Terms of Service

These Terms govern your use of mr.technology (the “Service”), operated from Maine, United States. By using the Service or purchasing an assessment, you agree to these Terms and the Privacy Policy.

If you purchase for an organization, you represent that you are authorized to bind it.

The public registry, public API, blueprint manifests, articles, scanner summaries, provenance manifests, and source links are provided for research and decision support. Evidence completeness varies by record.

Registry verdicts, scores, tiers, and reports are not certification, a warranty, or a guarantee that software is safe, complete, current, or suitable for production. You remain responsible for source review, isolation, permissions, testing, licensing, and deployment decisions.

Where exact content, a pinned source commit, and qualifying license evidence are available, the Service may provide a non-standalone source snapshot containing an unmodified SKILL.md, applicable license or notice evidence, and a provenance manifest. A source snapshot is not represented as the complete skill directory; its manifest lists detected omitted dependency references. The upstream license—not these Terms—controls your right to use and redistribute third-party material.

When license or provenance evidence is incomplete, the Service provides only metadata, a provenance manifest, and an upstream source link. mr.technology does not claim ownership of third-party source material.

The only paid service currently offered is a one-time, fixed-scope written review for skill authors who want a deeper remediation analysis of their own repo:

• Founding Publisher Skill Security Audit: one authorized repository at one exact pinned revision, up to 10 skill directories.

Additional repositories or directories require separate written scope before purchase. The scope shown at checkout controls if marketing copy conflicts. Work begins only after payment is complete and you submit a complete, authorized intake. Target turnaround begins after usable source access is available and is a target, not a guaranteed service level, unless a signed statement of work says otherwise.

The author-support service produces: provenance and dependency inventory, Gitleaks, Semgrep, Trivy, and SkillSpector scan output, a written remediation review by the operator, a PDF and JSON report, and one rescan within the purchased scope. The service is a written analysis of scan evidence and remediation paths. It is not a security certification, penetration test, compliance attestation, sandbox validation, or full application security review. Runtime behavior sandboxing, compliance certification, penetration testing, and full application security review are excluded unless stated in a separate written agreement.

You must have authority to submit each repository, artifact, credential, or source reference. Do not place access tokens, passwords, private keys, or source archives in the public intake form. For private material, mark the repository as private; mr.technology will establish a separate transfer method and scope before access.

You grant mr.technology a limited license to access, copy, and analyze submitted material only to provide the purchased service, maintain necessary evidence, prevent abuse, and meet legal obligations. You retain ownership of your material.

Paid reports are licensed to the purchaser for internal engineering, risk, procurement, and remediation use. You may share them with employees, professional advisers, insurers, investors, or customers who have a legitimate need, but may not resell or misrepresent the report as a certification issued by mr.technology.

Findings describe evidence available at the assessment time. Changes to source, dependencies, infrastructure, credentials, policy, or threat conditions can invalidate them.

Payments are processed by Stripe. Prices, currency, taxes, and the exact offer are displayed before purchase. One-time assessments do not renew automatically.

You may request cancellation and a full refund before substantive work begins. After work begins, refunds are evaluated against work completed, committed third-party costs, and applicable law. If mr.technology cannot perform the purchased scope, the unperformed portion will be refunded or, with your agreement, rescheduled.

Legacy subscription customers may manage or cancel billing through the authenticated developer portal. Legacy entitlements end when the subscription is canceled, unpaid, or otherwise inactive; associated paid API keys may be revoked.

You may not use the Service to violate law or third-party rights, submit material you are not authorized to share, bypass access controls, overload or scrape the Service abusively, probe private systems without authorization, distribute malware, or misrepresent registry evidence.

Non-public customer material received for an assessment will be used only for service delivery, security, support, and legal obligations. Each party will protect the other’s confidential information using reasonable care. These duties do not cover information that is public without breach, independently developed, rightfully received from another source, or legally required to be disclosed.

The Service is provided “as is” and “as available.” To the maximum extent permitted by law, mr.technology disclaims implied warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted availability, and error-free operation. Nothing in these Terms excludes rights that cannot legally be excluded.

To the maximum extent permitted by law, mr.technology is not liable for indirect, incidental, special, consequential, exemplary, or punitive damages; loss of profits, data, goodwill, or business opportunity; or damage caused by third-party software or your deployment decisions.

Aggregate liability arising from a paid service will not exceed the amount you paid for that service. For free services, aggregate liability will not exceed USD $100. These limits do not apply where prohibited by law.

These Terms are governed by the laws of the State of Maine and applicable United States federal law, without regard to conflict-of-law rules. Courts located in Maine have exclusive jurisdiction, except where mandatory consumer law provides otherwise.

We may update these Terms prospectively. Material changes will be posted with a new effective date. A paid assessment remains governed by the terms presented at purchase unless the parties agree otherwise in writing.

Questions or legal notices: editor@mr.technology.