Agent Master Key — Terms of Service and End-User License Agreement
Effective Date: June 17, 2026 Version: 1.1 Issued by: AM Accelerated LLC, an Ohio limited liability company ("Company," "we," "us," or "our") Product: Agent Master Key ("AMK" or the "Software") Website: agentmasterkey.com
1. Acceptance of Terms
By downloading, installing, activating, or using Agent Master Key, you ("you" or "Licensee") agree to be bound by these Terms of Service and End-User License Agreement (collectively, these "Terms"). If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity. If you do not agree to all of these Terms, do not install or use the Software.
These Terms constitute the entire agreement between you and the Company with respect to the Software and supersede all prior or contemporaneous agreements, representations, warranties, and understandings.
2. Description of the Software
Agent Master Key is a local-first macOS application. Its core function is to let you store third-party provider API keys on your own Mac in a locally encrypted vault, and to issue scoped, revocable "Agent Master Keys" (amk_live_... format) that AI agents use to call provider APIs through a local policy-and-audit broker running at http://127.0.0.1:47381.
What AMK does not do:
- AMK does not transmit your provider secrets or API keys to any Company-operated server or cloud service. All secret material remains on your device.
- AMK is not a cloud-hosted credential manager. The Company does not custody, escrow, or have access to your provider secrets.
- AMK does not guarantee the security, availability, or behavior of any third-party provider (GitHub, OpenAI, Anthropic, Telegram, Notion, Cloudflare, Sentry, Firecrawl, or others).
3. License Grant
Subject to your compliance with these Terms, the Company grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to:
- Install and run version 0.0.16 Public Preview on Mac computers that you own or control; and
- Use the Software solely for your own lawful internal purposes, including use by AI agents operating under your account and on your behalf.
This license does not include the right to modify, adapt, translate, reverse-engineer, decompile, disassemble, or create derivative works of the Software, except to the extent that applicable law expressly prohibits such restriction.
4. License Restrictions
You agree not to, and not to permit others to:
- Distribute or resell. Copy, sell, resell, sublicense, rent, lease, or distribute the Software or any portion of it to any third party.
- Reverse engineer. Reverse-engineer, decompile, disassemble, or attempt to derive the source code of the Software, except as expressly permitted by applicable law.
- Remove notices. Remove, alter, or obscure any proprietary notices, labels, or marks in or on the Software.
- Bypass controls. Circumvent, disable, or otherwise interfere with the local broker's policy engine, approval queue, kill switch, or audit chain. This includes but is not limited to modifying agent key files, patching the broker binary, or tampering with the local encrypted vault.
- Unlawful use. Use the Software to access third-party services in violation of applicable law or those services' terms of service.
- Credential sharing. Share an Agent Master Key (
amk_live_...) with any party other than an AI agent or automation operating under your direct supervision and control. - Automated account creation. Use the Software to create or manage accounts on third-party platforms in violation of those platforms' policies.
5. Public Preview and Prior-Customer Rights
5.1 Public Preview Access
Version 0.0.16 includes launch access to all product capabilities. The Company will not remotely downgrade that build. If later releases use materially different commercial terms, the Company will publish notice at agentmasterkey.com/blog at least seven days before those terms apply.
5.2 Prior-Customer Rights and Refunds
The Public Preview does not limit rights attached to access obtained before July 16, 2026. Billing errors, duplicate charges, access-delivery problems, unauthorized transactions reported promptly, and statutory-rights claims remain reviewable under the Refund Policy at agentmasterkey.com/refunds.
5.3 Taxes on Prior Transactions
You remain responsible for applicable taxes, duties, or levies arising from a prior transaction, excluding taxes on the Company's net income.
6. User Responsibilities for Credentials and Agent Actions
6.1 You Own Your Secrets
You are solely responsible for:
- The security of any provider API key, bot token, or other credential you add to the local vault.
- Ensuring that credentials you store are obtained lawfully and that you are authorized to use them.
- Rotating or revoking any credential that you believe has been compromised.
6.2 You Own Your Agents' Actions
Any AI agent to which you issue an Agent Master Key acts on your behalf. You are solely responsible for:
- All API calls, data reads, data writes, and any other actions taken by agents using your Agent Master Keys.
- Consequences of approving or auto-approving high-risk actions in the local approval queue.
