Terms of Service

1. Acceptance of terms

By creating an account or using Gazebo (the "Service"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service. These terms form an agreement between you and Unlimited Ventures Pty Ltd, an Australian company operating Gazebo ("we", "our", "us").

2. Description of the Service

Gazebo manages credential access for AI agents. It allows you to store credentials for third-party services in an encrypted vault, give agents individual identities and credential-retrieval policies, approve application access through the Agent Consent Flow, and review credential request logs. Access is available via the web application, a REST API, and an MCP endpoint for direct agent integration.

3. Your account

• You must provide a valid email address and keep your account credentials secure.
• You are responsible for all activity that occurs under your account, including actions taken by AI agents using tokens you have issued.
• You must be at least 18 years old. If you use the Service for an organisation, you must have authority to bind it to these terms.
• You must not share your account with others or create accounts on behalf of others without their consent.

4. Acceptable use

You agree not to use the Service to:

• Violate any applicable law or regulation
• Access third-party services or accounts you are not authorised to configure
• Probe, scan, or test the vulnerability of any system via agent credential access
• Interfere with or disrupt the Service or its infrastructure
• Attempt to reverse engineer, decompile, or extract non-public hosted Service software, except as permitted by applicable law or an applicable open-source licence
• Resell or sublicense access to the Service without our written consent
• Use issued agent tokens to access credentials beyond the scope explicitly granted
• Use the Service for any illegal, fraudulent, or abusive purpose

5. Your connected services, credentials, and agents

By connecting a third-party service (e.g. storing a Stripe API key in the vault), you authorise Gazebo to store that credential in encrypted form and to make it available to agents that you explicitly permit. Specifically:

• Agent tokens: When you create an agent and grant it access to one or more services, the agent can retrieve those credentials via the MCP endpoint or API. You control which services each agent can access. You can revoke access at any time.
• Credential release: Authorised requests return the actual provider credential to the agent runtime. A third party hosting that runtime can access it. Only grant access to runtimes and hosts you trust.
• Scope and revocation: Gazebo policies control credential retrieval, including checks against declared request methods; they do not restrict subsequent provider API calls. Provider-side key permissions govern those calls. Revocation stops future retrieval but does not invalidate keys already received. Rotate or revoke a key with its provider if necessary.
• Third-party services: You remain responsible for complying with the provider's terms and ensuring that sharing a credential is authorised.

You are solely responsible for ensuring you have the right to grant this access and that the agents and agent actions you authorise are appropriate. Credential request logs describe retrieval activity, not every action an agent takes with a provider key. Logs are normally retained for 90 days, as described in our Privacy Policy.

6. Beta service

The Service is currently in beta. Beta features may be incomplete, subject to change, or temporarily unavailable. Pricing displayed is indicative of our planned commercial pricing. While in beta, paid tiers are provided at no charge. We will give at least 30 days' notice before billing begins.

7. Pricing and payment

Our pricing tiers are described on the Pricing page. Subscription fees are billed monthly in advance unless an offer expressly states otherwise. Any one-time or founding-member offer is subject to the terms disclosed with that offer; a one-time purchase is not a monthly subscription. We reserve the right to change subscription prices with 30 days' notice. Refunds and remedies required by applicable law remain available. Other refund requests are assessed individually.

8. Intellectual property

We or our licensors own the hosted Service's software, design and content. Public SDK, CLI and other open-source components are governed by their accompanying licences; these terms do not override those licences. Your agent configurations and any content you create remain yours. By submitting content, you grant us a limited licence to process that content to provide the Service.

All third-party product names, logos, brands, and trademarks mentioned on this site or in our editorial content are the property of their respective owners. Use of these names is for identification and reference purposes only and does not imply any affiliation with, sponsorship by, or endorsement from those companies.

9. Disclaimers

Subject to rights and guarantees that cannot lawfully be excluded, the Service is provided "as is". We do not warrant that the Service will be error-free or uninterrupted. You are responsible for configuring appropriate scopes for each agent and reviewing access approvals. To the extent permitted by law, we are not responsible for changes made to your third-party services by agents or hosts you authorise.

10. Limitation of liability

Nothing in these terms excludes, restricts or modifies consumer guarantees, remedies or other rights that cannot lawfully be excluded, including under the Australian Consumer Law where applicable. Subject to those rights and to the maximum extent permitted by law, our total liability to you for any claims arising from or related to the Service is limited to the amount you paid us in the 3 months prior to the event giving rise to the claim. We are not liable for any indirect, incidental, special, consequential, or punitive damages.

11. Termination

You may request account deletion by emailing [email protected]. Deletion is support-assisted: we verify your request, revoke access and aim to complete deletion from the primary database within 30 days of verification, subject to lawful retention needs and the backup arrangements explained in our Privacy Policy. We may suspend or terminate your access if you violate these terms or if we reasonably believe your use poses a security risk to us or other users. On termination, your data will be deleted in accordance with our Privacy Policy.

12. Changes to these terms

We may update these terms from time to time. Continued use of the Service after changes constitutes acceptance. For material changes, we'll notify you by email at least 14 days in advance.

13. Contact

Questions about these terms? Email [email protected].