MCP Studio Terms of Service

1. Interpretation and Definitions

Capitalised words have the meanings set out below, and carry the same meaning in the singular and the plural.

• "Company", "we", "us", and "our" mean Appa Tools LLC.
• "Service" means MCP Studio, the web application at appatools.com/mcp-studio, its API, and the MCP server endpoints it creates for you.
• "You" means the person using the Service, or the organisation on whose behalf that person is using it.
• "Account" means the account created for you when you first sign in.
• "Source" means anything you connect to an MCP server as content to be indexed or queried: a website, a documentation site, a GitHub repository, an API, another MCP server endpoint, or a file you upload.
• "Your Content" means everything reached through a Source, along with the names, descriptions, labels, custom tool definitions, and other text you enter into the Service.
• "MCP Server" means an endpoint the Service creates for you, which AI clients query using the Model Context Protocol.
• "Terms" means this document.

2. Acknowledgment

These Terms govern your use of the Service and form the agreement between you and the Company. Your access to and use of the Service is conditioned on your acceptance of them.

You accept these Terms by selecting the acceptance checkbox on the sign-in page before your account is created. We record the version you accepted and the time you accepted it. If we publish a new version of substance, you will be asked to accept it at your next sign-in, and you will not be signed in until you do.

You represent that you are at least 18 years old. We do not knowingly permit anyone under 18 to use the Service.

If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms, and "you" means both you and that organisation.

3. Beta Status

The Service is currently in beta. Features may change, be removed, or behave unexpectedly, and availability is not guaranteed. Beta access may be provided free of charge or at a reduced rate, and that pricing is not a commitment to future pricing.

Do not connect content to a beta service if losing access to it, or to the index built from it, would cause you a problem you cannot recover from. Keep your own copy of anything that matters.

4. Your Account

You sign in with GitHub or Google. We do not hold a password for you, so the security of your account is the security of the provider account you sign in with. Protect it accordingly, and tell us immediately if you believe your account has been accessed without your permission.

You must give us accurate information and keep it current. You are responsible for everything that happens under your account, including anything done by someone using an API key, MCP access token, or MCP server URL issued to you.

We do not merge two sign-in methods automatically. If an email address is already registered with one provider, signing in with a different provider that asserts the same address is refused rather than treated as the same person. This is deliberate: automatic linking by email means anyone who can make a provider assert your address can take your account.

5. Your Content and Sources

Your Content is yours. Connecting a Source does not transfer any ownership to us.

You grant us a non-exclusive, worldwide, royalty-free licence to access, fetch, store, copy, transform, chunk, embed, index, and transmit Your Content for the sole purpose of operating the Service for you. That licence exists so we can crawl the URLs you paste, extract text from the files you upload, generate vector embeddings with our embedding provider, store the results, and return passages to AI clients you authorise. It covers nothing else. We do not use Your Content to train models, and we do not sell it.

What you are promising us about your Sources

You represent and warrant that for every Source you connect, you either own the content or have the right to have it fetched, stored, and indexed the way the Service does, and that doing so does not infringe anyone’s copyright, trade secret, privacy, publicity, contract, or other rights.

This matters more here than in most products, because the Service fetches URLs you supply using our infrastructure and with your credentials where you provide them. When you paste a private repository URL, attach an API key to an MCP source, or upload a file, you are asking us to reach content on your behalf and you are asserting that you may. We do not and cannot verify it.

Uploaded files

When you upload a file, we extract its text and store that extracted text, its embeddings, and the file name. We do not retain the original file. For image files we may send the image to Anthropic to produce a text description so the image is searchable; that description is stored as content. Do not upload files containing payment card data, government identifiers, health records, or other sensitive personal information.

Source credentials

An API key you attach to an MCP source is encrypted at rest and sent only to the endpoint you attached it to. You are responsible for the scope of the key you provide. Give us the narrowest key that works, and rotate it from the dashboard rather than by deleting and re-adding the source.

