver of our right to enforce it later.
• You may not assign these terms without our consent. We may assign them in connection with a merger, acquisition, or sale of assets.
• Notices to you go to the email on your account. Notices to us go to ops@clawband.io.