Clear terms for real systems.

These Terms of Service form an agreement between you and PlugLayer. By creating an account, installing or using a PlugLayer plugin, calling a PlugLayer API or MCP tool, purchasing compute, deploying an app, or otherwise using the service, you agree to these terms and the Privacy Policy.

You must be at least 18 and legally able to enter this agreement. If you use PlugLayer for an organization, you confirm that you have authority to bind that organization, and “you” includes the organization.

If you do not agree, do not use the service. Additional written terms can apply to a specific order, enterprise arrangement, promotion, integration, or third-party service. If they conflict with these terms, the more specific written terms control for that scope.

You are responsible for accurate account information, authorized workspace membership, and activity performed through your account, API tokens, plugin tokens, SSH credentials, registries, domains, connected repositories, and other configured access methods.

• Keep credentials confidential and use the least privilege needed for each workflow.
• Do not share personal credentials or allow another person to impersonate you.
• Revoke and rotate credentials promptly if they may be exposed or misused.
• Notify PlugLayer promptly about suspected unauthorized access or security incidents.

PlugLayer may rely on instructions authenticated with your credentials. We are not liable for losses caused by compromised, shared, incorrectly scoped, or insecurely stored credentials unless applicable law requires otherwise.

PlugLayer provides managed compute, deployment, data, routing, domain, operational, billing, marketplace, API, plugin, MCP, and support capabilities. Features can vary by plan, region, availability, infrastructure capacity, or connected provider.

The PlugLayer Codex plugin packages skills and a local stdio MCP configuration. Its installer can download plugin files, update local plugin registration, save a PlugLayer token in an owner-readable credentials file, and create an optional launcher. You are responsible for reviewing the installer and local changes before running it.

Local skills provide instructions to your AI host. MCP tools call PlugLayer APIs for authenticated data and actions. A local plugin installation is not a guarantee that the AI host, operating system, package manager, network, OpenAI product, or other third-party environment will remain compatible.

AI agents can inspect files, build images, change repositories, submit configuration, deploy apps, update resources, send feedback, or request other actions when tools and permissions allow. Agent output can be incomplete, incorrect, delayed, unsafe, or based on misunderstood context.

Tool confirmations and safety checks reduce risk but cannot eliminate it. Back up source, data, configuration, and credentials before material changes. PlugLayer is not responsible for an action you or your agent authorizes against the wrong resource, repository, registry, domain, environment, or account.

You must not use PlugLayer to:

• Break the law, violate another person’s rights, or deploy content you are not permitted to use.
• Bypass authentication, ownership, rate limits, confirmations, safety controls, or infrastructure boundaries.
• Probe, disrupt, overload, damage, or gain unauthorized access to PlugLayer or third-party systems.
• Distribute malware, steal credentials, operate abusive automation, or hide harmful activity.
• Expose secrets, regulated data, or personal information without appropriate authorization and safeguards.
• Resell or provide access to the service in a way that avoids agreed usage, billing, or account controls.

You must comply with applicable laws, third-party platform rules, OpenAI product policies, registry and repository terms, domain-provider rules, and any documented PlugLayer limits. We may investigate suspected abuse and cooperate with lawful requests.

You retain ownership of source code, images, configuration, data, domains, feedback, and other content you submit. You grant PlugLayer a limited, worldwide, non-exclusive license to host, copy, transmit, transform, and otherwise process that content only as needed to provide, secure, support, and improve the service or comply with law.

You confirm that you have all rights and permissions required for your content and instructions. You are responsible for backups, data classification, notices to your users, retention decisions, and the legality and security of workloads you deploy.

Feedback about PlugLayer can be used without restriction or compensation to improve the service, provided we do not publicly identify you or disclose confidential information without permission.

PlugLayer can interoperate with OpenAI and Codex, GitHub, identity providers, Stripe, container registries, DNS providers, package indexes, cloud or infrastructure providers, and other services. Their availability, security, processing, pricing, and terms are controlled by them.

PlugLayer is not responsible for third-party services, their content, or changes they make to an API, product, account, policy, or integration. OpenAI is not a party to these terms and does not operate or endorse PlugLayer merely because a plugin is available in an OpenAI product or directory.

