// legal

Terms of Service

Last updated: June 20, 2026 · Effective: June 20, 2026 · Privacy Policy →

These Terms govern your use of the ClawID service operated by Project Black Box LLC, a Texas limited liability company ("ClawID", "we", "our"). By accessing or using the Service in any way — whether you sign up as an Operator, integrate the SDK as a Vendor, or call any of our endpoints — you agree to these Terms. If you don’t agree, don’t use the Service.

in plain english Project Black Box LLC runs ClawID. Use the service in any way and you’ve agreed to these terms. Whole thing is below; nothing hidden.

Table of Contents

  1. The Service
  2. Definitions
  3. Eligibility & authority
  4. Accounts; passkeys; backup codes
  5. Free tier and paid fees
  6. Acceptable use
  7. Prohibited activities
  8. Vendor use of public endpoints
  9. AI agent responsibility
  10. Customer data & audit logs
  11. Service availability
  12. Intellectual property
  13. Confidentiality
  14. Feedback
  15. Modifications
  16. Suspension & termination
  17. Disclaimer of warranties
  18. Limitation of liability
  19. Indemnification
  20. Governing law & arbitration
  21. Force majeure
  22. Severability & entire agreement
  23. Contact

1.The Service

ClawID is a developer API and dashboard for AI agent identity and runtime governance. We issue cryptographically signed credentials ("Claws") to AI agents on behalf of their operators, evaluate policy ("leash") on each agent action, and produce a hash-chained audit log of every check-in. We do not run agents, generate AI content, or make decisions on behalf of agents.

2.Definitions

  • "Operator" — an individual or organization that mints Claws for its own AI agents and pays for usage of the Service.
  • "Vendor" — any third-party service that verifies a Claw presented by an agent in order to decide whether to honor the agent’s request. Vendor use of the Service is free.
  • "Claw" — a short-lived, cryptographically signed credential we issue, bound to a specific agent’s public key, carrying the Operator’s policy ("leash") for that agent.
  • "Check-In" — one call by an agent to the /v1/check-in endpoint that presents a Claw and proves possession of its key.
  • "Receipt" — an immutable, hash-chained log entry produced by a Check-In; the chain’s head is signed with our root key in Cloud KMS.
  • "Service" — collectively, the hub API, dashboard, marketing site, SDKs, and all related materials we make available at holdtheleash.id and its subdomains.

3.Eligibility and authority

You must be at least 18 years old to use the Service. If you are using the Service on behalf of an organization, you represent that you are authorized to bind that organization to these Terms. The Service is intended for business and developer use; it is not directed to consumers, minors, or any individual for personal, family, or household purposes.

4.Accounts; passkeys; backup codes

The dashboard at app.holdtheleash.id uses passkey-only authentication. There is no password and no email-based recovery. At registration you receive ten single-use backup codes, shown once. You are solely responsible for safeguarding your passkey device(s) and backup codes.

If you lose access to all your registered passkeys and all your backup codes, your account is unrecoverable. We cannot reset it. This is a deliberate security property of the Service.

in plain english No passwords. No reset emails. If you lose your phone and your printout of backup codes, the account is gone. Treat the codes like keys to a safe.

5.Free tier and paid fees

Operators receive 10,000 Check-Ins per calendar month free. Check-Ins beyond the free tier are billed at $0.005 USD per Check-In, charged monthly in arrears via Stripe. By providing a payment method you authorize us to charge it for amounts owed.

You are responsible for any taxes, levies, or duties payable on your subscription, except for taxes on our net income.

We may change the free-tier allowance or per-Check-In price with at least thirty (30) days’ prior notice. Continued use of the Service after a price change constitutes acceptance.

Vendors pay nothing to verify Claws. There is no contract surface, no API key, and no per-call fee for Vendor use of the public verification endpoint.

Fees already paid are non-refundable except where required by law or expressly agreed in writing.

