API Terms of Use
Version 2026-10-09-draft
This is a draft. It has not yet been reviewed by a lawyer, and sections marked “to be completed” are deliberately empty. When the reviewed version is published it will carry a new version number, and every organisation will be asked to accept it before registering more agents.
1. Who these terms are between
These terms are between Chen Luborets (pre-incorporation), trading as Evoliv Core (“Evoliv”, “we”), and the organisation that accepts them (“you”). They cover Project AIDR: the agent identity registry, the console at console.evolivcore.com and the API at api.evolivcore.com (together, “the Service”).
The person who accepts these terms confirms that they may bind the organisation. In the console, only an organisation’s admins can accept them.
2. What the Service does, and does not do
The Service registers identities for your AI agents, issues them short-lived credentials, and publishes revocations so that websites and APIs can check an agent’s identity themselves.
Verification happens at each site, offline. We therefore do not learn which sites your agents visit or what they do there, and the Service keeps no record of it. Agents’ private keys are generated on your side and never sent to us.
3. Your account and organisation
- Give accurate information about your organisation, and keep it current.
- Keep your sign-in credentials and passkeys to yourself. You are responsible for what is done with your organisation’s account, including by members you invite.
- Only claim domains you control and names you are entitled to use.
4. Your agents and their keys
- You are responsible for the agents registered to your organisation and for what they do.
- Protect agents’ private keys and enrollment tokens. If one may have leaked, revoke it.
- Revocation is not instant: it reaches verifying sites through the signed revocation feed, usually within about two minutes. Credentials already issued stay valid for at most 15 minutes after an agent is suspended.
5. Acceptable use
You must not use the Service, or an identity it issues, to:
- impersonate another person, organisation or agent, or misstate who operates an agent;
- share one agent’s credentials among several agents, or with anyone else;
- break the law, or ignore a site’s published access rules or rate limits;
- probe, overload or attempt to get around the Service’s security controls.
Sites can report abuse by an agent. Reports are reviewed under the process described in the AIAF draft; an upheld report can lead to suspension or revocation of the agent, and repeated or serious abuse to a review of the organisation.
6. Plans and fees
The plan you choose sets how many agents your organisation may hold. Paid plans are billed through Stripe at the prices shown when you subscribe. Payment terms, refunds and taxes: to be completed.
7. Availability
The Service is in an early stage and is provided without a service-level commitment. Service levels: to be completed.
8. Suspension and ending
We may suspend or revoke agents, or suspend an organisation, for a breach of these terms or to protect sites relying on the Service. You can stop using the Service at any time by revoking your agents. Notice periods and what happens to your data: to be completed; personal data is handled as the Privacy Policy describes.
9. Liability and warranties
To be completed after legal review.
10. Governing law
To be completed after legal review.
11. Changes and contact
When these terms change in a way that matters, the version above changes, and an admin of each organisation must accept the new version before the organisation registers more agents or issues more enrollment tokens. Agents already registered keep working. Questions: privacy@evolivcore.com.