Terms of Service

These Terms of Service ("Terms") are a binding agreement between you and Programmable, LLC, a limited liability company based in Washington, DC, USA ("we", "us"), and cover your use of Programmable Dev: the app API, the hosted connect and approval pages, the MCP endpoints, the dashboard, the docs and every related feature (together, the "Service"). Please read them carefully. Section 19 requires most disputes to be resolved by individual binding arbitration and waives class actions; you can opt out within 30 days.

1. The agreement and how you accept it

You accept these Terms by creating a workspace or registering an app, by joining a workspace, by using an app key or actor token, by ticking the box we show after you sign in, or by using a hosted page we provide. Your sign-in itself is a Programmable account, covered by the Programmable account terms; these Terms apply on top of them for Programmable Dev. If you use the Service for an organization, you accept them on its behalf and confirm that you have authority to bind it; "you" then means that organization. These Terms include the Privacy Policy, the Cookie Policy and, once you accept it, the Data Processing Agreement ("DPA"). If you don't agree, don't use the Service.

Changes. We may update these Terms. For material changes we'll email workspace owners and the people we set up Platform apps for and post the new version here at least 15 days before it takes effect (sooner where a change is required by law or addresses a security or legal risk). Using the Service after a change takes effect, including through an app key, counts as acceptance. If you don't accept a change, stop using the Service and you may close your account.

2. Who can use the service

• The Service is for business and professional use only. You must be at least 18 and able to form a binding contract.
• You may not use the Service if you are, or act for, a person on a US sanctions list (such as OFAC's SDN list) or are located in a country or region under comprehensive US sanctions, and you won't use it in breach of US export-control or sanctions laws.
• You may not use the Service to build or support a product that competes with it, or to benchmark it for a competitor, without our written permission.

3. The service

Programmable Dev is a gateway that gives the AI agents in your app access to outside tools through one MCP endpoint per tenant and actor. Your tenants connect their accounts with providers on our hosted page; we hold the resulting credentials; your agents call the endpoint with a short-lived token; and we check each call against the actor's grants, caps and approvals, make the call through the vendor's MCP server, our provider record or a built-in tool, log it with its cost, and return the result marked as untrusted. The Service never calls an AI model.

The Service is in preview. Which providers, records and built-ins are available changes over time; a provider record is available only after it has passed our live test. We may change, add or remove features, set or change usage limits, and introduce paid plans (see section 11). Features labelled beta, preview or experimental are provided as they are, may change or stop, and may be less reliable.

4. Workspaces, apps, keys, tenants and actors

• Workspaces. Every app lives in one workspace. Once you have signed in with a verified email address and accepted these Terms, you can create workspaces (up to 3) and register apps in them (up to 5 per workspace); you become an owner of each workspace you create. Apps we register for you live in our own Platform workspace, which has no members and which we manage. A workspace's owners are responsible for its apps and for everything its members do with them.
• Members and roles. A workspace's owners invite people by email as owners, developers or approvers. An invite does nothing until the invited person signs in with that address and chooses Accept; it lapses after 14 days. Approvers see connections, grants and usage and decide approvals. Developers can do what approvers do and also register apps and manage keys, connections, return addresses, OAuth clients and webhooks; they can't manage members, billing or app approvers, or delete apps. Owners can do all of that too, and only owners manage members, billing and app approvers and delete apps. An owner may also name an approver for one app only, who decides that app's approvals and sees nothing else. A workspace always keeps at least one owner. Owners can change roles and remove members, and members can leave (the last owner can't). Give each person only the role they need: a member acts within their role for the workspace's owners.
• Moving apps. An owner of both workspaces can move an app from one to the other. Its keys, connections, grants and app approvers go with it, the other workspace's members get their roles on it, its owners take over its billing, and the other owners of the workspace it left are emailed. An app can't move until its plan is cancelled, and its trial carries on (it never starts again).
• Apps and app keys. An app is registered in a workspace by one of its owners or developers, or by us for you. Its keys are shown once, stored only as a hash, and can be rotated. Anyone holding a key can act as your app: keep it on your servers, never in a browser or an agent, revoke keys you no longer trust, and tell us promptly at [email protected] if you suspect unauthorized use.
• Tenants and actors are records your app creates to represent its customers and their agents. You choose their identifiers and labels; you're responsible for keeping them accurate and for the people they identify.
• Actor tokens are short-lived and scoped to one actor. A token holder can call that actor's endpoint within its grants and caps. Calls made with your tokens are your calls.
• People who sign in (workspace members, app approvers and our platform admins) use the shared Programmable account and agree to these Terms themselves. An approver's decision binds the app it was made for and that app's workspace.
• Use the API only as documented and within the rate limits and quotas we set. Don't try to get around them or use multiple apps or keys to exceed them.