Removal

We may remove or refuse a Source, or suspend an MCP Server, if we believe in good faith that it violates these Terms, infringes someone’s rights, or exposes us or our providers to legal risk. We are not obliged to monitor Sources and we do not review them before they are indexed.

6. Public and Private MCP Servers

An MCP Server you create as public answers requests from anyone who knows its URL. This is the default, and it is the correct default for indexed public documentation, but you should understand it before connecting anything else: a public server has no access control, and its URL is the only thing standing between its indexed content and a stranger.

A private MCP Server refuses any request that does not carry a valid access token, including requests to list its tools. Connecting a private GitHub repository or a credentialed MCP source makes a server private automatically and locks it that way until the source is disconnected, because we will not serve content only your credentials could reach from an open endpoint.

Access tokens are shown once, when they are issued, and cannot be retrieved afterward. Keeping them secret is your responsibility, and anyone holding one can read everything the server indexes.

7. Plans, Billing, and Refunds

The Service has a free tier with published limits, one-time purchases, and monthly subscriptions. Current pricing is on the pricing page and is part of these Terms by reference.

Payments are processed by Stripe. We do not see or store your card details. Subscriptions renew monthly until cancelled and are charged in advance. You may cancel at any time from the billing portal; cancellation takes effect at the end of the period you have paid for, and we do not pro-rate a partial month.

One-time purchases, including an additional source slot, are consumed when used and are not refundable once used. Additional source slots you have purchased are not revoked if your subscription lapses.

If a payment fails, access continues while we and Stripe attempt to recover it. If it is still unpaid after fourteen days, paid capability is removed and the account returns to the free tier. A failed payment does not delete your MCP servers, your sources, or your analytics history: your work is not collateral for an expired card.

We may change pricing. A change to the price of an existing subscription takes effect at your next renewal and we will tell you before it does.

8. Usage Limits

Your plan sets limits on the number of MCP servers, the number of sources per server, the total indexed size, and the number of monthly MCP requests. The Service enforces them, and a request beyond a limit is refused rather than charged for.

We also apply limits that protect the Service as a whole: a maximum number of pages and chunks per source, a crawl time budget, rate limits, and an upload size cap. These are operational and we may change them without notice. We will not reduce a published plan limit you are paying for without telling you first.

9. Request Telemetry and Analytics

The Service records each MCP request made to your servers: which tool was called, the query text, how long it took, whether it succeeded, and up to a few hundred characters of each passage that was returned. This is what the dashboard and the analytics tiers are built from, and it is recorded for every account regardless of tier so that upgrading shows you your existing history rather than starting from nothing.

That data is retained for a defined period rather than indefinitely. On the free tier, query text and returned passages are removed after 90 days and the remaining request records are deleted after 395 days.

We also use PostHog to understand how the product itself is used. Our Privacy Policy describes this and the rest of our data handling in more detail.

10. Acceptable Use

You agree not to use the Service to do any of the following.

• Break the law, or help anyone else break it.
• Index, store, or retrieve content you do not have the right to use, including content behind a paywall, licence, or confidentiality obligation that does not permit it.
• Index content whose owner has asked you not to, or whose terms of use prohibit automated collection.
• Circumvent, disable, or interfere with any limit, quota, rate limit, or access control, including by creating multiple accounts to obtain more free capacity than one account allows.
• Probe, scan, or test the vulnerability of our systems, or attempt to access an account, MCP server, or data that is not yours.
• Send us content containing malware, or content designed to damage or gain unauthorised access to any system.
• Impersonate any person or organisation, including us.
• Resell, sublicense, or provide the service to third parties except through the MCP Studio SDK under its own terms.
• Place a load on our systems that degrades the service for other users, including through automated request loops.

We may suspend or terminate access for a violation of this section without prior notice, because the alternative is leaving the violation running while we send an email.

