Skip to content
agent-paste.sh

Hosted service terms

Terms of Use

Effective June 16, 2026

These terms govern your use of the agent-paste hosted service, including the dashboard, API, MCP server, CLI-backed hosted workflows, Access Links, and published Artifacts.

The service

agent-paste is infrastructure for publishing and sharing agent-generated work products. The hosted service is provided by Zaks.io, LLC. The source code is licensed separately under Apache-2.0. These terms apply to the hosted service, not to your rights under the open source license.

By accessing or using the hosted service, you agree to these terms. If you use the service for an organization, you represent that you have authority to bind that organization.

The service is live in early alpha and may change. Features, limits, pricing, retention windows, and availability can be updated as the product matures.

Eligibility and availability

You must be at least 18 years old to use the service. By using the service, you represent that you are 18 or older and can enter into these terms.

The service is currently offered only in the United States. Do not use the hosted service if you are outside the United States.

You may not use the service if you are barred from using it under applicable law, including U.S. sanctions or export-control restrictions.

Accounts and credentials

You are responsible for activity under your Workspace, authenticated sessions, automation credentials, and any agent or tool you authorize to use the service. Keep credentials secret and revoke or rotate them if you believe they were exposed.

Automation credentials are meant for controlled agent and workflow use. Do not embed them in public repositories, published Artifacts, client-side code, browser-visible pages, or logs.

If you direct an agent, MCP host, CI job, script, or other automated tool to use the service, you are responsible for that tool's actions as if you performed them yourself.

Content and rights

You keep ownership of the files, metadata, and other content you publish. You grant Zaks.io, LLC the limited rights needed to host, process, secure, display, transmit, cache, back up, and delete that content as part of operating the service.

You are responsible for ensuring you have the rights and permissions needed to publish, share, and process the content you submit.

The service is not designed for regulated or high-risk data. Do not publish secrets, credentials, payment card data, protected health information, government identifiers, or other sensitive regulated data unless Zaks.io, LLC has approved that use in writing and you have the required rights and safeguards.

Acceptable use

Do not use the service to create, publish, host, distribute, or assist with:

  • child sexual abuse material, sexual exploitation, or non-consensual intimate content
  • malware, credential theft, phishing, spam, fraud, or deceptive impersonation
  • violent threats, unlawful harassment, or content intended to facilitate physical harm
  • content that violates law, privacy rights, intellectual property rights, or a person's safety
  • attempts to bypass limits, authentication, authorization, rate limits, revocation, or abuse-response controls
  • testing against accounts, Workspaces, Artifacts, Access Links, or systems you do not own or have permission to test
  • bulk scraping, denial-of-service activity, resource exhaustion, or attempts to degrade the service for others

We may suspend access, remove or disable content, revoke credentials, or preserve records when needed to protect the service, users, third parties, or the public.

Abuse, phishing, takedown, or intellectual-property complaints can be sent to support@agent-paste.sh. Security reports should follow the Security Policy.

Sharing and retention

Private Links are for authenticated Workspace Members. Access Link Signed URLs, Revision Content URLs, and claim links are bearer-style mechanisms. Anyone with a valid link may be able to access the content or action the link permits until it expires, is revoked, or is otherwise disabled.

Authenticated publish is private by default. Unlisted no-login access requires an explicit sharing step, such as creating a Share Link, except that accountless ephemeral publish creates an unlisted Share Link so the agent can return a usable no-login link immediately.

Artifacts are transient by default. Auto Deletion, expiration, revocation, and abuse-response controls may make content unavailable before physical storage cleanup completes.

Security research

Good-faith security research is welcome when it stays within systems and data you own or have explicit permission to test. Do not access, modify, delete, retain, or exfiltrate another user's data. Report vulnerabilities privately through the process in the Security Policy.

Third-party services

The service depends on third-party providers for hosting, authentication, storage, payments when billing is enabled, email or support workflows, and operational diagnostics. Their services may have their own terms and policies.

Disclaimers

The service is provided as is and as available. To the maximum extent permitted by law, Zaks.io, LLC disclaims warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted availability, and error-free operation.

You are responsible for evaluating whether the service is appropriate for your data, compliance duties, uptime needs, and security requirements.

Zaks.io, LLC does not inspect, endorse, or certify uploaded content as safe, accurate, lawful, or suitable for any particular use.

Limitation of liability

To the maximum extent permitted by law, Zaks.io, LLC will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenues, goodwill, data, or business opportunities.

To the maximum extent permitted by law, Zaks.io, LLC's total liability for claims relating to the hosted service is limited to the amount you paid for the service in the three months before the event giving rise to the claim, or 100 USD if you did not pay for the service.

Termination

You may stop using the service at any time. We may suspend or terminate access, credentials, Artifacts, links, or Workspaces if you violate these terms, create legal or security risk, fail to pay amounts due, or if continuing the service is no longer practical for us.

Termination does not waive any amounts owed, legal obligations, or rights that by their nature should survive termination, including content rights needed to complete deletion, security, abuse-response, audit, disclaimer, liability, and dispute terms.

Governing law

These terms are governed by California law and applicable U.S. federal law, without regard to conflict-of-law rules.

Except where prohibited by law, claims relating to the hosted service must be brought in the state or federal courts located in Sacramento County, California, and each party consents to those courts.

Changes

We may update these terms as the service changes. If a change materially affects your rights or obligations, we will take reasonable steps to provide notice, such as posting the updated terms or surfacing notice in the service.

Contact

The hosted service is operated by Zaks.io, LLC. Questions about these terms can be sent to contact@agent-paste.sh. Security reports should follow the private reporting process in the Security Policy.

Mailing address: Zaks.io, LLC, 2108 N St, Ste N, Sacramento, CA 95816, USA.