5. Connections and credentials

• A connection is created when a tenant signs in at a provider or pastes a key on our hosted page, or when your app supplies a credential through the API. The credential is stored encrypted and is used only to make the calls your agents ask for and to keep itself valid (refresh). It is never returned to your app or an agent.
• You confirm that each credential is one the tenant is entitled to use, under the provider's terms, and that you have the tenant's authority to have calls made with it.
• Deleting a connection deletes the credential here and, where the provider supports it, revokes it at the provider. You should also tell tenants to review access in the provider's own settings.

6. Grants, approvals and logs

Each actor has grants (which tools it may call), a daily cap, and approval rules for the calls you mark risky. Grants are read on every call; a call outside them is refused. A call that needs approval is held with its arguments and a person you've named decides; if approved, that exact call runs once. You choose the grants, caps and approval rules, and you're responsible for them. We keep a log of every call (the Privacy Policy says what it holds) and send your app the events it subscribes to. Tool results are returned marked as untrusted; how your agents treat them is up to you.

7. Your data and your tenants' data

You keep all rights to the data your app sends us, to the credentials your tenants provide, and to the data that flows through your agents' calls (together, "your data"). We don't claim ownership of it and we don't sell, rent or share it. You give us a limited, non-exclusive licence to process your data only as needed to provide the Service: to hold and refresh credentials, make the calls your agents ask for, hold calls for approval, deliver results and events, keep the Service secure, and comply with law. We don't use your data to train AI models. Where your data includes personal data, you are the controller (or "business") and we are your processor (or "service provider"); the DPA applies when you accept it. You are responsible for the notices and consents your tenants and their users need.

8. Acceptable use

You won't, and won't let any tenant, agent or token holder:

• call a provider in breach of its terms, rate limits or access controls, or with credentials you aren't entitled to use;
• use the Service to attack, probe, overload or scrape any system, to send unsolicited bulk messages, or for phishing, fraud or any unlawful purpose;
• use connect sessions, webhooks or the app proxy to reach our own infrastructure, private networks, or services you aren't authorized to use;
• process special categories of personal data or data about children through the Service without the rights and safeguards the law requires;
• get around grants, caps, approvals, the outbound guard, rate limits, access controls or bot protections, or test the Service for vulnerabilities without our written permission;
• reverse engineer the Service or extract its source code, provider records or methods, except where the law allows despite this restriction;
• resell, sublicense or provide the Service to third parties as a white-label integration product without a written agreement with us (your own app serving your own tenants is fine).

9. Providers and third-party services

The providers your tenants connect (Slack, GitHub, Notion and others), vendor MCP servers, and the services behind built-ins (web search engines, page readers, Apify, Composio) are provided by third parties under their own terms, not by us. When a connection is made and a call runs, you authorize us to send that provider the request on the tenant's behalf and to receive the response. You and your tenants are responsible for complying with each provider's terms, for their charges, and for the permissions a credential carries. We're not responsible for a third party's availability, accuracy, security, charges or acts, and we may stop supporting one at any time. A provider record describes a provider as its published documentation describes it; a description can be out of date or wrong.

10. Your agents

Your agents decide which tools to call and with what arguments. Their decisions can be wrong, incomplete or unexpected, and tool results can contain text designed to mislead them. Grants, caps, approvals and untrusted-result marking exist to limit the consequences; use them. We don't run or provide the model, and we're not responsible for an agent's choices or output. Don't let agents make decisions with legal or similarly significant effects about people through the Service.

11. Fees

Who pays. Fees are per app and are paid by the owners of the workspace the app is in: any of them can start, change or cancel its plan on the billing page, and when an app moves to another workspace its billing passes to that workspace's owners. For an app we set up for you in our Platform workspace, you pay, and its plan is managed through us. Every billable call made with the app's keys or by its tenants' actors counts toward that app, whichever tenant or actor made it. A billable call is one that reached the service it was meant for: over MCP, the REST API, an approved call or the app proxy, whether the service answered with a result or an error. Calls we refuse (a grant, a cap, bad input or billing), calls waiting for approval, and calls that fail on our side are never billable.

