Acceptable use policy

Scope

This policy governs every request made to the AgentNorth services, whether over REST or MCP. It applies to you whether or not you have any other agreement with us, because there is no account to sign. Making a request is acceptance.

It sits alongside the terms of service. Where the two overlap, the stricter reading applies.

You are responsible for what you render

AgentNorth is a browser you rent by the request. We do not choose the URLs you send us, and we do not vet them in advance. You must have the right to access and process whatever you point us at, in your jurisdiction and in the target’s.

If the page you render contains personal data, you are the controller of that data and we act as your processor. A data processing agreement is available on request.

Prohibited uses

You must not use the services to:

• Access systems or content you are not authorised to access, or circumvent authentication, paywalls, licence gates or other access controls.
• Conduct credential stuffing, password spraying, brute forcing, or unauthorised vulnerability scanning of third parties.
• Generate load intended or likely to degrade a target — denial of service, amplification, or scraping at a rate a reasonable operator would treat as an attack.
• Ignore a target’s robots directives, rate limits or terms where you are legally bound by them.
• Collect personal data unlawfully, or process special-category data without a lawful basis.
• Harvest personal contact details for unsolicited messaging.
• Infringe copyright, database rights, trade marks or trade secrets, or reproduce third-party content beyond what your licence or a statutory exception permits.
• Render, store or distribute child sexual abuse material. We report this to the appropriate authority without notice to you.
• Produce or distribute unlawful material, including content that incites violence or facilitates terrorism.
• Resell raw access as an undifferentiated proxy service, or wrap the API to obscure that the render originated here.
• Evade a suspension, a target block, or a spend cap.

Rate and volume expectations

There are no plan tiers, but there are limits. Per-wallet concurrency and burst ceilings sit in front of the render fleet, with adaptive backoff for callers whose failure ratio spikes. A runaway loop degrades itself rather than the fleet.

If you need sustained high concurrency, tell us in advance at hello@MY_DOMAINNAME. We would rather provision for you than throttle you.

Blocked destinations

Some destinations are refused at the policy layer and return 451 blocked_target. That list covers known credential-stuffing targets, banking authentication flows, CSAM hash sets, and sites that have asked us to stop.

Refusals are logged and never charged. If you believe a destination is blocked in error, write to us with the URL and the reason you need it.

Opting your own site out

If you operate a website and do not want AgentNorth rendering it, email hello@MY_DOMAINNAME from an address at that domain, or add a disallow for our user agent to your robots.txt. We honour both.

We will confirm the block in writing and it takes effect within one business day.

Enforcement

We may suspend a wallet or block a destination immediately where we reasonably believe use is unlawful, abusive, or endangers the service or a third party. Where we can, we will tell you why and give you a route to appeal.

Suspension does not entitle you to compensation for unrendered requests. Unsettled payment authorizations are simply never charged.

Serious or repeated breaches may be reported to law enforcement, and we will comply with lawful requests for information about them.

Reporting abuse

If you believe someone is using AgentNorth against you or your systems, email abuse@MY_DOMAINNAME with the timestamps, the target URL and any request identifiers you have. We investigate every report and respond within one business day.

Security vulnerabilities in AgentNorth itself go to security@MY_DOMAINNAME — see the security page for our safe-harbour terms.

QUESTIONS ABOUT THIS DOCUMENT

legal@MY_DOMAINNAME

Postal enquiries: COMPANY_LEGAL_NAME, REGISTERED_ADDRESS — replace before launch.