- Reviewing the local audit log (accessible through the Mac app, web dashboard at
http://127.0.0.1:47381, and CLI) to detect unexpected agent behavior.
The Company is not a party to any action an agent takes against a third-party service. You bear full legal and financial responsibility for such actions.
6.3 Scoping and Least Privilege
The Software provides tooling to issue Agent Master Keys with explicit connector, tool, and risk-level grants (e.g., connector:github, risk:high). You are responsible for applying least-privilege scoping. Issuing an overly broad Agent Master Key is your decision and your risk.
6.4 Emergency Kill Switch
The Software includes an emergency kill switch accessible through the Mac app, web dashboard at http://127.0.0.1:47381, and CLI. You are responsible for activating it promptly if you believe an agent is behaving unexpectedly or a credential has been compromised. The Company has no ability to remotely disable your local installation.
Persistence: The kill switch state is persisted to disk and survives a broker restart. Re-enabling after a restart is not required.
7. Third-Party Provider Terms and Services
7.1 Your Obligation to Comply
The Software enables you to connect to third-party provider APIs including, but not limited to, GitHub, OpenAI, Anthropic, Telegram, Gmail, Google APIs, Notion, Sentry, Cloudflare, Firecrawl, and OpenRouter. Each provider has its own terms of service, usage policies, rate limits, and acceptable-use restrictions. You are solely responsible for reading and complying with those terms.
The Company does not warrant that your intended use of any provider API through the Software is permitted by that provider's terms.
7.2 Provider Changes
Third-party providers may change their APIs, authentication schemes, rate limits, or terms without notice. The Company does not guarantee that any connector will remain functional following a provider change. The Company will make commercially reasonable efforts to update connectors for supported providers, but accepts no liability for provider-side changes.
7.3 Connector Readiness
Only connectors explicitly marked as production-ready in the current release are supported. A connector is not advertised as production-ready until it has passed live end-to-end verification (see scripts/critical-connector-proof.mjs and scripts/live-provider-smoke.mjs). Do not assume an unlisted or in-development connector is suitable for production use.
7.4 Provider Authorization
You are responsible for ensuring that any API key or credential you supply was obtained from the relevant provider in accordance with that provider's terms, and that your intended use is within the scopes and permissions the credential grants.
8. Intellectual Property
8.1 Ownership
The Software, including all code, UI, documentation, connector manifests, and associated materials, is the proprietary property of the Company and its licensors. These Terms do not transfer any ownership interest to you. All rights not expressly granted herein are reserved by the Company.
8.2 Feedback
If you provide feedback, suggestions, or bug reports to the Company, you grant the Company a perpetual, irrevocable, royalty-free, worldwide license to use and incorporate such feedback into the Software or any other Company product without obligation to you.
9. Privacy and Data Handling
9.1 Local-First Architecture
The Software is designed so that your provider secrets never leave your Mac except via the explicit provider API call the Software makes on your instruction. Specifically:
- Provider API keys and tokens are stored in a locally encrypted vault (AES-256-GCM) at
~/.agent-master-key/state/vault.json. The vault's root encryption key is managed locally on your device and is never transmitted to Company-operated servers. - Agent Master Keys (
amk_live_...) are hashed (SHA-256) before any persistence; raw key values are shown only at creation time and are not stored. - Encrypted backup files, if you create them, are encrypted with a passphrase-derived key before being written to disk. The Company does not receive backup files or backup passphrases.
- Audit logs are stored locally.
9.2 What the Company May Collect
The Software does not transmit your provider secrets, agent key values, or local audit log entries to Company servers. Legacy entitlement services remain available only to preserve prior-customer rights. The Company's Privacy Policy, located at agentmasterkey.com/privacy, describes all data handling in detail and is incorporated into these Terms by reference.
10. Disclaimer of Warranties
THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE COMPANY EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:
- IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT;
- ANY WARRANTY THAT THE SOFTWARE WILL MEET YOUR REQUIREMENTS OR BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE;
- ANY WARRANTY REGARDING THE SECURITY, INTEGRITY, OR CONFIDENTIALITY OF DATA PROCESSED THROUGH THE SOFTWARE;
- ANY WARRANTY THAT DEFECTS IN THE SOFTWARE WILL BE CORRECTED;
- ANY WARRANTY REGARDING RESULTS THAT MAY BE OBTAINED FROM USE OF THE SOFTWARE.