Trial. There is one trial of 1,000 billable calls or 14 days, whichever ends first, shared by: every app, live or deleted, in the app's workspace and in any workspace linked to it by moving an app between them (directly or through others); every app that was ever moved into or out of one of those workspaces; every app registered by an owner or the creator of one of them; and every app in another workspace one of those people created. It counts from when the first of them was registered, and their calls count together: deleting, re-registering or moving an app never starts a new one. An app we set up for you in our Platform workspace has its own. The trial needs no payment method. When it ends, every call from the app is refused, with an error that names the billing page, until the plan is started; nothing else changes, and your grants, caps, approvals and connections are kept.

The plan. The Pro plan costs $49 a month per app and includes 25,000 billable calls in each monthly period. Calls over that are charged at $2 per 1,000 calls ($0.002 a call). Included calls don't carry over to the next period. Current prices are on our pricing section and on the billing page; the price shown at checkout is the one that applies to your subscription.

Paid routes. When a call uses a paid route whose cost we pay ourselves (today, Composio), we add it to your invoice at Composio's price plus 20%: the cost the Service shows for that call, plus 20%. Routes that run on your tenants' own accounts or keys (built-in web search, page readers and Apify, and any vendor's MCP server) are billed by those providers, not by us; the cost they report is shown on usage but never invoiced by us.

Billing, renewal and cancellation. The plan is a monthly subscription billed through Stripe, our payment processor. The monthly price is charged at the start of each period and overage and paid-route costs at its end, to the payment method you give at checkout. The plan renews automatically every month until you cancel it. You can cancel at any time in the billing portal; it then ends at the end of the current period, the calls and costs of that period are still invoiced, and nothing more is charged. Except where the law requires otherwise, fees are not refundable and partial months are not prorated. If a payment fails, Stripe retries it; calls go on while it does, and if it still fails the plan ends and calls are refused until the payment method is updated.

Taxes. Prices are in US dollars and exclude taxes. You're responsible for any sales, use, value-added or similar taxes on the fees, other than taxes on our income; where we are required to collect them, they are added to your invoice.

Usage records and disputes. Our record of billable calls and their costs (shown on the billing page and in the usage API) is what we bill from. If you think an invoice is wrong, write to [email protected] within 60 days of it; we'll look at the calls with you and correct any error.

Price changes. We may change the prices, the included calls or the trial. We'll email workspace owners and the people we set up Platform apps for at least 30 days before a change that raises what you pay; it applies from your next period after that, and you can cancel before it does. Charges from providers your tenants connect with their own accounts are billed by those providers.

12. Our intellectual property

We and our licensors own the Service, including its software, engine, provider records, methods, design, documentation and brand. Subject to these Terms, we give you a limited, non-exclusive, non-transferable, revocable right to use the Service while your account is in good standing. We reserve all rights not expressly granted. If you send us feedback or suggestions, we may use them freely without obligation to you. You may not use our name or logo without permission, except to refer to the Service accurately. If you believe something in the Service infringes your copyright, email [email protected] with the details required by the Digital Millennium Copyright Act.

13. Confidentiality

Each of us will protect the other's non-public information that is marked confidential or should reasonably be understood to be (for us, your data and your tenants' credentials; for you, non-public details of the Service and security information), use it only for this agreement, and share it only with people who need it and are bound by similar duties. This doesn't cover information that is or becomes public through no fault of the recipient, was already known to it, is independently developed, or is rightly received from someone else. Either of us may disclose information when the law requires, after giving notice where allowed.

14. Suspension

We may rate-limit, pause or suspend all or part of your access, with notice where practical, if we reasonably believe that your use breaks these Terms or the law, threatens the security, integrity or availability of the Service, or exposes us or others to liability. We'll restore access once the issue is resolved. We may revoke keys and tokens that we believe are compromised or misused.

15. Term and termination

These Terms apply while you use the Service. You can stop at any time: revoke your keys, delete your connections, leave your workspaces, and ask us at [email protected] to close your app (closure is described in the Privacy Policy and can't be undone). We may end these Terms or close your app for convenience with 30 days' notice, or immediately if you seriously or repeatedly breach them, including any breach of section 8, or if required by law.