6.Acceptable use

You may use the Service to mint Claws for AI agents you operate, to govern those agents’ behavior with our leash policy, and to verify agents’ Claws on behalf of services you provide. You agree to comply with all applicable laws, our published documentation, and any reasonable use limits we communicate.

7.Prohibited activities

You will not:

  1. Use the Service to facilitate any unlawful activity, including agents that perform unauthorized access, fraud, harassment, or violations of third-party rights;
  2. Attempt to interfere with, reverse-engineer the production infrastructure of, or probe the Service in a manner not authorized in writing (legitimate security research is welcome; see the contact section);
  3. Circumvent or attempt to circumvent any rate limit, free-tier gate, or other technical control;
  4. Sublicense, resell, or wrap the Service as your own offering without our written permission;
  5. Mint Claws for agents you do not actually operate, or misrepresent the identity, owner, or leash of an agent;
  6. Use the Service for any activity that could expose us, our infrastructure providers, or other users to legal liability or material reputational harm.

Violation may result in immediate suspension or termination without refund.

8.Vendor use of public endpoints

The verification endpoint at /v1/verify and the JWKS endpoint at /.well-known/jwks.json are intentionally public. Vendors do not need to register, create an account, or accept these Terms in a click-through ceremony to use them. By calling these endpoints in any way you nevertheless agree to be bound by these Terms with respect to that use. Vendor use is rate-limited by the Service; abuse may result in your IP or network range being blocked at the edge.

9.AI agent responsibility

ClawID provides identity, policy enforcement, and an audit trail. ClawID does not:

  • operate, train, fine-tune, or supervise your AI agents;
  • generate AI content or make decisions on your agents’ behalf;
  • guarantee any particular outcome, accuracy, or safety property of any agent action;
  • indemnify you against the consequences of your agents’ actions in the world.

Operators are solely responsible for the actions of the agents they Claw. You are responsible for ensuring that your agents’ behavior is lawful, accurate, and appropriate for the contexts in which they act. Vendors are solely responsible for their own decisions to honor or refuse requests based on a Claw’s verification result.

in plain english We make the leash. You hold it. If your agent does something bad, that’s on you. We are infrastructure; we don’t run your agent.

10.Customer data and audit logs

You own your data, including all Receipts your agents generate. We sign Receipts with our root key; we do not assert any ownership interest in their content.

The audit log retains the most recent 72 hours of detailed events on a rolling basis. Older events are pruned. The hash-chained chain head is retained indefinitely so that downloaded archives remain cryptographically verifiable. You may export your audit log at any time via the dashboard.

On termination, we will delete your Operator account, payment information, and personally identifiable information within thirty (30) days, except where retention is required by law (e.g., tax records) or where the data has been anonymized into aggregate operational metrics.

Our handling of personal data is further described in our Privacy Policy.

11.Service availability

We use commercially reasonable efforts to keep the Service available. We do not offer a service level agreement (SLA) or any uptime guarantee in this Tier. Specific availability commitments are only available under a separately negotiated written agreement (the "Sovereign Tier" or equivalent). The Service may be unavailable from time to time for maintenance, upgrades, or causes outside our reasonable control.

12.Intellectual property

The Service, including the hub software, the dashboard, the marketing site, our trademarks (including "ClawID", "Claw", "Project Black Box"), our cryptographic signing keys, our brand assets, and the underlying methodology, are owned by Project Black Box LLC. We grant you a limited, non-exclusive, non-transferable, revocable license to use the Service strictly in accordance with these Terms.

The official ClawID SDKs (Python and JavaScript) are licensed separately under the Apache License 2.0; that license, and not these Terms, governs your use of the SDK source code.

13.Confidentiality

Each party agrees not to disclose the other’s non-public information learned through use of the Service except as required by law or to the disclosing party’s employees, contractors, and advisors under similar duties of confidentiality. The contents of your audit log are your Confidential Information; we will not share them with any third party except as required to operate the Service or as you direct.