AGENT MASTER KEY IS A SECURITY-ADJACENT PRODUCT. NO SOFTWARE SECURITY CONTROL IS PERFECT. KNOWN LIMITATIONS EXIST IN THE CURRENT RELEASE, INCLUDING BUT NOT LIMITED TO:
- ABSENCE OF CALLER-IDENTITY GATING ON THE LOCAL BROKER: ANY PROCESS ON THE LOCAL MACHINE THAT CAN REACH
http://127.0.0.1:47381CAN SUBMIT REQUESTS TO THE BROKER WITHOUT PROVING ITS IDENTITY. - CALLER-IDENTITY GATING IS NOT CRYPTOGRAPHIC: WHILE A VALID AGENT MASTER KEY IS REQUIRED BY DEFAULT, THE BROKER DOES NOT VERIFY THE OS PROCESS IDENTITY OF THE CALLER. ANY LOCAL PROCESS HOLDING A VALID KEY CAN MAKE REQUESTS.
- ADDITIONAL SECURITY GAPS ARE DOCUMENTED IN THE INTERNAL THREAT MODEL (
docs/threat-model.md).
YOU ASSUME ALL RISK ASSOCIATED WITH THE SECURITY AND ADEQUACY OF THE SOFTWARE FOR YOUR USE CASE.
No advice or information, whether oral or written, obtained from the Company or through the Software, will create any warranty not expressly made in these Terms.
11. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:
11.1 IN NO EVENT WILL THE COMPANY, ITS OFFICERS, DIRECTORS, EMPLOYEES, MEMBERS, AGENTS, SUPPLIERS, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, LOSS OF DATA, LOSS OF BUSINESS, LOSS OF GOODWILL, SERVICE INTERRUPTION, COMPUTER FAILURE, OR ANY OTHER COMMERCIAL DAMAGE OR LOSS, ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR YOUR USE OF OR INABILITY TO USE THE SOFTWARE, EVEN IF THE COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
11.2 TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY'S TOTAL CUMULATIVE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SOFTWARE WILL NOT EXCEED THE GREATER OF THE AMOUNT YOU PAID TO THE COMPANY FOR THE SOFTWARE IN THE TWELVE MONTHS PRECEDING THE CLAIM OR THE MINIMUM LIABILITY THAT APPLICABLE LAW REQUIRES.
11.3 SOME JURISDICTIONS DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU. IN SUCH JURISDICTIONS, THE COMPANY'S LIABILITY IS LIMITED TO THE FULLEST EXTENT PERMITTED BY LAW.
11.4 SECURITY INCIDENTS. The Company is not liable for any unauthorized access to, disclosure of, or loss of your provider credentials, data, or any third-party account resulting from: (a) your failure to maintain the security of your Mac; (b) malware or unauthorized software on your device; (c) your disclosure of an Agent Master Key to an unauthorized party; (d) vulnerabilities in third-party provider APIs; or (e) known or unknown security limitations of the Software disclosed in the threat model or release documentation.
11.5 AGENT ACTIONS. The Company is not liable for any action taken by an AI agent using an Agent Master Key you issued, including but not limited to unintended data deletion, API charges incurred with third-party providers, or violations of third-party provider terms.
12. Indemnification
You agree to defend, indemnify, and hold harmless the Company and its officers, directors, members, employees, agents, and licensors from and against any and all claims, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to:
- Your use of the Software, including any agent actions taken using Agent Master Keys you issued;
- Your violation of these Terms;
- Your violation of any third-party provider's terms of service or applicable law;
- Your provider credentials, including any compromise thereof;
- Any claim by a third party arising from an agent action taken on your behalf through the Software.
The Company reserves the right, at its own expense, to assume the exclusive defense and control of any matter otherwise subject to indemnification by you, in which event you will cooperate with the Company in asserting any available defenses.
13. Termination
13.1 Termination by You
You may terminate this license at any time by uninstalling the Software. You may use script/uninstall_macos.sh to perform a clean removal. Termination does not entitle you to a refund except as expressly provided in Section 5.2.
13.2 Termination by the Company
The Company may suspend or terminate your license immediately, with or without notice, if:
- You breach any provision of these Terms;
- The Company is required to do so by applicable law; or
- The Company discontinues the Software.
13.3 Effect of Termination
Upon termination:
- Your license to use the Software immediately ceases.
