x402lint — TERMS OF SERVICE (PLAIN-TEXT DIGEST)
Version: v0.2   Effective: 2026-07-26
Canonical (binding) URL: https://api.x402lint.dev/terms.txt
Contact: jcislo918@gmail.com

1. PARTIES & ACCEPTANCE
   Using the Service — including having software you deploy call the API —
   accepts these Terms. Under UETA / E-SIGN electronic-agent rules, deploying an
   agent = the principal's acceptance; each request and payment binds you.

2. SERVICE DESCRIPTION
   x402lint is a conformance scanner for x402 seller origins. It runs 25
   versioned, read-only checks (GET/HEAD probes only; no real payments are made
   against the target) and returns an A-F grade with per-check evidence and
   one-line fixes. Findings are informational conformance signals, not a warranty
   that any origin is secure, compliant, or fit for any purpose. A conformance
   grade measures how well an origin implements the x402 protocol and discovery
   conventions ONLY; it is NOT an endorsement and does NOT verify that the
   operator is legitimate, safe, or that funds should be sent — a well-built
   fraudulent service can score highly.

3. PAYMENT TERMS
   Paid endpoints are priced per call in USD and settled as USDC via x402 on
   Base. Paid endpoints: POST /v1/scan $0.15, GET /v1/report $0.02, USDC via x402
   on Base. The free GET /v1/status and GET /v1/checks endpoints require no
   payment. Compute-first / settle-after: you are NOT charged for errors — an
   invalid URL (400), a no-fresh-report (404), a scanner-internal failure (503),
   or a still-running scan (504 processing) never settle. Taxes and network fees
   are the buyer's. No bundles or subscriptions.
   [PRICING NOTE: these prices are kept in sync with src/manifest.ts —
   update BOTH when repricing.]

4. REFUND POLICY
   Because the Service settles only after successfully computing a billable
   result, charges without delivery should not occur. A completed scan of a
   broken or unreachable target IS a valid, billable deliverable (the finding is
   the product). Otherwise all sales final.

5. PRIVACY
   The origin URL you submit is used to run the scan and is cached with the scan
   result for up to 24 hours. Scans are read-only probes of the target's public
   surface. Payment settlement facts (payer address, tx hash) may be logged for
   accounting.

6. DIRECTORY LISTING, VERIFICATION & OPT-OUT
   Origins scanned via x402lint — INCLUDING origins scanned by a third party, not
   only by the operator — may be listed in a public directory at x402lint.dev
   showing the conformance grade and publicly-observable branding (name,
   description, icon) auto-collected from the origin. Listing uses only publicly-
   available data observed from the origin. An operator may verify domain control
   by serving a one-time token at /.well-known/x402lint-challenge (via POST
   /v1/verify/start then POST /v1/verify/confirm) and may then opt the origin out
   of the directory and/or suppress the auto-collected branding (POST
   /v1/listing). Opt-out requests from verified owners are honored promptly
   (within 24 hours).

7. ACCEPTABLE USE
   Only scan origins you own or are authorized to assess. No unlawful use. No
   circumventing rate limits or payment. Free endpoints are rate-limited; abusive
   traffic may be throttled or blocked. The Service refuses to probe loopback,
   private, and link-local addresses (SSRF guard).

8. AS-IS / NO WARRANTY
   Service and output provided "AS IS" / "AS AVAILABLE" with no warranties of any
   kind. No uptime, latency, or continuity guarantee; no SLA. A grade is a point-
   in-time conformance signal, not a certification.

9. LIMITATION OF LIABILITY
   No liability for indirect, incidental, or consequential damages. Total
   liability capped at fees paid to the Service in the prior 30 days.

10. GOVERNING LAW & DISPUTES
    Governed by the laws of the operator's country of establishment (Poland) and
    applicable EU law; disputes before the competent courts there, subject to
    mandatory consumer-protection rights.

11. CHANGES TO TERMS
    We may update these Terms; the version/effective date and canonical URL will
    be revised. Continued use after changes = acceptance.