Terms of Service

Acceptable use, fair-use rules for fetcher-backed APIs, and service terms.

1. Service Scope & Marketplace Billing

Tinplate provides deterministic and edge-hosted micro-APIs via https://api.tinplate.dev, distributed through RapidAPI, Zyla API Hub, and Direct Bearer-Key subscriptions. Plan quotas, rate limits, overages, and refunds are governed by your subscribed plan.

Fair-Use Policy

2. Fair-Use Clause for Fetcher-Backed APIs

Certain endpoints (/v1/html-to-markdown, /v1/security-headers, /v1/url-normalizer, and /v1/ssrf-firewall with redirect inspection) fetch public URLs on your behalf via an isolated SSRF-guarded Worker (edgeguard-fetcher). By using these endpoints, you agree not to:

Target private, loopback, RFC1918, CGNAT, or cloud metadata networks, or attempt to bypass SSRF protections.
Use Tinplate as an open proxy, DDoS amplifier, credential-stuffing relay, or high-frequency bulk scraper.
Fetch unlawful content or circumvent target authentication or access controls.

All outbound fetches enforce a 10-second timeout, a 1 MB response body cap, and redirect-hop limits. Abusive fetch patterns may be throttled or suspended.

3. Advisory Security & Compliance Outputs, No Warranty & Limitation of Liability

All Tinplate APIs are provided "as is" and "as available" without warranty of any kind, express or implied.

Defense-in-Depth Advisory Nature: Security, guardrail, and compliance outputs—including prompt-injection risk scores (/v1/prompt-guard), outbound LLM guardrails (/v1/llm-output-guard), shell/SQL safety checks (/v1/command-sql-guard), SSRF pre-checks, MCP manifest lints, secret/PII redaction, JWT/JWK audits, and EN 16931 / tax ID validations—are heuristic or deterministic decision-support signals. They do not guarantee the absence of novel attacks, semantic bypasses, or tax-authority rejections, and must be paired with least-privilege sandboxing, parameterized queries, human confirmation gates, and qualified legal/tax review.
Limitation of Liability: To the maximum extent permitted by applicable law, Tinplate shall not be liable for any indirect, incidental, consequential, special, or punitive damages, or for any loss of data, revenue, or security breach arising from reliance on API outputs. Tinplate's total cumulative liability for any claim shall not exceed the fees paid by you for the applicable API during the preceding three (3) months.