14.Feedback

If you send us suggestions, ideas, or feedback, you grant us a perpetual, irrevocable, worldwide, royalty-free license to use that feedback to improve the Service without any obligation to you.

15.Modifications to the Terms or Service

We may modify these Terms or the Service from time to time. Material changes will be communicated by email (where we have one) or by a banner on the dashboard, at least thirty (30) days before they take effect. Continued use of the Service after the effective date of a change constitutes acceptance.

16.Suspension and termination

You may terminate your subscription at any time from the billing page. We may suspend or terminate your access if you breach these Terms, fail to pay fees when due, or if your continued use creates a material legal or operational risk for us or our other users. Sections that by their nature should survive termination (including liability, indemnification, intellectual property, and dispute resolution) will survive.

17.Disclaimer of warranties

The Service is provided "as is" and "as available". To the maximum extent permitted by applicable law, ClawID disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty arising from a course of dealing or usage of trade. ClawID does not warrant that the Service will be uninterrupted, error-free, or secure, or that any defect will be corrected.

18.Limitation of liability

To the maximum extent permitted by applicable law, in no event will ClawID, its officers, members, employees, or affiliates be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including lost profits, lost data, business interruption, or loss of goodwill, arising from or related to these Terms or your use of the Service, even if advised of the possibility of such damages.

In no event will ClawID’s aggregate liability arising from or related to these Terms or your use of the Service exceed the greater of (a) the total fees you paid to ClawID in the twelve (12) months immediately preceding the event giving rise to the claim, or (b) one hundred United States Dollars ($100).

in plain english If something goes wrong, the most you can ever recover from us is the bigger of "what you paid us in the last year" or $100. We’re not on the hook for what your agent does, or for lost revenue.

19.Indemnification

You agree to defend, indemnify, and hold harmless ClawID and Project Black Box LLC from and against any claims, damages, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to (a) your use of the Service, (b) the actions of any AI agent you operate, (c) your breach of these Terms, or (d) your violation of any applicable law or third-party right.

20.Governing law; arbitration; class-action waiver

These Terms are governed by the laws of the State of Texas, without regard to its conflict-of-laws principles. Any dispute, claim, or controversy arising out of or relating to these Terms or the Service, except as carved out below, will be resolved by final and binding individual arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. Arbitration will take place in Travis County, Texas, or any other location the parties mutually agree to. Judgment on the award may be entered in any court of competent jurisdiction.

Carve-outs. Either party may bring an individual action in small-claims court, and either party may seek injunctive or other equitable relief in a court of competent jurisdiction to protect its intellectual property rights without first proceeding to arbitration.

Class-action waiver. Disputes will be resolved on an individual basis only. You and ClawID waive any right to participate in a class action, collective action, or representative proceeding.

in plain english Texas law, AAA arbitration in Travis County, individual claims only. Small-claims court and IP injunctions are still on the table.

21.Force majeure

Neither party is liable for failure or delay to perform any obligation under these Terms (other than the obligation to pay fees) caused by events outside its reasonable control, including acts of God, war, terrorism, riot, embargo, fire, flood, pandemic, governmental action, internet outage, or third-party infrastructure failure.

22.Severability; entire agreement

If any provision of these Terms is held to be invalid, illegal, or unenforceable, that provision will be enforced to the maximum extent permitted by law and the remaining provisions will continue in full force. These Terms, together with our Privacy Policy and any written agreement we sign with you, constitute the entire agreement between you and ClawID regarding the Service and supersede any prior or contemporaneous understandings.

23.Contact

Notices to ClawID should be sent to hello@holdtheleash.id. We may send notices to you via the email address associated with your account or via a banner on the dashboard.

Security researchers: please report vulnerabilities to security@holdtheleash.id. We will not pursue legal action against good-faith security research conducted in accordance with our published responsible-disclosure expectations.

Project Black Box LLC · Texas, USA