Terms of Service

These Terms of Service govern your access to and use of Xysera websites, applications, APIs, SDKs, command line tools, documentation, and related services provided by Xysera. By using Xysera, you agree to these Terms.

If you use Xysera on behalf of an organization, you represent that you have authority to bind that organization, and references to you include that organization.

You must be at least 18 and able to form a binding contract to use Xysera. You may not use Xysera if you are barred from doing so under applicable law.

• You must provide accurate account, organization, issuer, and billing information and keep it current.
• You are responsible for activity under your account, organization, user API keys, and agent credentials.
• User API keys authenticate control-plane operations. Xysera stores hashed user API keys and does not store raw key values after creation. Agent credentials are used by agents or runtimes to prove possession of an Agent ID. You must not confuse or misuse these credentials.
• You must promptly rotate or revoke compromised user API keys, agent credentials, and account credentials.

Xysera allows eligible users and organizations to create, manage, verify, rotate, and revoke AI-agent identities. Xysera may impose issuance quotas, rate limits, usage limits, and plan limits, which may vary by account, organization, issuer, or subscription plan.

You are responsible for the agents, systems, credentials, metadata, issuer references, and integrations you register or manage through Xysera.

Xysera verification is a cryptographic identity and status mechanism. It can establish that a requester demonstrated possession of a credential associated with an Agent ID and that the relevant Xysera trust record reports a particular status.

Xysera does not certify that an agent is safe, truthful, beneficial, compliant, uncompromised, continuously online, operated by a particular model, running on a particular machine, or behaving correctly.

Xysera provides mechanisms for recording and communicating revocation. Revocation may allow participating services to refuse, limit, or investigate an identity according to their own policies.

Xysera does not remotely terminate agents, delete AI models, physically stop autonomous systems, or compel third-party services to enforce revocation. Third-party systems ultimately decide how to respond to Xysera verification and revocation information.

You may use Xysera only in compliance with these Terms, applicable laws, documentation, API policies, rate limits, security requirements, and plan restrictions.

• You may not impersonate another person, organization, issuer, or agent.
• You may not forge credentials, misrepresent trust status, or claim Xysera provides behavioral certification of an agent.
• You may not steal, sell, disclose, or misuse user API keys, agent credentials, tokens, or authentication material.
• You may not bypass quotas, rate limits, access controls, billing systems, or security protections.
• You may not spam the registry, abuse verification infrastructure, overload Xysera systems, or interfere with service availability.
• You may not use Xysera to facilitate malware, unauthorized access, fraud, surveillance abuse, exploitation, or other harmful activity.

You are responsible for your integrations with Xysera, including how you verify agents, interpret statuses, handle revocation, secure credentials, and communicate trust decisions to your users or systems.

Xysera may modify APIs, SDKs, CLI tools, documentation, endpoints, rate limits, quotas, or service features. We will use reasonable efforts to provide notice of material changes where practical.

Some Xysera features may require a paid plan. Payment processing is handled by Stripe. Xysera does not store full payment-card numbers. Pricing, quotas, renewals, cancellation rights, taxes, and billing terms will be described on the applicable order form, pricing page, account page, or subscription flow. [LEGAL/PRODUCT INPUT REQUIRED: confirm refund policy.]

As between you and Xysera, you retain ownership of content, metadata, configurations, and materials you submit to Xysera, subject to the rights you grant us to provide, secure, maintain, and improve the service.

Xysera and its licensors retain all rights in the service, software, documentation, branding, designs, and technology. These Terms do not grant you rights to Xysera trademarks or other intellectual property except as expressly permitted in writing.

Xysera may be unavailable, interrupted, delayed, or modified from time to time. We may suspend or limit access to protect the service, respond to security issues, comply with law, enforce these Terms, or prevent abuse.

You may stop using Xysera at any time. We may suspend or terminate access if you violate these Terms, create risk for Xysera or others, fail to pay amounts due, or if required by law.

Account information and personal information associated with the account will be deleted after termination or account deletion, subject to legal, security, and operational requirements. Agent information may be anonymized and retained where necessary for verification, security, abuse prevention, legal compliance, or integrity of the trust network.

Xysera is provided on an as-is and as-available basis to the maximum extent permitted by law. We disclaim warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted operation, and error-free operation.

You are responsible for independent evaluation of agent behavior, safety, authorization, and trust decisions. Xysera identity verification is not a substitute for your own security, safety, compliance, or abuse-prevention controls.

To the maximum extent permitted by law, Xysera will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenues, data, goodwill, or business interruption. [LEGAL INPUT REQUIRED: liability cap.]

You will defend, indemnify, and hold harmless Xysera from claims arising out of your use of the service, your agents or integrations, your violation of these Terms, your content, or your violation of law or third-party rights, to the extent permitted by law.

These Terms are governed by the laws of Vermont, without regard to conflict-of-laws principles. The state and federal courts located in Vermont will have exclusive jurisdiction over disputes arising out of or relating to these Terms or Xysera. These Terms do not require mandatory arbitration and do not include a class-action waiver.

We may update these Terms from time to time. If changes are material, we will provide notice through the service or another appropriate method. Continued use after changes become effective means you accept the updated Terms.

Contact: help@xysera.com.