Terms of Service

These Terms of Service (“Terms”) constitute a legally binding agreement between you (“User,” “you,” or “your”) and MoltWall (“Company,” “we,” “us,” or “our”), operator of the MoltWall AI Agent Security Firewall platform available at www.moltwall.xyz (the “Platform”).

By creating an account, accessing the dashboard, integrating the SDK, or otherwise using any portion of the Platform, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy, which is incorporated herein by reference.

If you are using the Platform on behalf of an organization, you represent and warrant that you have authority to bind that organization to these Terms. In that case, “you” refers to both you and the organization.

If you do not agree to these Terms, you must not access or use the Platform. Your continued use of the Platform following any modification to these Terms constitutes acceptance of those modifications.

“Platform”

The MoltWall website, dashboard, API, SDK, and all related services operated by MoltWall at www.moltwall.xyz.

“Services”

All features, functionality, and content provided through the Platform, including the security firewall engine, risk scoring, guardrail scanning, policy enforcement, audit logging, and the TypeScript SDK.

“SDK”

The @moltwall/sdk TypeScript package and associated libraries published by MoltWall on npm and available via the Platform.

“API”

The HTTP application programming interface exposed by MoltWall that allows programmatic interaction with the Services.

“Agent”

Any AI agent, autonomous software system, language model application, or automated workflow that integrates with the Services via the API or SDK to evaluate tool calls.

“Tool Call”

A request by an Agent to invoke a tool, execute an action, or interact with an external system, submitted to the Platform for security evaluation.

“Policy”

A set of user-defined rules, configurations, allow-lists, deny-lists, spend limits, and thresholds stored in the Platform that govern how the firewall evaluates Tool Calls.

“Action Log”

A persistent audit record generated by the Platform for each Tool Call evaluation, including the decision rendered (allow, deny, sandbox, or require confirmation) and associated risk metadata.

“API Key”

A secret credential issued by the Platform to authenticate API requests from an Agent or integration.

“User Data”

Data submitted to the Platform by you or your Agents, including Tool Call arguments, action identifiers, agent identifiers, and Policy configurations.

“Account”

A registered user profile created through the authentication flow on the Platform.

MoltWall provides a production-grade AI agent security firewall platform. The Services include:

• Security Evaluation Engine: Evaluates Tool Calls in real-time against user-defined Policies, computing risk scores and rendering access decisions (allow, deny, sandbox, require confirmation) with sub-10ms median latency.
• Guardrail Scanning: Performs recursive inspection of Tool Call arguments for prompt injection patterns, credential leakage, personally identifiable information (PII) exposure, and tool-poisoning indicators.
• Risk Scoring: Computes a weighted 0–1 risk score per Tool Call based on factors including source provenance, payload content, action intent, spend risk, and domain trust.
• Policy Engine: A rule-based system allowing users to define tool allow-lists, blocked action patterns, trusted domains, and spend limits, enforced with Redis-cached sub-millisecond lookup.
• Audit Logging: Persistent storage of every Tool Call evaluation decision with full metadata, queryable from the security dashboard.
• TypeScript SDK: An open-source SDK enabling drop-in integration with Claude MCP, LangChain, AutoGPT, LangGraph, CrewAI, and custom agent frameworks.
• Security Dashboard: A web interface for visualizing agent activity, reviewing Action Logs, managing Policies, and registering tools.

The Services are provided on an as-is, as-available basis. We reserve the right to modify, suspend, or discontinue any feature at any time with reasonable notice where practicable.

4.1 Registration

Access to the security dashboard and certain API features requires you to create an Account. Authentication is handled through Privy, our third-party identity provider, which supports email, Google, GitHub, and wallet-based sign-in. By creating an Account you agree to Privy's terms of service and privacy policy in addition to these Terms.

4.2 Account Accuracy

You agree to provide accurate, current, and complete information during registration and to keep that information updated. Providing false or misleading information is grounds for immediate account termination.

