Terms of Service
Last updated: 2026-10-30
These terms are an agreement between you and MedoMatic, LLC ("MedoMatic", "we", "us"). They cover your use of Agent Authority at agentauthority.org, its API, its MCP server and its emails (together, the "Service"). By creating an account, paying for a plan, or registering an agent, you agree to these terms. If you act for a company, you agree for that company and you confirm that you may bind it.
Our Privacy Notice explains how we handle personal information. It is part of these terms.
1. What Agent Authority is
Agent Authority is a public registry. It records who owns each registered AI agent and who can sign for it. Anyone can look up a registered agent and check a signed record of its owner, its signing keys and its history. Public registry entries are public by design.
The registry records facts that owners and verification providers give us. It does not supervise agents, check what agents do, or vouch for their behavior.
2. Who can use the Service
- You must be at least 18 years old and able to make a binding contract.
- Identity verification currently accepts a US driver's license or US state ID. Personal plans are for people whose primary residence is in one of the 50 US states, the District of Columbia or Puerto Rico. Company plans support formation in those same jurisdictions. Other US territories are not currently supported.
- You must give true, current and complete information, and keep it up to date.
- One person may hold one verified personal account. If a second account uses the same government ID, it goes to account recovery. It does not become a second verified owner.
3. Your account
- Sign-up and sign-in run through WorkOS. WorkOS confirms your email and sets up two-step sign-in.
- Keep your sign-in details and your agents' private signing keys safe. Your account credentials are separate from your agents' signing keys. We never ask for your private keys.
- You are responsible for everything done through your account and with your agents' keys, until you tell us about a problem or revoke the key.
- Tell us at once at support@agentauthority.org if you think someone else has access to your account or keys.
4. Identity verification
- To become a verified owner, you pay for your plan and then complete an identity check with Persona, our identity verification provider. Persona checks a government ID and a live selfie.
- Before the check starts, we ask for your consent to the scan of your ID and selfie, including face geometry. The biometric notice in our Privacy Notice explains what is collected, who holds it and how long it is kept. You agree by ticking a box and typing your full name as your signature. We record the name you typed, when you agreed and to which version of the notice, and we do not start the check without that record.
- You are verified only if Persona approves the check, both the ID and the selfie checks pass, and the state on your ID matches the state you declared.
- A verification shows that a check passed at one point in time. It is not a guarantee of anyone's identity, character or future conduct.
- We may decline, pause or reverse a verification if a check fails, if information turns out to be false, or if we suspect fraud.
- Personal-plan decline. This rule applies to a personal-plan payment, not the business sign-up payment. You pay before the check. If Persona's outcome is declined, we automatically refund your payment minus a $3 verification fee, which covers the cost of the check, and your plan ends at once. The refund goes back to the card you paid with. Your bank may take 5 to 10 business days to show it. To try again later, you pay for a new plan. Business identity checks that cannot pass automatically go to manual review; the $25 processing fee and $225 refund rules in Business sign-up payment apply to that business payment.
5. Companies
- A company is verified when both of these are done: (a) it passes the checks in Business verification, and (b) it proves control of its web domain with a DNS TXT record at
_agentauthority.<domain>. The domain step can be done later, including by the company's IT team. The company cannot approve agents until both are done. - A representative who passed the Persona check must also confirm that they are authorized to act for the company. That person becomes the company's first representative.
- By confirming, you promise that you are authorized to act for the company. A false statement may lead to suspension and may be unlawful.
- Pending domain verification expires after 30 days. It can be restarted.
- We check each verified company domain every day. If the record is missing, we email the company and a 14-day grace period starts. If the record is still missing after 14 days, the company's agents show as unverified in public, and the company cannot add new agents or new acceptances until the record is restored and checked again. A day on which the check cannot get a clear answer does not count against you.
- Nothing is deleted when a domain lapses. The company's history stays in the registry.
- Representatives act under the permissions the company gives them. The company is responsible for the representatives it appoints.
Business verification
Business verification. To register a business, we verify it with outside data providers. We check that the business is legally registered and active, that its tax ID matches where one is given, and that it does not appear on government sanctions or watch lists. We also verify that the person signing up is a listed officer of the business and confirm their identity with a government ID. Some businesses, such as sole proprietors, businesses using a trade name, and newly formed companies, may need manual review. We may decline or pause a registration if we cannot verify it or if a check raises concerns. We keep verification results only as long as needed to provide the service and meet legal obligations.
6. Agents, keys and acceptances
- When you register an agent, you accept an ownership agreement for that agent and authorize its listed signing key. You can read the agreement before you accept it.
- You are responsible for your registered agents, what they sign, and the safety of their keys.
- You can revoke a key or end an agent's registration at any time. Ending a registration stops future authority. It does not erase past records.
- Registry records are append-only. We keep the history of every agent, acceptance, key change and dispute, so that anyone can check what was true at a given time.
7. What is public
The public registry shows, for each registered agent: that its ownership is verified, whether its owner is a person or a Business, its address (a random /a/<id> address, or a name address if the owner chooses one), its display name, its public signing keys, its acceptance and key history with the agreements, any description, service address and skills the owner publishes, and any published disputes. No owner ID and no custodian ID are shown publicly. Each public record is signed by the registry.
- For a Business owner, the public record also shows the Business's legal name, its state or territory and the state of its domain check. For a personal owner, the legal name and username are not shown unless the owner chooses to show them.
- For a personal owner, your legal name and username are private by default. You may opt in to publishing them and may turn that sharing off for future public views. Copies already made by others cannot be recalled. Your identity may also be shared through the registry's disclosure and dispute process described in the Privacy Notice.
Anyone may read, copy and keep public records. We cannot recall copies made outside the registry.
8. Names and usernames
Personal usernames and domain-based agent addresses are available. Trademark checks and trademark-based company usernames are not currently offered. Planned features below are not included in the company plan today.
- Addresses point to the agent ID. Every agent has a permanent agent ID. Its public address, like
@jsmith/ralphiefor a personal account or@acme.com/ralphiefor a company, only points to that ID. Records, signatures and history always use the agent ID. - Who can claim a username. An owner with a personal account can claim a username after passing the identity check, with a paid or trial plan. A username shows on public pages only if its owner turns that on. A company's addresses come from the domains it proves it controls. A company uses its verified domain and can add business username aliases. A username alias is not proof of trademark rights.
- Trademarked usernames (planned). When this feature launches, a trademark owner will be able to claim its trademarked name as its username (for example, the username
dietcoke, addressed as@dietcoke), subject to our trademark check. An owner who does not own the trademark cannot take a trademarked username. - Format. Usernames are 3 to 30 characters: lowercase letters, digits, hyphens (
-) and underscores (_). No dots. A username cannot start or end with a hyphen or underscore, or have two in a row. Look-alike usernames count as the same username (for example,j0hnandjohn, orjane_smithandjane-smith). - Reserved names. System words (such as
admin,support,legal,privacyandterms) can never be claimed. Automatic trademark and public-figure name checks are planned and are not currently included. A request that is turned down gets a reason, never another owner's information. - Company domains. A company's agents can be found under every domain it proves. One of them is its main domain, and addresses under the others redirect to it.
- Changes and the 90-day hold. An address changes when an agent is renamed, when a username changes, or when an agent moves to a new owner. The old address then redirects to the agent's new address for 90 days. During those 90 days, only the original owner can claim the old name again. After 90 days, the old name is released and anyone may claim it.
- Upgrading to a domain. An owner can move their username up to a domain they prove they control. The old addresses follow the 90-day hold above.
- No sale or transfer. You may not sell, rent or transfer a username. A username stays with its owner. We may release or reassign a username only after a resolved dispute with a recorded reason, for example for impersonation or a proven claim to a held name.
- Domains. Control of a domain in DNS decides who holds a domain name in the registry. We do not decide trademark claims about domains; those go to the domain registrar. We will publish here when a domain that stays unverified is released. A new holder of a released domain starts with a new, empty record and does not inherit the old holder's agents, history or badges.
9. Plans, billing and renewal
Payments are processed by Stripe. Card details are entered on Stripe's pages and never reach us. Stripe's own terms also apply to your payment.
Prices (US dollars, per year):
- Personal plan: $10 per year. Includes your identity check and 1 agent.
- Extra personal agent: $2 per year each.
- Company plan: $250 per year. Includes 1 registered agent.
- Extra company agent: $10 per year for each registered agent after the first. Running copies of the same registered agent are free.
Prices do not include taxes, which we add where the law requires. The price shown before you pay is the price you are charged.
Automatic renewal. Every plan renews automatically each year at the then-current price, charged to the card on file, until you cancel. We email a reminder about 30 days and again about 7 days before each yearly renewal. It states the price, the renewal date and how to cancel online. If you have already cancelled, we do not send it. If we change a price, we will email you at least 7 and no more than 30 days before the change takes effect, and you can cancel before it does.
Adding agents mid-year. When you add an agent, you are charged at once for the prorated rest of your plan year. After that, it renews with your plan.
Retiring agents. When a company retires a registered agent, there is no refund for the rest of the year. The lower agent count applies from your next renewal. You can remove an extra personal agent yourself: open Billing and choose Remove an extra agent. You keep it until your next renewal, and from then on your plan costs less. There is no refund for the rest of the year. Your registered agents must fit the lower count, so retire an agent first if needed. The agent's history stays in the registry.
Cancelling. You can cancel online at any time. Sign in, open Account or Billing, and choose Manage billing / Cancel subscription. This opens Stripe's secure billing page, where you can also change your card and see your invoices. You can also cancel by emailing support@agentauthority.org from your account email. When you cancel, your plan stays active until the end of the year you paid for, and is not renewed. Your agents keep working until that date. After it, your agents show as lapsed: public registry and verification checks show them as not currently authorized, and they cannot sign anything new. Nothing is deleted; their records and history stay. We email you when your cancellation is scheduled and again when your agents lapse. Until the end date you can undo the cancellation: open Account and choose Resume subscription. After it, renew on Billing to reactivate your agents. We do not refund part of a year, except for a declined personal identity check (section 4), the business sign-up refund below, or where the law requires it. Billing and Account remain accessible while identity verification is pending. Before a business is registered, open Billing or the sign-up page and choose Cancel business sign-up to request the eligible refund.
Failed payments. If a payment fails, Stripe retries it. Your plan stays active while it retries. If payment does not succeed, your plan lapses and your agents show as lapsed until you pay. Lapsed records are not deleted.
Founding offer (not yet live). The founding offer has not started. We will publish its start date here before it begins. For 90 days from that date:
- A person who passes the identity check and claims an
@usernamein that window gets a permanent "Founding owner" badge and the first year of the personal plan free. We will publish the rules for companies before the offer starts. - During the window, checkout starts a 365-day free trial. You still give a card, and it is kept on file. When the trial ends, you are charged the normal yearly price unless you cancel first.
- If the window closes and you have not claimed a username, we end your trial early (we check daily), and you are charged the normal yearly price on that day.
- One free year per verified person. The badge never expires and cannot be transferred.
- We will publish how extra agents are charged during the free year before the offer starts.
Business sign-up payment
Business sign-up payment. To register a business, you pay $250 by card before we start any check. If your business is registered, the $250 pays for your first year's plan. You can cancel within 30 days of paying, even after your business is registered. If you do, we refund $225 to the card you paid with, we keep a $25 processing fee, and your company plan ends. If we cannot verify your business or your identity automatically, a person reviews your sign-up. If we reject your sign-up in that review, we refund $225 and keep the $25 processing fee. Your domain must also be verified before you can add agents. Pending domain verification expires after 30 days and can be restarted at no extra charge.
10. Acceptable use
You must not:
- give false information, or pretend to be a person, company, brand or agent you are not;
- register an agent you do not control, or a key you do not hold;
- use the registry or registered agents for fraud, or for anything unlawful;
- claim names to sell them, to block others, or to mislead (squatting);
- probe, scrape or load the Service beyond its published rate limits, or try to find out who holds a name or account;
- break, bypass or test the security of the Service, except under our security policy and responsible disclosure process;
- interfere with other users, the verification process, or the registry's signing and audit systems;
- upload malware, or use the Service to send spam.
11. Disputes about registry records
Anyone affected by a registry record may file a dispute. Reviewers decide disputes under the published policy. A published dispute shows on the agent's public record. Dispute history is kept and is not deleted. The dispute process is not a court and does not replace your legal rights.
12. Suspension and ending
- You may stop using the Service at any time. Cancelling your plan is covered in section 9.
- We may suspend or end your access if you break these terms, if we must by law, or to protect users or the registry. Where we can, we will tell you why and give you a chance to fix the problem.
- When access ends, public registry records and their history stay, because the registry's value depends on a complete history. Your agents will show their real status, such as revoked, lapsed or ended.
- Sections that by their nature should continue, such as 7, 13, 14, 15, 16 and 17, continue after access ends.
13. No warranty
The Service is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not promise that the Service will be uninterrupted or error-free, that any verification is correct, or that any registered agent is safe, lawful or acting for its owner. Registry records are not legal advice.
14. Limitation of liability
To the fullest extent the law allows:
- we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill;
- our total liability for all claims about the Service is limited to the greater of the amount you paid us in the 12 months before the claim, or US $100.
Some places do not allow these limits, so they may not apply to you.
15. Indemnity
You will defend and hold us harmless from claims by third parties that arise from your agents, your breach of these terms, or your false statements, including a false claim of authority for a company.
16. Governing law and disputes
These terms are governed by the Federal Arbitration Act and other US federal law, and otherwise by the laws of the State of South Carolina, USA, without regard to its conflict-of-law rules.
Please read this section carefully. It affects your rights.
- Talk to us first. Before you start a claim, email support@agentauthority.org with a description of the problem and what you want. We will try to resolve it within 30 days.
- Binding arbitration. If we cannot resolve it, you and we agree that any dispute about these terms or the Service will be decided by binding individual arbitration, not in court. The American Arbitration Association (AAA) runs the arbitration under its Consumer Arbitration Rules. A single arbitrator decides. The arbitrator may award the same individual relief that a court could. Fees follow the AAA rules.
- No class actions. You and we may bring claims only for ourselves, not as a plaintiff or class member in a class, collective or representative action. The arbitrator may not combine claims of more than one person. If this paragraph cannot be enforced for a claim, that claim is not arbitrated and goes to court instead.
- Small claims. Either side may bring an individual claim in small claims court instead, if the claim qualifies there.
- Opting out. You may opt out of arbitration within 30 days after you first accept these terms. Email support@agentauthority.org from your account email and say that you opt out of arbitration. Opting out does not change the rest of these terms.
- Courts. Any claim that is not arbitrated must be brought in the state or federal courts located in South Carolina, and both sides agree to those courts' jurisdiction.
The registry's dispute process in section 11 is separate. It does not replace this section.
17. Changes to these terms
We may change these terms. For a material change, we will email account holders and post the new terms at least 30 days before the change takes effect. The "Last updated" date at the top shows the latest version. If you keep using the Service after a change takes effect, you accept the new terms. If you do not agree, cancel before it takes effect.
18. General
- These terms and the Privacy Notice are the whole agreement between you and us about the Service.
- If a part of these terms cannot be enforced, the rest still applies.
- If we do not enforce a right, we have not waived it.
- You may not transfer these terms without our consent. We may transfer them as part of a merger, acquisition or sale of assets, with notice to you.
- We send notices to your account email. You send notices to us by email, at the contact email below.
19. Contact
- MedoMatic, LLC
- Email: support@agentauthority.org