Terms of Service

Effective date: March 12, 2026

These Terms of Service ("Terms") govern your access to and use of the Jitex platform, APIs, SDKs, MCP server, and dashboard (collectively, the "Service") provided by Protogy Labs Inc. ("we," "us," or "our"). By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.

1. Definitions

  • "Account" means your registered Jitex account and any team members or collaborators you invite.
  • "Agent" means any AI model, automated system, or software acting on your behalf that connects to the Service via an Agent Key.
  • "Agent Key" means the API credential issued to you for authenticating Agent requests through the Service.
  • "Approval" means a human-in-the-loop (HITL) decision by you or an authorized team member to approve or reject an Agent action.
  • "Connection" means a third-party service integration (e.g., Stripe, GitHub, Slack) that you configure within the Service.
  • "Ephemeral Credential" means a short-lived, scoped token generated by the Service to execute a single Agent action.

2. Eligibility & Accounts

You must be at least 18 years old and have the authority to bind any entity on whose behalf you use the Service. You are responsible for maintaining the security of your account credentials and Agent Keys. You must immediately notify us of any unauthorized use.

3. The Service

Jitex provides a just-in-time credential proxy and approval gateway for AI agents. The Service enables you to:

  • Connect third-party service credentials
  • Route Agent tool calls through a secure proxy that injects ephemeral credentials
  • Configure policies that govern which actions require human approval
  • Approve or reject pending Agent actions via the dashboard, email, or programmatic API
  • Audit all Agent activity through a tamper-evident log

4. Your Responsibilities

4.1 Approval Decisions

You are solely responsible for every Approval you grant or deny through the Service. When you approve an Agent action — whether through the dashboard, email link, MCP tool, or API — you authorize the Service to execute that action using your connected credentials. You acknowledge that:

  • You have reviewed the Agent's stated reasoning and the specific tool call before approving
  • Approved actions are executed immediately and may be irreversible (e.g., financial transactions, data deletion, message delivery)
  • We do not independently verify the correctness, safety, or desirability of any action — we only relay the Agent's stated intent for your review
  • Accidental or unintended Approvals are your responsibility; the Service provides reasonable safeguards (expiration timers, confirmation UI) but cannot prevent human error

4.2 Policy Configuration

You are responsible for configuring appropriate policies for your Connections. If you set a policy to auto-approve certain actions (bypassing HITL review), you accept full responsibility for actions executed under that policy.

4.3 Agent Key Security

Agent Keys are bearer credentials. You must treat them as secrets. You are responsible for all activity that occurs under your Agent Keys, whether or not you authorized it. If an Agent Key is compromised, you must revoke it immediately via the dashboard.

4.4 Third-Party Credentials

You are responsible for the credentials you connect to the Service. You must ensure you have the right to use those credentials and that doing so complies with the third party's terms of service.

4.5 Agent Behavior

You are responsible for the behavior of any Agent that operates under your account. The Service provides intent validation and approval safeguards, but these are advisory tools — not guarantees. AI agent reasoning can be inaccurate, manipulated, or incomplete.

5. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY. WE SPECIFICALLY DISCLAIM ALL IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT:

  • THE SERVICE WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE
  • AI-BASED INTENT VALIDATION WILL ACCURATELY ASSESS AGENT INTENT OR CATCH HARMFUL ACTIONS
  • APPROVAL NOTIFICATIONS WILL BE DELIVERED PROMPTLY VIA EMAIL, SLACK, OR OTHER CHANNELS
  • EPHEMERAL CREDENTIALS WILL ALWAYS EXPIRE CORRECTLY
  • THE SERVICE WILL PREVENT ALL UNAUTHORIZED, UNINTENDED, OR HARMFUL AGENT ACTIONS

6. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, PROTOGY LABS INC. AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE, INCLUDING BUT NOT LIMITED TO:

  • FINANCIAL LOSSES RESULTING FROM APPROVED AGENT ACTIONS (E.G., REFUNDS, CHARGES, TRANSFERS)
  • DATA LOSS OR CORRUPTION CAUSED BY AGENT ACTIONS YOU APPROVED OR AUTO-APPROVED VIA POLICY
  • THIRD-PARTY SERVICE DISRUPTIONS CAUSED BY AGENT API CALLS ROUTED THROUGH THE SERVICE
  • DAMAGES ARISING FROM COMPROMISED OR MISUSED AGENT KEYS
  • DAMAGES ARISING FROM AI-BASED INTENT VALIDATION ERRORS OR CONFIDENCE SCORE INACCURACIES
  • ACTIONS TAKEN BY AGENTS BETWEEN THE TIME AN APPROVAL EXPIRES AND THE TIME THE AGENT RETRIES

OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM OR (B) ONE HUNDRED U.S. DOLLARS ($100).

7. Indemnification

You agree to indemnify, defend, and hold harmless Protogy Labs Inc. and its affiliates from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising from:

  • Your use of the Service, including all Approval decisions
  • Actions taken by Agents operating under your account
  • Your violation of these Terms or any applicable law
  • Your violation of any third party's rights, including their terms of service
  • Claims by third parties affected by Agent actions routed through the Service

8. Proxy & Credential Handling

The Service acts as a pass-through proxy. We inject credentials into API calls on your behalf and forward them to third-party services. We do not:

  • Guarantee the outcome of any third-party API call
  • Take responsibility for third-party service availability, rate limits, or error responses
  • Store request or response payloads beyond what is needed for the audit log

Credentials you store with the Service are encrypted at rest using AES-256 and are only decrypted at the moment of proxied execution. We do not access your credentials for any purpose other than executing approved Agent actions.

9. AI & Intent Validation

The Service uses AI models to validate Agent intent, assign confidence scores, and detect potentially harmful actions. You acknowledge that:

  • AI intent validation is probabilistic, not deterministic — false positives and false negatives will occur
  • Confidence scores are estimates, not guarantees of safety or correctness
  • AI models may fail to detect manipulation, prompt injection, or adversarial inputs
  • You should not rely solely on AI validation to prevent harmful actions — HITL review is your primary safeguard

10. Audit Logs

The Service maintains audit logs of Agent activity, Approvals, and credential usage. Audit logs are provided for your operational and compliance purposes. While we take reasonable measures to ensure log integrity, we do not guarantee that logs are complete, tamper-proof, or legally sufficient for all regulatory frameworks.

11. Acceptable Use

You agree not to use the Service to:

  • Violate any applicable law or regulation
  • Infringe on the rights of any third party
  • Route Agent actions that you know to be harmful, fraudulent, or unauthorized
  • Attempt to bypass security controls, approval requirements, or rate limits
  • Reverse engineer, decompile, or disassemble the Service
  • Use the Service to store, proxy, or manage credentials you are not authorized to use

12. Termination

We may suspend or terminate your access to the Service at any time, with or without cause, upon reasonable notice. Upon termination, your right to use the Service ceases immediately. We will make a reasonable effort to allow you to export your audit data. Sections 5 through 7 (Disclaimers, Limitation of Liability, Indemnification) survive termination.

13. Changes to These Terms

We may update these Terms from time to time. We will notify you of material changes via email or a prominent notice on the dashboard. Continued use of the Service after changes take effect constitutes acceptance of the updated Terms.

14. Governing Law

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any disputes shall be resolved in the state or federal courts located in Delaware.

15. Contact

Questions about these Terms? Contact us at legal@jitex.io.