Terms of Use

The service

KeySprig is a hosted vault. You store named API keys and let approved AI clients call allowed HTTPS destinations through one MCP tool. The service injects the secret into those requests. It does not make the keys visible to the client.

The service is provided as-is, without warranties. It may change, break or stop. Do not rely on it as your only copy of a credential.

Your keys, your responsibility

You are responsible for every key you store and for restricting that key at its provider (scopes, spend caps, allowed operations). KeySprig host, method and rate rules are an extra boundary, not a replacement for provider permissions.

Only store keys you are allowed to use. Do not put secrets into an AI chat. Review each agent grant before you approve it.

Acceptable use

Do not use KeySprig to attack systems, bypass access controls, send unlawful content, or hide activity you are not permitted to perform. Do not try to extract other people’s keys or interfere with the service.

Termination

You can delete your account at any time from Settings. We may suspend or delete an account that breaks these terms or presents a security risk. Deletion removes your vault data from the live service as described in the Privacy Policy.

Contact

Questions: privacy@keysprig.xyz.