# agent-exec -- terms

This is an accountless, pay-per-use service for software agents. There is
no signup, no login and no human onboarding of any kind -- using it at all
is acceptance of these terms. Full pricing: https://agent-exec.448c.org/pricing. Full
technical detail: https://agent-exec.448c.org/openapi.json and https://agent-exec.448c.org/llms.txt.

## Payment

Payment is over HTTP 402 (x402), settled on-chain in USDC. A payment
authorization is consumed at settlement and is final: there are no refunds,
chargebacks or credits for a completed, successful call.
Submitting a well-formed request that fails validation is free -- you are
never charged for a request we reject before running it.

## What you may run

POST /execute runs submitted source code to completion in an isolated,
unprivileged sandbox with no network access -- code cannot reach the
internet, another tenant, or the host, by construction, not by policy.
Do not submit code intended to exploit, escape or degrade the sandbox, or
to abuse a paid endpoint for anything other than its documented purpose
(e.g. using /storage or /claim to host or coordinate an attack on a third
party). We may refuse or rate-limit a wallet or source IP that does this,
without notice and without refund of any run already completed.

## Disposable inboxes

POST /inbox sells an anonymous, receive-only email address for receiving
verification mail. Nothing is ever sent from it: no reply, bounce, forward
or relay, and the domains publish v=spf1 -all. Every address expires, and
its messages are deleted with it; we keep no archive and cannot recover an
inbox once released or expired. A domain that draws a complaint or lands on
a blocklist is burned -- it issues no new addresses and existing ones run
out their expiry -- without refund. Do not use an address to receive mail
you are not entitled to, to impersonate anyone, or to evade a ban. Report
abuse of an address of ours at POST https://agent-exec.448c.org/feedback; we read it daily.

## Rented names

POST /dns rents <label>.448c.net for a year and serves the records you
give it. The name is under a domain that also carries our own mail and
reputation, so: we revoke a name used for phishing, malware, spam or
command-and-control, at once and without refund, and a revoked label is
not rentable again for a year. Revocations are recorded in the journal.
A name that expires stops resolving, and its label is released 30 days
later. Report abuse of a name of ours at POST https://agent-exec.448c.org/feedback; we read
it daily.

## Placement orders

POST /placement sells submission work and proof, never a placement: we
submit your service to every venue we hold a submitter for -- the count
is stated in the price challenge -- and to each new one the hour its
submitter lands while your order is open; a venue we cannot reach yet
stays queued on the order, reported as owed. We verify, per venue, that
the entry is in the catalogue. We do not promise acceptance. An editorial
or crawl-only venue may never list you, a venue needing a human is
reported with that reason and never charged for, and a venue that
charges for an entry is reported unfunded until you pay that venue's own
fee yourself -- we never front it and never bundle it into our price.
There are no refunds, including where no venue ever lists you. We submit
only what your own discovery documents already say -- url, name,
description, price, payTo -- and never invent copy for you, and we never
sign a message on your behalf. Report anything wrong with an order or a
venue at POST https://agent-exec.448c.org/feedback; we read it daily.

## No warranty

This service is provided as-is, at v0, with no uptime guarantee and no
warranty of any kind. It may change, be rate-limited, or be discontinued
without notice. We are not liable for any loss arising from its use,
including loss of funds sent for a call that was never fulfilled -- if
that happens, it is a bug we want to know about, not a claim we can
process, since we hold no contact information for you to begin with.

## Data

We do not collect accounts, emails, or any identity beyond the paying
wallet address and the source IP a request arrives from, both used only
for rate-limiting and abuse response. Paid request bodies are logged for
operational and dispute-resolution purposes. We do not sell or share
this data.