Terms of service

These terms apply to the hosted mcpprobe service, the GitHub Action and this website, operated by ORGANIC VILLAGE(UK) LIMITED (11783758). The open-source CLI is also covered by the licence in its repository; where the two differ, the licence governs the code and these terms govern the service.

1. Authorisation to scan

By adding a target or starting a scan you represent that you own the target or have the owner's authority to test it, and that the authority covers the scan mode you choose. We record that representation, the verification proof and the scope as an authorisation record and keep it for six years.

We do not independently prove your authority beyond the verification step. If you misrepresent it, you are responsible for the consequences, and you agree to indemnify us against claims arising from scans you started without authority.

2. Verification comes first

Active checks run only against targets verified by a DNS TXT record you publish, or, for stdio servers you run yourself, local verification. Verification is re-checked before each scan and expires after 90 days. If it lapses, scanning stops until you verify again.

3. What the service does and does not do

mcpprobe identifies security issues and proves them with the minimum evidence needed. It does not exploit them, write, modify or delete data on your server, or call tools outside the scope you approve. The commitments in the scanning policy form part of these terms.

4. Opt-outs and third parties

If a host publishes an mcpprobe opt-out, scans of it stop, even if you have verified it. If your MCP server calls an upstream service you do not own, only tools you have explicitly allowed are called in active mode; you are responsible for having permission to cause those calls.

5. Accounts, plans and payment

Paid plans are billed monthly in GBP, plus VAT where it applies, and renew until cancelled. You can cancel any time from Billing; the plan runs to the end of the period you paid for. Plan limits are described on the pricing page.

6. Acceptable use

Your use must follow the acceptable-use policy. We may suspend an account that breaks it, and will tell you why unless the law prevents us.

7. Results and warranties

A scan reports what it observed at that time against the checks listed in the checks catalogue. A clean result does not mean a server is secure, and checks marked heuristic or judged can be wrong. The service is provided with reasonable skill and care; beyond that, and to the extent the law allows, it is provided without further warranties.

8. Liability

Nothing in these terms limits liability that cannot be limited by law. Otherwise our total liability in any 12-month period is limited to the fees you paid us in that period.

9. Changes and law

We will give 30 days' notice by email of material changes. These terms are governed by the law of England and Wales, and its courts have jurisdiction.