11. Third-Party Services and AI Output

The service depends on third parties, and you should know which ones before you rely on it. We use OpenAI to generate the embeddings that make your content searchable, Anthropic for features that build tools or describe uploaded images, Neon for database hosting, Vercel for compute and hosting, Stripe for payments, Resend for email, and PostHog for product analytics. Your content is processed by these providers to the extent the feature you are using requires it.

We do not control those providers and are not responsible for their acts or omissions. If one of them changes its terms, its pricing, or its availability, the affected feature may change or stop working.

Accuracy of retrieved content and AI output

The service retrieves passages from the content you connect and returns them to AI clients. It does not verify that the content is correct, current, or complete, and it cannot. If the documentation you index is wrong, the answers built on it will be wrong. Where a feature uses a language model — building a custom tool, describing an uploaded image, summarising content — the output is generated and may be inaccurate or misleading even when the underlying content is not.

You are responsible for reviewing anything the service returns before acting on it. Do not use it as the sole basis for a decision with legal, financial, medical, or safety consequences.

12. Availability, Changes, and Data Loss

We aim to keep the Service available and we publish a status page, but we do not offer a service level agreement and we do not guarantee uptime. Indexing, crawling, and search may be delayed, degraded, or unavailable.

We may add, change, or remove features. Where a change removes something you depend on, we will try to give reasonable notice, but in beta we may not be able to.

We take backups. We do not guarantee against loss or corruption of data, including of an index. Keep your own copy of anything you cannot afford to lose; an index is derived from your Sources and is rebuildable from them, which is the reason we treat it as replaceable and you should too.

13. Intellectual Property

The service and everything in it other than Your Content — the software, the interface, the documentation, the name, and the logo — is and remains the property of Appa Tools LLC and its licensors, and is protected by copyright, trademark, and other laws of the United States and other countries.

These Terms grant you a limited, non-exclusive, non-transferable, revocable right to use the service as it is provided. They grant you nothing else. Our trademarks and trade dress may not be used in connection with any product or service without our prior written consent.

14. Copyright Complaints

We respect intellectual property rights. If you own a copyright, or are authorised to act for the owner, and you believe content indexed through the Service infringes it, send a notice to zair@appatools.com under the Digital Millennium Copyright Act. Include a physical or electronic signature, identification of the work you say is infringed, the URL or MCP server where the material is reachable, your address, telephone number, and email address, a statement that you have a good faith belief the use is not authorised, and a statement made under penalty of perjury that your notice is accurate and that you are the owner or authorised to act for them.

On receipt we will take the action we consider appropriate, which may include removing the source and its indexed content. Misrepresenting that material is infringing can make you liable for damages, including costs and legal fees.

15. Your Feedback to Us

If you send us feedback, suggestions, or ideas about the service, you assign all rights, title, and interest in that feedback to us. If that assignment is ineffective for any reason, you grant us a non-exclusive, perpetual, irrevocable, royalty-free, worldwide licence to use, reproduce, disclose, sublicense, distribute, modify, and exploit it without restriction and without owing you anything.

This is not a claim on your source code or your documentation. It covers what you tell us about our product.

16. Links to Other Websites

The Service links to and fetches from websites we do not own or control. We assume no responsibility for their content, privacy policies, or practices, and we are not liable for any loss arising from your use of or reliance on them. Read the terms and privacy policies of any third-party site you connect as a Source.

17. Term and Termination

These Terms apply for as long as you use the Service.

You may stop at any time. You may also request deletion of your account from your account settings. Requesting deletion cancels every live subscription you hold immediately, stops all of your MCP server endpoints from answering right away, and schedules your data for permanent deletion 24 hours later. It is irreversible and there is no cancel path, which is why the endpoints stop at once rather than at the end of the window.

We may suspend or terminate your access immediately and without prior notice if you breach these Terms, if we are required to by law, or if continuing to serve your account would expose us or our providers to material risk.

