API & MCP Terms - WorkOfficially

1. What these terms cover

These terms apply when you use any of our programmatic access: API keys created in Settings, our MCP server at https://mcp.workofficially.com/mcp, apps that connect to an account through our OAuth sign-in, and "Sign in with WorkOfficially". The Terms of Service also apply, including the limitation of liability, arbitration and governing-law sections. If these terms and the Terms of Service conflict about programmatic access, these terms win.

2. Members who connect a tool

When you connect an AI tool, app or script, it acts as you, within the permissions (scopes) you approved. You are responsible for what it does with them, as if you had done it yourself.
Keep API keys secret. Anyone who has a key can use it. Revoke a key or disconnect an app at any time under Settings, Connected apps; it stops working at once.
AI tools make mistakes. Check what a tool is about to submit, send or publish in your name.
Staff and admin accounts cannot connect tools, by design.

3. Developers and apps

If you build an app or tool that connects to WorkOfficially, you agree to:

ask only for the scopes your app needs, and act only for the member who connected it;
describe your app honestly on the consent screen (its name, and the site members are sent back to);
keep tokens and keys secure, and stop using them when a member disconnects;
not use access to send spam, contact members outside the platform to avoid our fees or escrow, scrape data beyond what the member's own use requires, or get around our limits or security;
comply with our Terms of Service and the law, including privacy law.

We may block an app that breaks these terms, without notice when members' safety or data is at risk.

4. Data you receive

Use member data you receive only to provide your app's service to that member. Do not sell it, share it for advertising, or use it to train AI models without the member's clear permission. Delete it when the member disconnects or asks you to, unless the law requires you to keep it. You must have a privacy policy that says what your app does with the data.

5. Limits

To keep the service fair, each connection is limited to about 120 read requests, 20 write requests and 10 AI-assisted requests a minute. We may change these limits; requests over a limit are refused and can be retried later.

6. What no tool can do

No API key, MCP tool or app can move money, fund, release or refund escrow, sign or end a contract, accept an offer, change identity verification, withdraw funds, or reach the admin tools. Those actions stay on the website, with the member.

7. Suspension and changes

We may suspend or revoke keys, tokens or apps that break these terms, put members at risk, or overload the service. We may change or retire parts of the API or MCP server; where we can, we will give reasonable notice of changes that break existing tools. We may update these terms as described in the Terms of Service.

8. No warranty

Programmatic access is provided "as is" and "as available", without any warranty, as set out in the Terms of Service. Questions: [email protected].

API & MCP Terms.