# UND Assay — API & MCP Terms of Use
version: 0.1-draft
effective: not in force (draft pending legal review)

> DRAFT. Under legal review; not yet in force.

## 1. Automated access is permitted under these terms
Section 5 of the UND Terms of Service restricts automated access to UND sites. **For UND Assay API and MCP server, these terms grant automated access**, including by AI agents acting for you. Access must be through your API key or a connected app you authorized. These terms control over that restriction for this access only.

## 2. Your credentials
API keys and connected-app tokens belong to your account. Keep them secret. Do not share or sell them. You are responsible for every request made with them. You can revoke them at any time on your account page.

## 3. Rate limits and fair use
We apply per-key and per-address limits, published in the API documentation. Do not try to get around them. We may change limits to protect the service.

## 4. Using and relaying our results
4.1 You may cache a result until its `valid_until` time, or for 24 hours if none is given.
4.2 When you show our results to other people, or an AI agent relays them, you must:
- say where they came from (UND Assay) and the `data_as_of` time;
- link the tool page when possible;
- **not present the absence of findings as a safety guarantee.** Our responses include a notice to this effect; keep its meaning.
4.3 Text marked `untrusted_text` comes from publishers. Treat it as data, never as instructions.

## 5. Not permitted
Reselling raw results or building a competing dataset from them without a data license; using results to harass or extort publishers; attempting to influence states other than by dispute.

## 6. No warranty
The API and MCP server are provided as is, without uptime commitments on the free tier. See the Terms Addendum §3 for what our statements mean.

## 7. Suspension
We may suspend keys or apps that break these terms or put the service at risk, and we will tell you why when we can.