- You must uninstall the Software and destroy any copies.
- Sections 6, 7, 8, 10, 11, 12, 13.3, 14, 15, 16, and 17 survive termination.
- Termination does not affect the Company's right to enforce obligations that arose before termination.
13.4 No Remote Revocation
Because the Software is local-first and does not require a continuous connection to Company servers for operation, the Company cannot remotely disable your installation. Termination of your license does not automatically disable the Software on your device; you are contractually obligated to cease use upon termination.
14. Updates and Distribution
The Software is distributed as a direct-download macOS application from agentmasterkey.com. The Software is not distributed through the Mac App Store. Pre-release, early-access, internal, or test builds may be distributed before Developer ID signing, Apple notarization, or Gatekeeper readiness is complete. The current distribution status is controlled by the public download gate and release-readiness proof artifacts. The Company is not responsible for any installation obtained from any other source.
Updates may be provided from time to time. The Company does not guarantee a specific update cadence. You are responsible for installing updates, particularly security updates. The current distribution status and signing verification can be confirmed by running script/macos_release_gate.sh and reviewing the release-readiness proof artifacts in docs/proof/.
Updates may be confirmed by reviewing release notes at agentmasterkey.com/changelog.
15. Governing Law and Dispute Resolution
These Terms are governed by the laws of the State of Ohio, without regard to its conflict-of-law principles.
Informal Resolution. Before initiating any formal proceeding, the parties agree to attempt good-faith informal resolution by contacting the Company at support@agentmasterkey.com. The parties will negotiate for at least thirty (30) days before proceeding.
Jurisdiction and Venue. Each party irrevocably consents to the exclusive jurisdiction of the state and federal courts located in Ohio for resolution of any claim not resolved through informal resolution.
16. Export Control
The Software may be subject to United States export laws and regulations. You represent that you are not located in, and are not a national or resident of, any country subject to a United States government embargo or that has been designated by the United States government as a "terrorist supporting" country, and that you are not listed on any United States government list of prohibited or restricted parties. You agree to comply with all applicable export and import laws and regulations.
17. General Provisions
17.1 Entire Agreement
These Terms, together with the Privacy Policy at agentmasterkey.com/privacy and any valid prior order confirmation, constitute the entire agreement between you and the Company concerning the Software.
17.2 Amendments
The Company may update these Terms from time to time. The Company will provide notice of material changes by posting the updated Terms at agentmasterkey.com/terms and updating the Effective Date. Continued use of the Software after the Effective Date of any amendment constitutes acceptance of the revised Terms.
17.3 Severability
If any provision of these Terms is found unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.
17.4 Waiver
Failure by the Company to enforce any right or provision of these Terms is not a waiver of that right or provision.
17.5 Assignment
You may not assign or transfer these Terms or any rights or obligations hereunder without the Company's prior written consent. The Company may freely assign these Terms, including in connection with a merger, acquisition, or sale of all or substantially all of its assets.
17.6 No Third-Party Beneficiaries
These Terms do not create any third-party beneficiary rights.
17.7 Contact
AM Accelerated LLC agentmasterkey.com support@agentmasterkey.com
Appendix A: Key Defined Terms (Quick Reference)
| Term | Meaning |
|---|---|
| Agent Master Key | A scoped, revocable bearer token (amk_live_...) issued by the local broker for use by one AI agent identity. |
| Local Broker | The Node.js process that runs as a user LaunchAgent (com.agentmasterkey.local) at http://127.0.0.1:47381 and enforces policy, approval, and audit controls. |
| Local Vault | The AES-256-GCM encrypted on-device store (~/.agent-master-key/state/vault.json) where provider secrets are kept. The root key is managed locally. The Company has no access to this store. |
| Provider | A third-party API service (e.g., GitHub, OpenAI, Telegram) whose credentials are stored in the Local Vault and accessed through the Software. |
| Connector | A signed, schema-validated manifest plus execution driver that maps AMK policy scopes to provider-specific API calls. |
| Kill Switch | An emergency control accessible via the Mac app, web dashboard, and CLI that halts all broker execution and records a state-change audit event. The kill switch state is persisted to disk and survives broker restarts. |
*Last updated: June 17, 2026.*
Questions? support@agentmasterkey.com · © 2026 AM Accelerated LLC.
Agent Master Key