Terms of Service

1. The service

Toolproof provides a free, best-effort static analysis service for public MCP servers and APIs. It returns a point-in-time report and, where available, a signed verdict. The service is available at toolproof-scan.vercel.app and its documented API routes (together, the “Service”).

2. Your responsibilities

You may use the Service only for endpoints that are public or that you are authorized to assess. You must not:

• submit credentials, access tokens, personal data, private URLs, or secrets as part of a scan target;
• use the Service to probe private, internal, restricted, or third-party systems without authorization;
• circumvent rate limits, access controls, or scanner safeguards; or
• use a report to harass, defame, threaten, or misrepresent a tool owner.

Submitting a target instructs Toolproof to make network requests to that target as part of the scan. You are responsible for having a lawful basis and any permission needed for those requests.

3. Reports are not guarantees

Toolproof analyzes the public, model-visible surface available when the scan runs. It is not a penetration test, code audit, runtime sandbox, certification, endorsement, or guarantee that a tool is safe, secure, compliant, or free of defects. A grade is a signed record of that scan, not a promise about a future deployment. You remain responsible for your own security review and decisions.

4. Availability and limits

The Service is provided free of charge, as available, and may be changed, limited, suspended, or discontinued at any time. Published rate limits, caching behavior, and technical limits apply. We may block use that threatens the Service, its users, or third parties.

5. Third-party systems

Scan targets and their operators are independent third parties. Toolproof does not control their content, availability, security, or privacy practices. A finding is a reason to review evidence; it is not an accusation of intent or a statement that the target owner acted improperly.

6. Disclaimers and liability

To the maximum extent permitted by applicable law, the Service is provided “as is” and “as available,” without warranties of any kind. Toolproof will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss arising from reliance on a report, a scan target, or use of the Service.

7. Changes and contact

We may update these Terms by posting a revised version here and changing the “Last updated” date. Continued use after an update means you accept the revised Terms. For questions or security-related concerns, contact security@toolproof-scan.vercel.app.