Terms of Service

1. Service Description

CodeRifts authorizes contract changes for AI agents. A change is analyzed, an authorization may be issued for it, that authority is enforced where it can be, and a signed receipt is left behind that anyone can verify offline.

Surfaces: the GitHub App; the REST API; the CLI; the Web UI; the hosted MCP server at app.coderifts.com/mcp; host adapters in @coderifts/agent-hooks, which run on the caller’s own machine; and the keyless /api/v1/action-verdict and keyless preflight paths, which return a signed receipt without an account.

2. Operator

CodeRifts is operated by Péter Zsób (sole proprietor), based in Budapest, Hungary. Contact: hello@coderifts.com

3. Acceptance

Installing the GitHub App, or calling the REST API, the CLI, the Web UI, the MCP server, a host adapter, or a keyless endpoint, is acceptance of these Terms of Service and our Privacy Policy.

4. Service Tiers and Pricing

Launch pricing after beta. The live source is the pricing page.

• Free: $0. After the beta, the planned Free boundary is a provider-verifiable public repository. 1,000 authorization cases per month. Verification is always free.
• Team: $149 per month. Private production use. 10,000 authorization cases per month; planned overage $15 per 1,000.
• Enterprise: from $1,500 per month.

During the public beta every organization gets Team features at $0 with a self-serve key, public and private repositories alike, no separate Team key to request, and each key allows 1,000 requests a month: after that, /preflight authorize returns BETA_LIMIT_REACHED while its analysis keeps working; other API routes return 429. There is no Pro tier. There is no per-seat, per-repository or per-agent fee.

An authorization case is one supported contract change evaluated to ALLOW, WARN, REQUIRE_APPROVAL or BLOCK. Analysis on its own is not a case, and a signed analysis receipt is not a grant.

5. Beta Disclaimer

During the beta period, the service is provided without guarantees of uptime, feature completeness, or data retention. Features may be added, changed, or removed without notice during beta.

6. Your Responsibilities

By using CodeRifts, you agree to:

• Review Pull Request analysis results before making merge decisions
• Maintain your .coderifts.yml configuration as needed
• Ensure compliance with your organization’s internal policies
• Use the service only for its intended purpose (API governance)

CodeRifts is a guardrail tool and does not guarantee the detection of all possible breaking changes or security issues. You remain responsible for your API release decisions.

7. Intellectual Property

CodeRifts software, branding, documentation, and all related materials are the intellectual property of Péter Zsób.

Your code, schemas, and data remain your property. By using CodeRifts, you grant us a limited, temporary license to process your OpenAPI schema files solely for the purpose of providing the analysis service. We do not claim any ownership or rights over your schemas or code.

We do not train models on your contract artifacts, and agent traffic leaves a metering event, not a payload. That is a property of the code, not a promise about our intentions, and it is checkable: the metering event schema (schemas/metering-event.v1.json) sets additionalProperties: false over thirteen named fields, none of which can hold spec content; the writer applies an allow-list over exactly those fields, so an unlisted key is dropped before validation rather than refused after it; and payload, spec_body, before, after, contract, body, artifacts and email are named as forbidden on top of that. The workspace identifier written to the row is a SHA-256 hash, not your organisation name. Measured 2026-09-23 across the whole application source: zero occurrences of fine-tuning, training-data collection, embeddings, a vector store, or retrieval-augmented generation. There is no model being trained here to train on anything. The per-surface detail is on the Trust Center.

8. Acceptable Use

You agree not to:

• Reverse engineer, decompile, or attempt to extract the source code of CodeRifts
• Use the service to violate any applicable law or regulation
• Attempt to gain unauthorized access to the service or its infrastructure
• Use the service for competitive analysis or to build a competing product
• Abuse the service by submitting excessive or automated requests intended to degrade performance

9. Availability

While CodeRifts is designed for reliability, uninterrupted availability is not guaranteed. The service may be temporarily unavailable due to maintenance, updates, infrastructure issues, or circumstances beyond our control. We do not offer an SLA during the beta period.

10. Limitation of Liability

To the maximum extent permitted by applicable law, CodeRifts and its operator shall not be liable for any direct, indirect, incidental, special, consequential, or exemplary damages arising from the use of the service, including but not limited to: undetected schema changes, service interruptions, data processing errors, or any decisions made based on CodeRifts analysis.

11. Termination

You may terminate your use of CodeRifts at any time by uninstalling the GitHub App from your GitHub account. Upon uninstall, all associated data is deleted.

We may terminate or suspend access to the service at any time, with or without cause, with 30 days’ notice via email. In case of abuse or violation of these terms, we may terminate access immediately without notice.

13. Changes to These Terms

We may update these Terms from time to time. Material changes will be posted on this page with an updated “Last updated” date and communicated via email to registered users where possible. Continued use of the service after changes constitutes acceptance of the updated terms.

14. Governing Law

These Terms are governed by the laws of Hungary. Any disputes arising from these Terms or the use of CodeRifts shall be resolved in the courts of Budapest, Hungary.

15. Contact

For questions about these terms:

• Email: hello@coderifts.com
• Location: Budapest, Hungary