When your app ends, its keys and tokens stop working and its connections are deleted, with credentials revoked at the provider where supported. Sections 7 (last two sentences), 8, 12, 13 and 16 to 20 survive.

16. Disclaimers

The Service is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy and completeness, and any warranties arising from course of dealing or usage of trade. We don't warrant that the Service will be uninterrupted, secure or error-free, that a provider record is accurate, or that an agent will act as you intend.

17. Limitation of liability

To the fullest extent the law allows: (a) neither we nor our suppliers will be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, goodwill or data, or business interruption, however caused and even if advised of the possibility; and (b) our total liability arising out of or relating to the Service or these Terms will not exceed the greater of the amounts you paid us in the 12 months before the event giving rise to the claim and US$100. These limits apply to every theory of liability and even if a remedy fails of its essential purpose. They don't limit liability that the law says can't be limited, or your obligations under section 18.

18. Indemnification

You will defend, indemnify and hold harmless us, our affiliates and our and their officers, employees and agents from any third-party claim, and the resulting losses, damages, fines, penalties, costs and reasonable attorneys' fees, arising out of (a) your data or your tenants' credentials, (b) calls made with your keys or tokens, including by an agent, (c) your breach of these Terms or of law, including section 8, or (d) your or your tenants' use of third-party providers. We'll give you prompt notice of the claim, reasonable cooperation at your expense, and control of its defence, but you can't settle a claim that imposes obligations on us without our written consent.

19. Disputes: arbitration and class-action waiver

Talk to us first. Before starting a claim, email [email protected] with a description of the dispute and what you want; we'll do the same with you. Both of us will try in good faith to resolve it for 60 days.

Binding arbitration. If we can't resolve it, any dispute, claim or controversy arising out of or relating to these Terms or the Service, including their formation, scope or enforceability, will be resolved by final and binding individual arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, before a single arbitrator, in Washington, DC or by video. The Federal Arbitration Act governs this section. Judgment on the award may be entered in any court with jurisdiction.

Exceptions. Either of us may bring an individual claim in small-claims court, and either of us may seek an injunction in court to stop actual or threatened infringement or misuse of intellectual property, confidential information or the Service (including breaches of section 8).

No class actions. Claims may be brought only individually, not as a plaintiff or class member in any class, consolidated or representative proceeding, and the arbitrator may not consolidate claims or award relief to anyone other than the individual party. If this waiver is found unenforceable for a claim, that claim must be heard in court, not in arbitration. If 25 or more similar claims are filed by or with the help of the same counsel, they will be administered in batches as the AAA's mass-arbitration procedures provide.

Opting out. You can opt out of this section 19 by emailing [email protected] within 30 days of first accepting these Terms, from your account's email address, with the subject "Arbitration opt-out". Opting out doesn't affect any other part of these Terms. If we change this section materially, you may reject the change by the same method within 30 days of its effective date.

Time limit. To the extent the law allows, any claim must be started within one year after it arose, or it is permanently barred.

20. General

• Governing law and venue. These Terms are governed by the laws of the District of Columbia, USA, without regard to its conflict-of-laws rules. Subject to section 19, disputes go to the state or federal courts located in Washington, DC, and both of us consent to their jurisdiction.
• Electronic communications and notices. You agree to receive agreements, notices and other communications from us electronically, by email to your account address or in the app, and that they satisfy any requirement to be in writing. Send notices to us at [email protected], with a copy by mail to Programmable, LLC, 3607 10th St NW, Washington, DC 20010, USA.
• Assignment. You may not assign or transfer these Terms without our written consent. We may assign them in connection with a merger, acquisition or sale of all or most of our business or assets.
• Force majeure. Neither of us is liable for delays or failures caused by events beyond reasonable control, such as outages of internet, hosting or third-party providers, natural disasters, war, labour disputes or government action.
• Independent parties. We are independent contractors; nothing here creates a partnership, joint venture, agency or employment relationship. There are no third-party beneficiaries.
• Severability and waiver. If any part of these Terms is unenforceable, it will be changed to the minimum extent needed and the rest stays in effect. Not enforcing a provision isn't a waiver.
• Entire agreement. These Terms, with the documents in section 1 and any written agreement signed by both of us, are the entire agreement about the Service and replace earlier understandings. If they conflict, a signed agreement wins, then the DPA (for personal data), then these Terms.
• Government users. The Service is commercial computer software and documentation, provided to US government users only with the rights in these Terms.
• Questions: [email protected].