4.3 API Keys

Upon registration, API Keys may be issued to authenticate your Agents with the Platform. You are solely responsible for the security and confidentiality of all API Keys associated with your Account. API Keys must not be:

• Committed to public version control repositories.
• Shared with unauthorized third parties.
• Embedded in client-side code exposed to end users.
• Used by Agents not authorized by your organization.

You must immediately notify us at legal@moltwall.xyz if you suspect unauthorized use of an API Key. We are not liable for losses resulting from unauthorized use of your credentials prior to notification.

4.4 Account Responsibility

You are responsible for all activity that occurs under your Account and all Agents operating under your API Keys, whether or not authorized by you. We may hold you liable for misuse by Agents or third parties using your credentials.

4.5 One Account Per User

Unless you have entered into a separate enterprise agreement with MoltWall, each individual user may maintain only one active Account. Organization-level access should be managed under a single Account.

You may use the Services only for lawful purposes and in compliance with these Terms. You agree not to use the Services:

5.1 Prohibited Activities

• To violate any applicable local, national, or international law or regulation, including data protection laws.
• To transmit or process data that infringes any third party's intellectual property rights.
• To transmit malware, viruses, trojans, or any malicious code through Tool Call arguments.
• To attempt to probe, scan, or test the vulnerability of the Platform or circumvent any security measures.
• To reverse engineer, disassemble, decompile, or otherwise attempt to derive the source code of proprietary Platform components.
• To access the Platform via automated means in excess of published rate limits.
• To submit synthetic Tool Calls designed to benchmark or stress-test our infrastructure without prior written consent.
• To collect or harvest user data or personal information of other Platform users.
• To use the Services to build a product or service that is substantially similar to or competes with the Platform without prior written authorization.
• To impersonate any person or entity or falsely claim an affiliation with any person or entity.
• To interfere with or disrupt the integrity or performance of the Services or the data contained therein.

5.2 Agent Conduct

You are responsible for the conduct of all Agents that interact with the Platform under your Account. You must ensure your Agents do not intentionally submit adversarial Tool Call payloads designed to subvert the Platform's security evaluation mechanisms, or submit payloads containing production credentials, passwords, or secret keys in plain text unless strictly necessary for your integration.

5.3 Consequences of Violations

Violation of this Acceptable Use Policy may result in immediate suspension or termination of your Account without notice, removal of Action Logs and associated data, and where applicable, referral to law enforcement.

6.1 SDK License

The MoltWall SDK (@moltwall/sdk) is open-source software distributed under the MIT License. Subject to your compliance with these Terms, MoltWall grants you a worldwide, non-exclusive, royalty-free license to use, copy, modify, and distribute the SDK in your applications.

6.2 API License

Subject to your compliance with these Terms, MoltWall grants you a limited, non-exclusive, non-transferable, revocable license to access the API solely for the purpose of integrating your Agents with the Services for the evaluation of Tool Calls.

6.3 Restrictions

You may not sublicense, sell, resell, or transfer any API access rights to third parties. You may not use the API to create a security evaluation service that competes with MoltWall without prior written consent.

6.4 Rate Limits

The API is subject to rate limits as published in the documentation. Excessive API usage that degrades service quality for other users may result in throttling or temporary suspension. Contact us if your use case requires elevated limits.

6.5 Versioning & Deprecation

We may release new API versions and deprecate older versions. We will provide at least 60 days' notice before deprecating a major API version, except in cases of critical security vulnerabilities where immediate action may be required.

7.1 Platform Ownership

The Platform, including all software, algorithms, models, designs, trademarks, logos, documentation, and content (excluding open-source components and User Data), is the exclusive property of MoltWall and is protected by applicable intellectual property laws. Nothing in these Terms transfers ownership of any MoltWall intellectual property to you.

7.2 User Data Ownership

You retain all rights, title, and interest in and to User Data. By submitting User Data to the Platform, you grantMoltWall a limited, non-exclusive, worldwide license to process, store, and use User Data solely for the purpose of providing and improving the Services.