Open-source components remain governed by their applicable licenses. A public repository or open-source license does not grant access to PlugLayer accounts, hosted infrastructure, trademarks, paid services, or private systems.

Prices, included usage, renewal periods, limits, and taxes are shown at purchase or in an applicable order. You authorize PlugLayer and its payment provider to charge the selected payment method for recurring and usage-based amounts until cancellation takes effect.

Unless the purchase flow or applicable law says otherwise, fees are non-refundable and do not include taxes. Failed or overdue payment can pause purchases, deployments, compute, or other paid functionality. Cancellation timing and infrastructure cleanup are described in the product flow shown before you confirm cancellation.

We aim to operate PlugLayer reliably, but the service is not guaranteed to be uninterrupted, error-free, compatible with every workload, or available in every region. Deployments can fail because of source, images, dependencies, capacity, networks, DNS, certificates, registries, providers, user configuration, or other conditions outside our control.

We may add, change, limit, deprecate, or remove features and integrations. Preview, beta, experimental, or free features can be changed or withdrawn at any time and may receive less support. We may perform maintenance and emergency work without advance notice when reasonably necessary.

You may stop using PlugLayer and close eligible resources using the available controls. Some cleanup is asynchronous and can continue after a request. You remain responsible for charges and third-party obligations incurred before termination takes effect.

We may restrict, suspend, or terminate access when reasonably necessary for security, abuse prevention, legal compliance, non-payment, material breach, infrastructure safety, or protection of users and third parties. Where practical, we will provide notice and an opportunity to resolve the issue.

Provisions concerning ownership, fees, disclaimers, liability, indemnity, disputes, and any terms that by their nature should survive will remain effective after termination.

To the fullest extent permitted by law, PlugLayer and all related software, plugins, skills, MCP tools, documentation, estimates, recommendations, infrastructure, and support are provided “as is” and “as available.” We disclaim all express, implied, statutory, and other warranties, including merchantability, fitness for a particular purpose, title, non-infringement, accuracy, availability, and security.

PlugLayer does not warrant that an agent recommendation, deployment plan, cost estimate, log, metric, scan, tool result, generated configuration, or third-party integration is complete or correct. You must test, review, monitor, and back up systems according to their importance and risk.

Nothing in these terms excludes a warranty or consumer right that cannot lawfully be excluded. Any mandatory warranty applies only to the extent required by law.

To the fullest extent permitted by law, PlugLayer and its owners, personnel, contractors, affiliates, and suppliers will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profit, revenue, goodwill, opportunity, data, content, credentials, compute, service availability, or business interruption, even if advised that such loss was possible.

To the fullest extent permitted by law, PlugLayer’s total aggregate liability arising from or relating to the service or these terms will not exceed the fees you paid to PlugLayer for the affected service during the three months immediately before the event giving rise to the claim.

The exclusions and cap apply to all legal theories and claims in aggregate. They do not apply where liability cannot lawfully be excluded or limited. Some jurisdictions do not allow certain exclusions, so parts of this section may not apply to you.

To the extent permitted by law, you will defend, indemnify, and hold PlugLayer harmless from third-party claims, losses, and reasonable costs arising from your content, infrastructure, instructions, credentials, agent approvals, violation of these terms, or infringement of another person’s rights.

You may not assign this agreement without PlugLayer’s written consent. PlugLayer may assign it as part of a merger, acquisition, reorganization, financing, asset transfer, or change in the service operator. No failure to enforce a provision is a waiver.

If a provision is unenforceable, it will be limited or removed only to the minimum extent necessary, and the remaining terms continue. These terms and any applicable written order are the entire agreement about their subject matter.

The governing law and courts are those applicable to the PlugLayer operator that provides your account, unless mandatory local law requires otherwise. Before filing a formal claim, contact us and allow 30 days for a good-faith attempt to resolve the dispute.

We may update these terms by posting a revised version and changing the effective date. Material changes may also be communicated through the service or your account contact. Continued use after the revised terms take effect means you accept them, except where law requires another form of consent.

Questions about these terms can be sent to hello@pluglayer.com. Privacy requests can be sent to privacy@pluglayer.com.