Terms of Service

PreMan provides infrastructure for teams building and operating AI agents against real systems. Depending on your configuration and plan, the Services may include:

• API-to-MCP conversion: discovery, import, and conversion of HTTP APIs, OpenAPI specs, GraphQL schemas, and related artifacts into MCP tool definitions.
• Hosted MCP runtime: deployment and operation of MCP servers that forward authorized tool calls to your configured upstream APIs.
• Managed MCP forwarding: connection to third-party or customer-operated MCP servers, policy controls, and proxied invocation on your behalf.
• Credentials vault: encrypted storage and use of upstream API credentials, OAuth tokens, and related secrets solely to perform calls you authorize.
• Post-action verification: read-only checks against systems of record, verdicts, and evidence storage when you enable those features.
• Dashboard and APIs: workspace management, audit logs, billing, API keys, consumer tokens, and developer tooling such as the PreMan SDK and premanmcp package.

We may add, change, or discontinue features from time to time. Beta or preview features may be offered “as is” with limited support.

You must be at least 18 years old (or the age of majority in your jurisdiction) and able to form a binding contract to use the Services. You are responsible for the accuracy of registration information and for maintaining the security of your account credentials.

We issue workspace API keys (for example, keys beginning with pm_live_) for machine-to-machine access to PreMan APIs and MCP tools. For hosted MCPs, we may issue scoped consumer tokens (for example, keys beginning with pm_hmcp_) that grant access only to the tools and resources you configure for a given deployment.

API keys, consumer tokens, and dashboard sessions are personal to your workspace. You must not share them beyond authorized users and systems, and you must revoke compromised credentials promptly through the dashboard or by contacting us.

You are solely responsible for:

• Protecting API keys, consumer tokens, vault secrets, and account passwords; configuring least-privilege access; and monitoring for unauthorized use.
• Reviewing which tools, endpoints, and managed MCP servers are enabled before exposing them to agents or end users.
• The security, legality, and appropriateness of your upstream APIs, data stores, and third-party MCP servers, including authentication, authorization, rate limits, and data handling on those systems.
• Configuration choices, including base URLs, credential mappings, tool policies, verification contracts, and consumer token scopes, and any harm arising from misconfiguration, stale schemas, or enabling high-risk tools without adequate safeguards.
• Reviewing audit and invocation logs we provide and investigating anomalous agent activity in your environment.
• Ensuring that your use of the Services complies with applicable law, your agreements with upstream providers, and any obligations you owe to your customers or end users.

PreMan executes tool calls and verification checks according to your configuration. We do not guarantee that a given tool invocation will produce a particular business outcome on your upstream systems.

The Services may forward requests to third-party MCP servers, HTTP APIs, cloud providers, payment processors, source-control platforms, and other integrations you connect or enable. PreMan acts as a technical intermediary on your instructions; we do not control and are not responsible for the availability, security, content, or actions of those third parties.

When you register a managed or remote MCP server, you represent that you have the right to connect it and to route agent traffic through PreMan. You are responsible for vetting third-party MCP publishers, reviewing their tool lists, and disabling tools that are unnecessary or unsafe for your use case.

A compromise of an upstream API, third-party MCP, agent client, or credential you supply is your responsibility to remediate with those parties. PreMan's security measures reduce but do not eliminate risk from tools and systems outside our direct control.

You agree not to, and not to permit others to:

• Use the Services for unlawful, fraudulent, harassing, or abusive purposes.
• Attempt to gain unauthorized access to the Services, other accounts, vault secrets, or non-public areas of our infrastructure.
• Probe, scan, or test the vulnerability of the Services except through our authorized security disclosure process.
• Circumvent tool policy, rate limits, access controls, or billing meters; resell the Services without written permission; or use the Services to build a substantially competing product using unauthorized access to our proprietary interfaces.
• Upload malware, interfere with Service operation, or use the hosted MCP runtime to attack third-party systems without authorization.
• Store or transmit content through the Services in violation of third-party rights or applicable export, sanctions, or privacy laws.

We may investigate suspected violations and cooperate with law enforcement. We may suspend or terminate access that poses a security risk or violates these Terms.