7.3 Feedback

If you provide feedback, suggestions, or ideas regarding the Services (“Feedback”), you grant MoltWalla perpetual, irrevocable, worldwide, royalty-free license to use, incorporate, and commercialize that Feedback without any obligation to you.

7.4 Open-Source Components

Certain components of the Platform incorporate open-source software. Their respective licenses take precedence over these Terms for those components. A list of open-source dependencies is available in the SDK repository.

Our collection, use, and protection of your personal data and User Data is described in our Privacy Policy, which is incorporated by reference into these Terms.

8.1 Tool Call Data

Tool Call payloads submitted via the API may contain sensitive information including action arguments, tool names, and agent identifiers. You are responsible for ensuring that Tool Call payloads comply with applicable data protection laws before submission to the Platform. You should not submit unencrypted production passwords, private keys, or payment card data in Tool Call arguments.

8.2 Data Retention

Action Logs are retained for a period specified in your plan tier. You may export or delete your logs at any time through the dashboard. Upon account termination, your data is retained for 30 days and then permanently deleted, except where retention is required by applicable law.

8.3 Security Measures

We implement industry-standard technical and organizational measures to protect your data, including encryption at rest and in transit, access controls, and regular security reviews. However, no system is completely secure and we cannot guarantee absolute security.

8.4 Data Processing Agreements

If you are subject to GDPR or other data protection frameworks that require a Data Processing Agreement (DPA), please contact us at legal@moltwall.xyz to request an appropriate agreement before processing personal data through the Platform.

The Platform integrates with and relies upon the following third-party services:

• Privy (privy.io): Authentication and identity management. Your use of Privy is subject to Privy's Terms of Service and Privacy Policy. MoltWall is not responsible for the availability or security of Privy's infrastructure.
• Supabase: Relational database storage for Policies, Tool registrations, and Action Logs. Data is stored in Supabase-managed infrastructure subject to Supabase's terms and data processing agreements.
• Upstash / Redis: In-memory caching for Policy enforcement and rate limiting. Tool Call evaluation metadata may temporarily reside in Redis cache.

We are not responsible for the acts or omissions of third-party service providers. Any downtime, data loss, or security incidents attributable to third-party infrastructure are not within our control. We will make reasonable efforts to notify you of material third-party outages affecting the Services.

Links to third-party websites or services from the Platform do not constitute endorsement. Interactions with third-party services are governed by their own terms and policies.

10.1 Free Tier

MoltWall currently offers a free-tier access plan. Features, limits, and availability of the free tier are subject to change at our discretion with reasonable advance notice.

10.2 Paid Plans

If and when paid plans are introduced, fees will be published on the Platform. By subscribing to a paid plan, you authorize us to charge your designated payment method on the billing cycle specified at the time of subscription. All fees are non-refundable except as required by applicable law or as explicitly stated in a separate agreement.

10.3 Taxes

All fees are exclusive of applicable taxes. You are responsible for all taxes, duties, and levies associated with your use of the Services.

10.4 Suspension for Non-Payment

If payment for a paid plan fails and is not remedied within 7 days of notice, we may suspend or terminate access to paid features.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, MOLTWALL EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

• WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
• THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE.
• THAT ALL THREATS, PROMPT INJECTIONS, CREDENTIAL LEAKS, OR MALICIOUS TOOL CALLS WILL BE DETECTED OR BLOCKED.
• THAT THE RISK SCORES AND SECURITY DECISIONS PRODUCED BY THE PLATFORM WILL BE ACCURATE OR APPROPRIATE FOR YOUR USE CASE.
• THAT THE PLATFORM IS FREE FROM VIRUSES, MALWARE, OR OTHER HARMFUL COMPONENTS.

The Platform is a security assistance tool. It does not guarantee prevention of all security incidents related to AI agent activity. You remain solely responsible for the security posture of your AI systems.