Sections covering Your Content warranties, intellectual property, feedback, limitation of liability, the disclaimer, governing law, and dispute resolution survive termination.

18. Limitation of Liability

To the maximum extent permitted by applicable law, the entire liability of Appa Tools LLC and its suppliers under any provision of these Terms, and your exclusive remedy for all of it, is limited to the greater of the amount you actually paid us for the Service in the twelve months before the claim arose, or one hundred United States dollars.

To the maximum extent permitted by applicable law, we and our suppliers are not liable for any indirect, incidental, special, consequential, or punitive damages whatsoever, including damages for lost profits, lost revenue, lost data, business interruption, or loss of goodwill, arising out of or in any way related to your use of or inability to use the service, even if we have been advised of the possibility of those damages and even if the remedy above fails of its essential purpose.

Some jurisdictions do not allow the exclusion of implied warranties or the limitation of liability for incidental or consequential damages. In those jurisdictions our liability is limited to the greatest extent permitted by law.

19. "AS IS" and "AS AVAILABLE" Disclaimer

The service is provided to you "AS IS" and "AS AVAILABLE", with all faults and defects and without warranty of any kind. To the maximum extent permitted by applicable law, we disclaim all warranties, whether express, implied, statutory, or otherwise, including all implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement, and any warranties arising out of course of dealing or usage of trade.

We make no representation or warranty that the service will meet your requirements, achieve any intended result, be compatible with any other software or service, operate without interruption, meet any performance or reliability standard, be free of errors, or that any error will be corrected. We do not warrant the accuracy, reliability, or currency of any content the service retrieves or generates.

Some jurisdictions do not allow the exclusion of certain warranties or limitations on a consumer’s statutory rights, so some or all of the above may not apply to you. In that case the exclusions apply to the greatest extent enforceable under applicable law.

20. Indemnification

You agree to indemnify and hold harmless the Company and its officers, employees, and suppliers from any claim, demand, loss, liability, or expense, including reasonable legal fees, arising out of Your Content, the Sources you connect, your breach of these Terms, or your violation of any law or of anyone else’s rights.

21. Governing Law

The laws of the State of Illinois, United States, excluding its conflict of law rules, govern these Terms and your use of the service. Your use may also be subject to other local, state, national, or international laws.

22. Dispute Resolution

If you have a concern or dispute about the service, you agree to try to resolve it informally first by contacting us at zair@appatools.com. Most problems are a misunderstanding about how something works, and we would rather fix that than argue about it.

If a dispute cannot be resolved informally, you and Appa Tools LLC agree that it will be brought exclusively in the state or federal courts located in the State of Illinois, United States, and you and we each consent to the personal jurisdiction of those courts.

European Union users

If you are a consumer resident in the European Union, you keep the benefit of any mandatory provisions of the law of the country in which you live, and nothing above removes them.

23. United States Legal Compliance

You represent and warrant that you are not located in a country subject to a United States government embargo or designated by the United States government as a terrorist-supporting country, and that you are not listed on any United States government list of prohibited or restricted parties.

24. Severability and Waiver

If any provision of these Terms is held unenforceable or invalid, that provision will be modified and interpreted to accomplish its objective to the greatest extent possible under applicable law, and the remaining provisions continue in full force.

Our failure to exercise a right or to require performance of an obligation under these Terms does not affect our ability to do so later, and waiving a breach does not waive any later breach.

25. Changes to These Terms

We may modify or replace these Terms at any time. Each version carries a version identifier, shown at the top of this page.

When we make a change of substance we publish the new version here and ask you to accept it the next time you sign in. We do not treat continued use as silent agreement to a materially different agreement.

If you do not agree to a new version, stop using the service and, if you wish, request deletion of your account. Nothing obliges you to accept a change you disagree with.

26. Contact Us

Questions about these Terms go to zair@appatools.com. A person reads that address.