Certain features require a paid subscription or usage-based fees. Prices, plan limits, and metering are described on our website or in the dashboard at the time of purchase. Paid plans are billed through Stripe or another payment processor we designate. By subscribing, you authorize us and our payment processor to charge applicable fees, taxes, and overages.

Fees are non-refundable except where required by law or expressly stated in an order form. We may change prices on reasonable notice; continued use after the effective date of a price change constitutes acceptance unless you cancel before the change takes effect. Failure to pay may result in suspension or downgrade of the Services.

PreMan and its licensors own the Services, software, documentation, trademarks, and all related intellectual property, except for content you provide. We grant you a limited, non-exclusive, non-transferable, revocable license to use the Services during your subscription or account term in accordance with these Terms.

You retain ownership of your data, configurations, and materials you submit. You grant PreMan the rights necessary to host, process, transmit, and display that content solely to provide and improve the Services, enforce these Terms, and comply with law. Aggregated or de-identified usage data that does not identify you may be used to improve the product.

Feedback you provide may be used by PreMan without restriction or compensation.

THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE FULLEST EXTENT PERMITTED BY LAW, PREMAN DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

WITHOUT LIMITING THE FOREGOING, PREMAN DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF HARMFUL COMPONENTS; THAT HOSTED OR MANAGED MCP INVOCATIONS WILL BE SECURE FROM ALL THREATS; THAT UPSTREAM OR THIRD-PARTY SYSTEMS WILL RESPOND AS EXPECTED; OR THAT VERIFICATION RESULTS WILL DETECT EVERY INCIDENT OR PREVENT EVERY LOSS.

TO THE FULLEST EXTENT PERMITTED BY LAW, PREMAN AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AND SUPPLIERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS INTERRUPTION, ARISING FROM OR RELATED TO THE SERVICES OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT PERMITTED BY LAW, PREMAN'S TOTAL LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICES OR THESE TERMS IN ANY TWELVE-MONTH PERIOD WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO PREMAN FOR THE SERVICES IN THAT PERIOD OR (B) ONE HUNDRED U.S. DOLLARS (US$100).

Some jurisdictions do not allow certain limitations; in those cases, our liability is limited to the maximum extent permitted by law.

You will defend, indemnify, and hold harmless PreMan and its affiliates, officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) your use of the Services; (b) your data, configurations, credentials, or content; (c) your upstream APIs, agents, or third-party MCP servers; (d) tool invocations or verification checks performed according to your settings; (e) your violation of these Terms or applicable law; or (f) any dispute between you and your customers, end users, or upstream providers.

We implement administrative, technical, and organizational measures designed to protect the Services, as described in our Privacy Policy. No system is perfectly secure. You agree to notify us promptly at alspencer@preman.live if you become aware of suspected unauthorized access to your PreMan account, API keys, consumer tokens, or vault credentials.

We will cooperate with you in good faith on incident investigation related to the Services, subject to legal constraints and the need to protect other customers. These Terms do not replace any breach notification obligations described in our Privacy Policy or required by applicable law.

You may stop using the Services and close your account at any time through the dashboard or by contacting us. We may suspend or terminate your access immediately if you violate these Terms, fail to pay fees, pose a security risk, or if we are required to do so by law.

Upon termination, your right to use the Services ends. We may delete or retain workspace data as described in the Privacy Policy and applicable law. Sections that by their nature should survive termination (including fees owed, disclaimers, limitations of liability, indemnification, and governing law) will survive.

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. The federal and state courts located in Delaware will have exclusive jurisdiction over disputes arising from or relating to these Terms or the Services, except that either party may seek injunctive relief in any court of competent jurisdiction to protect intellectual property or confidential information.

Before filing a claim, you agree to contact us at alspencer@preman.live and attempt to resolve the dispute informally for at least thirty (30) days.

We may modify these Terms from time to time. We will post the updated Terms on this page and update the effective date. Material changes may be communicated by email or in-product notice where required. Your continued use of the Services after the effective date of revised Terms constitutes acceptance. If you do not agree, you must stop using the Services and close your account.

Questions about these Terms:

Preman Inc. (PreMan)
Email: alspencer@preman.live

Privacy practices: Privacy Policy

Product documentation: Docs