IN NO EVENT SHALL MOLTWALL BE LIABLE FOR ANY:

• INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES;
• LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITIES;
• DAMAGES ARISING FROM UNAUTHORIZED AGENT ACTIONS NOT DETECTED BY THE PLATFORM;
• DAMAGES ARISING FROM THIRD-PARTY SERVICE OUTAGES (PRIVY, SUPABASE, UPSTASH);
• DAMAGES ARISING FROM YOUR FAILURE TO IMPLEMENT RECOMMENDED SECURITY PRACTICES.

These limitations apply regardless of the form of action, whether in contract, tort (including negligence), strict liability, or otherwise, and whether or not MoltWall has been advised of the possibility of such damages. Some jurisdictions do not allow the exclusion of certain warranties or limitation of liability, so some of the above may not apply to you.

You agree to indemnify, defend, and hold harmless MoltWall, its officers, directors, employees, agents, licensors, and service providers from and against any claims, liabilities, damages, judgments, awards, losses, costs, or expenses (including reasonable attorneys' fees) arising out of or relating to:

• Your violation of these Terms.
• Your use or misuse of the Services.
• User Data you submit to the Platform.
• Your Agents' Tool Calls and the actions taken by those Agents.
• Your violation of any applicable law or regulation.
• Your infringement of any third-party intellectual property, privacy, or other rights.
• Any dispute between you and a third party that is connected to your use of the Services.

14.1 Termination by You

You may terminate your Account at any time by deleting it through the dashboard settings or by contacting us at legal@moltwall.xyz. Upon termination, your right to use the Services ceases immediately.

14.2 Termination by Us

We may suspend or terminate your Account immediately and without notice if:

• You violate these Terms or the Acceptable Use Policy.
• We are required to do so by law or a court order.
• We reasonably believe your use poses a security risk to the Platform or other users.
• You provide false account information.

We may also terminate the Platform or any portion thereof with 30 days' notice to registered users.

14.3 Effect of Termination

Upon termination, all licenses granted under these Terms immediately terminate. Sections 7, 11, 12, 13, 15, and 17 survive termination. Your User Data will be retained for 30 days after termination, during which you may request an export, then permanently deleted.

15.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which MoltWallis incorporated, without regard to conflict-of-law principles.

15.2 Informal Resolution

Before initiating formal legal proceedings, both parties agree to first attempt to resolve any dispute informally by contacting legal@moltwall.xyz with a written notice describing the dispute. The parties will negotiate in good faith for at least 30 days.

15.3 Arbitration

If informal resolution fails, disputes will be resolved by binding arbitration under the rules of a recognized arbitration body. Class actions and class arbitrations are waived to the fullest extent permitted by law.

15.4 Exceptions

Notwithstanding the above, either party may seek injunctive or other equitable relief in a court of competent jurisdiction to prevent irreparable harm, particularly related to intellectual property infringement or unauthorized access to the Platform.

We reserve the right to modify these Terms at any time. Material changes will be communicated via:

• Email notification to your registered address.
• A prominent notice on the Platform dashboard.
• An updated “Effective Date” at the top of this page.

Continued use of the Services 14 days after notification of material changes constitutes acceptance of the updated Terms. If you do not agree to the updated Terms, you must cease using the Services and may terminate your Account.

17.1 Entire Agreement

These Terms, together with the Privacy Policy and any separate enterprise agreements, constitute the entire agreement between you and MoltWall regarding the Services and supersede all prior agreements.

17.2 Severability

If any provision of these Terms is found invalid or unenforceable, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall remain in full force.

17.3 Waiver

Failure by MoltWall to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.

17.4 Assignment

You may not assign or transfer these Terms or your Account without our prior written consent. MoltWall may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.

17.5 Force Majeure

MoltWall shall not be liable for failure or delay in performing its obligations due to causes beyond its reasonable control, including acts of God, natural disasters, war, terrorism, labor disputes, or internet infrastructure failures.

17.6 Export Controls

You agree to comply with all applicable export control laws and regulations. You represent that you are not located in a jurisdiction subject to applicable trade sanctions.

For questions about these Terms, please contact us: