Terms of Service

Last updated: 2026-10-27

These terms are an agreement between you and MedoMatic, LLC ("MedoMatic", "we", "us"). They cover your use of Agent Authority at agentauthority.org, its API, its MCP server and its emails (together, the "Service"). By creating an account, paying for a plan, or registering an agent, you agree to these terms. If you act for a company, you agree for that company and you confirm that you may bind it.

Our Privacy Notice explains how we handle personal information. It is part of these terms.

1. What Agent Authority is

Agent Authority is a public registry. It records who owns each registered AI agent and who can sign for it. Anyone can look up a registered agent and check a signed record of its owner, its signing keys and its history. Public registry entries are public by design.

The registry records facts that owners and verification providers give us. It does not supervise agents, check what agents do, or vouch for their behavior.

2. Who can use the Service

• You must be at least 18 years old and able to make a binding contract.
• Identity verification currently accepts a US driver's license or US state ID. Personal plans are for people who live in a US state or territory. Company plans are for companies formed in a US state or territory.
• You must give true, current and complete information, and keep it up to date.
• One person may hold one verified personal account. If a second account uses the same government ID, it goes to account recovery. It does not become a second verified owner.

3. Your account

• Sign-up and sign-in run through WorkOS. WorkOS confirms your email and sets up two-step sign-in.
• Keep your sign-in details and your agents' private signing keys safe. Your account credentials are separate from your agents' signing keys. We never ask for your private keys.
• You are responsible for everything done through your account and with your agents' keys, until you tell us about a problem or revoke the key.
• Tell us at once at support@agentauthority.org if you think someone else has access to your account or keys.

4. Identity verification

• To become a verified owner, you pay for your plan and then complete an identity check with Persona, our identity verification provider. Persona checks a government ID and a live selfie.
• Before the check starts, we ask for your consent to the scan of your ID and selfie, including face geometry. The biometric notice in our Privacy Notice explains what is collected, who holds it and how long it is kept. You agree by ticking a box and typing your full name as your signature. We record the name you typed, when you agreed and to which version of the notice, and we do not start the check without that record.
• You are verified only if Persona approves the check, both the ID and the selfie checks pass, and the state on your ID matches the state you declared.
• A verification shows that a check passed at one point in time. It is not a guarantee of anyone's identity, character or future conduct.
• We may decline, pause or reverse a verification if a check fails, if information turns out to be false, or if we suspect fraud.
• If Persona declines your check. You pay before the check. If Persona's outcome is declined, we automatically refund your payment minus a $3 verification fee, which covers the cost of the check, and your plan ends at once. The refund goes back to the card you paid with. Your bank may take 5 to 10 business days to show it. To try again later, you pay for a new plan.

5. Companies

• A company is verified when both of these are done: (a) it passes the checks in Business verification, and (b) it proves control of its web domain with a DNS TXT record at _agentauthority.<domain>. The domain step can be done later, including by the company's IT team. The company cannot approve agents until both are done.
• A representative who passed the Persona check must also confirm that they are authorized to act for the company. That person becomes the company's first representative.
• By confirming, you promise that you are authorized to act for the company. A false statement may lead to suspension and may be unlawful.
• Pending domain verification expires after 30 days. It can be restarted.
• We check each verified company domain every day. If the record is missing, we email the company and a 14-day grace period starts. If the record is still missing after 14 days, the company's agents show as unverified in public, and the company cannot add new agents or new acceptances until the record is restored and checked again. A day on which the check cannot get a clear answer does not count against you.
• Nothing is deleted when a domain lapses. The company's history stays in the registry.
• Representatives act under the permissions the company gives them. The company is responsible for the representatives it appoints.

Business verification

Business verification. To register a business, we verify it with outside data providers. We check that the business is legally registered and active, that its tax ID matches where one is given, and that it does not appear on government sanctions or watch lists. We also verify that the person signing up is a listed officer of the business and confirm their identity with a government ID. Some businesses, such as sole proprietors, businesses using a trade name, and newly formed companies, may need manual review. We may decline or pause a registration if we cannot verify it or if a check raises concerns. We keep verification results only as long as needed to provide the service and meet legal obligations.

6. Agents, keys and acceptances

• When you register an agent, you accept an ownership agreement for that agent and authorize its listed signing key. You can read the agreement before you accept it.
• You are responsible for your registered agents, what they sign, and the safety of their keys.
• You can revoke a key or end an agent's registration at any time. Ending a registration stops future authority. It does not erase past records.
• Registry records are append-only. We keep the history of every agent, acceptance, key change and dispute, so that anyone can check what was true at a given time.

7. What is public

The public registry shows, for each registered agent: its display name, its owner's registry ID, owner type and verification status, its public signing keys, its acceptance history and agreements, any signing custodian, and any published disputes. Each public record is signed by the registry.

• For a company owner, the public record also shows the company's legal name, its state or territory and the state of its domain check.
• For a personal owner, the public record does not show your legal name. Your identity is shared only if you choose to share it, or through the registry's disclosure and dispute process described in the Privacy Notice.

Anyone may read, copy and keep public records. We cannot recall copies made outside the registry.

8. Names and usernames

Not yet live. Names and usernames are planned. This section describes the rules that will apply when they launch.

• Addresses point to the agent ID. Every agent has a permanent agent ID. Its public address, like @jsmith/ralphie for a personal account or @acme.com/ralphie for a company, only points to that ID. Records, signatures and history always use the agent ID.
• Who can claim a username. An owner with a personal account can claim a username after passing the identity check, with a paid or trial plan. A username shows on public pages only if its owner turns that on. A company's addresses come from the domains it proves it controls. A company has no username, except a trademarked one (next point).
• Trademarked usernames. A trademark owner can claim its trademarked name as its username (for example, the username dietcoke, addressed as @dietcoke), subject to our trademark check. An owner who does not own the trademark cannot take a trademarked username.
• Format. Usernames are 3 to 30 characters: lowercase letters, digits, hyphens (-) and underscores (_). No dots. A username cannot start or end with a hyphen or underscore, or have two in a row. Look-alike usernames count as the same username (for example, j0hn and john, or jane_smith and jane-smith).
• Reserved names. System words (such as admin, support, legal, privacy and terms) can never be claimed. Names of well-known brands are held until the claimant proves control of the brand's listed domain. Names of public figures are held until we review a request from a verified owner. A request that is turned down gets a reason, never another owner's information.
• Company domains. A company's agents can be found under every domain it proves. One of them is its main domain, and addresses under the others redirect to it.
• Changes and the 90-day hold. An address changes when an agent is renamed, when a username changes, or when an agent moves to a new owner. The old address then redirects to the agent's new address for 90 days. During those 90 days, only the original owner can claim the old name again. After 90 days, the old name is released and anyone may claim it.
• Upgrading to a domain. An owner can move their username up to a domain they prove they control. The old addresses follow the 90-day hold above.
• No sale or transfer. You may not sell, rent or transfer a username. A username stays with its owner. We may release or reassign a username only after a resolved dispute with a recorded reason, for example for impersonation or a proven claim to a held name.
• Domains. Control of a domain in DNS decides who holds a domain name in the registry. We do not decide trademark claims about domains; those go to the domain registrar. Before names launch, we will publish here when a domain that stays unverified is released. A new holder of a released domain starts with a new, empty record and does not inherit the old holder's agents, history or badges.

9. Plans, billing and renewal

Payments are processed by Stripe. Card details are entered on Stripe's pages and never reach us. Stripe's own terms also apply to your payment.

Prices (US dollars, per year):

• Personal plan: $10 per year. Includes your identity check and 1 agent.
• Extra personal agent: $2 per year each.
• Company plan: $250 per year. Includes 1 registered agent.
• Extra company agent: $10 per year for each registered agent after the first. Running copies of the same registered agent are free.

Prices do not include taxes, which we add where the law requires. The price shown before you pay is the price you are charged.

Automatic renewal. Every plan renews automatically each year at the then-current price, charged to the card on file, until you cancel. We email a reminder about 30 days and again about 7 days before each yearly renewal. It states the price, the renewal date and how to cancel online. If you have already cancelled, we do not send it. If we change a price, we will email you at least 7 and no more than 30 days before the change takes effect, and you can cancel before it does.

Adding agents mid-year. When you add an agent, you are charged at once for the prorated rest of your plan year. After that, it renews with your plan.

Retiring agents. When a company retires a registered agent, there is no refund for the rest of the year. The lower agent count applies from your next renewal. You can remove an extra personal agent yourself: open Billing and choose Remove an extra agent. You keep it until your next renewal, and from then on your plan costs less. There is no refund for the rest of the year. Your registered agents must fit the lower count, so retire an agent first if needed. The agent's history stays in the registry.

Cancelling. You can cancel online at any time. Sign in, open Account or Billing, and choose Manage billing / Cancel subscription. This opens Stripe's secure billing page, where you can also change your card and see your invoices. You can also cancel by emailing support@agentauthority.org from your account email. When you cancel, your plan stays active until the end of the year you paid for, and is not renewed. Your agents keep working until that date. After it, your agents show as lapsed: public registry and verification checks show them as not currently authorized, and they cannot sign anything new. Nothing is deleted; their records and history stay. We email you when your cancellation is scheduled and again when your agents lapse. Until the end date you can undo the cancellation: open Account and choose Resume subscription. After it, renew on Billing to reactivate your agents. We do not refund part of a year, except for a declined identity check (section 4) or where the law requires it.

Failed payments. If a payment fails, Stripe retries it. Your plan stays active while it retries. If payment does not succeed, your plan lapses and your agents show as lapsed until you pay. Lapsed records are not deleted.

Founding offer (not yet live). The founding offer depends on the names feature and will start when names launch. We will publish its start date here before it begins. For 90 days from that date:

• A person who passes the identity check and claims an @username in that window gets a permanent "Founding owner" badge and the first year of the personal plan free. We will publish the rules for companies before the offer starts.
• During the window, checkout starts a 365-day free trial. You still give a card, and it is kept on file. When the trial ends, you are charged the normal yearly price unless you cancel first.
• If the window closes and you have not claimed a username, we end your trial early (we check daily), and you are charged the normal yearly price on that day.
• One free year per verified person. The badge never expires and cannot be transferred.
• We will publish how extra agents are charged during the free year before the offer starts.

Verification deposit

New sign-up (your identity check runs as part of business verification):

Verification deposit. Before we start verifying your business, we place a $250 hold on the business card you provide. Nothing is charged yet. The deposit pays for the business check and the identity check of the person signing up. If you cancel before any check starts, we release the hold and charge nothing. If verification fails or you stop after a check has started, we charge a $25 deposit and release the rest. The deposit is non-refundable. If verification succeeds, we charge the $250 as your first year's plan price. A card hold ends after about a week, so if verification takes longer, we charge the $25 deposit when the hold ends and charge the remaining $225 to the same card when verification succeeds. Your domain must also be verified before you can approve agents. Pending domain verification expires after 30 days and can be restarted at no extra charge.

Already identity-verified (for example, signed in and adding a company):

Verification deposit. Before we start verifying your business, we place a $250 hold on the business card you provide. Nothing is charged yet. If you cancel before any check starts, we release the hold and charge nothing. If verification fails or you stop after a check has started, we charge a $25 deposit and release the rest. The deposit is non-refundable. If verification succeeds, we charge the $250 as your first year's plan price. A card hold ends after about a week, so if verification takes longer, we charge the $25 deposit when the hold ends and charge the remaining $225 to the same card when verification succeeds. Your domain must also be verified before you can approve agents. Pending domain verification expires after 30 days and can be restarted at no extra charge.

10. Acceptable use

You must not:

• give false information, or pretend to be a person, company, brand or agent you are not;
• register an agent you do not control, or a key you do not hold;
• use the registry or registered agents for fraud, or for anything unlawful;
• claim names to sell them, to block others, or to mislead (squatting);
• probe, scrape or load the Service beyond its published rate limits, or try to find out who holds a name or account;
• break, bypass or test the security of the Service, except under our security policy and responsible disclosure process;
• interfere with other users, the verification process, or the registry's signing and audit systems;
• upload malware, or use the Service to send spam.

11. Disputes about registry records

Anyone affected by a registry record may file a dispute. Reviewers decide disputes under the published policy. A published dispute shows on the agent's public record. Dispute history is kept and is not deleted. The dispute process is not a court and does not replace your legal rights.

12. Suspension and ending

• You may stop using the Service at any time. Cancelling your plan is covered in section 9.
• We may suspend or end your access if you break these terms, if we must by law, or to protect users or the registry. Where we can, we will tell you why and give you a chance to fix the problem.
• When access ends, public registry records and their history stay, because the registry's value depends on a complete history. Your agents will show their real status, such as revoked, lapsed or ended.
• Sections that by their nature should continue, such as 7, 13, 14, 15, 16 and 17, continue after access ends.

13. No warranty

The Service is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not promise that the Service will be uninterrupted or error-free, that any verification is correct, or that any registered agent is safe, lawful or acting for its owner. Registry records are not legal advice.

14. Limitation of liability

To the fullest extent the law allows:

• we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill;
• our total liability for all claims about the Service is limited to the greater of the amount you paid us in the 12 months before the claim, or US $100.

Some places do not allow these limits, so they may not apply to you.

15. Indemnity

You will defend and hold us harmless from claims by third parties that arise from your agents, your breach of these terms, or your false statements, including a false claim of authority for a company.

16. Governing law and disputes

These terms are governed by the Federal Arbitration Act and other US federal law, and otherwise by the laws of the State of South Carolina, USA, without regard to its conflict-of-law rules.

Please read this section carefully. It affects your rights.

• Talk to us first. Before you start a claim, email support@agentauthority.org with a description of the problem and what you want. We will try to resolve it within 30 days.
• Binding arbitration. If we cannot resolve it, you and we agree that any dispute about these terms or the Service will be decided by binding individual arbitration, not in court. The American Arbitration Association (AAA) runs the arbitration under its Consumer Arbitration Rules. A single arbitrator decides. The arbitrator may award the same individual relief that a court could. Fees follow the AAA rules.
• No class actions. You and we may bring claims only for ourselves, not as a plaintiff or class member in a class, collective or representative action. The arbitrator may not combine claims of more than one person. If this paragraph cannot be enforced for a claim, that claim is not arbitrated and goes to court instead.
• Small claims. Either side may bring an individual claim in small claims court instead, if the claim qualifies there.
• Opting out. You may opt out of arbitration within 30 days after you first accept these terms. Email support@agentauthority.org from your account email and say that you opt out of arbitration. Opting out does not change the rest of these terms.
• Courts. Any claim that is not arbitrated must be brought in the state or federal courts located in South Carolina, and both sides agree to those courts' jurisdiction.

The registry's dispute process in section 11 is separate. It does not replace this section.

17. Changes to these terms

We may change these terms. For a material change, we will email account holders and post the new terms at least 30 days before the change takes effect. The "Last updated" date at the top shows the latest version. If you keep using the Service after a change takes effect, you accept the new terms. If you do not agree, cancel before it takes effect.

18. General

• These terms and the Privacy Notice are the whole agreement between you and us about the Service.
• If a part of these terms cannot be enforced, the rest still applies.
• If we do not enforce a right, we have not waived it.
• You may not transfer these terms without our consent. We may transfer them as part of a merger, acquisition or sale of assets, with notice to you.
• We send notices to your account email. You send notices to us by email, at the contact email below.

19. Contact

• MedoMatic, LLC
• Email: support@agentauthority.org