Terms of Service — Agent Armory

Version: 2026-05-19 (draft 1) Status: Draft for review by Dutch counsel before publication. Languages: This document is the English text. The Dutch translation will be published at the same URL with the suffix /nl. In case of conflict, the English version prevails for business users; the Dutch version prevails for consumers domiciled in the Netherlands (Art. 6:238(2) BW transparency).

Note for reviewers. This draft is built on the research brief in docs/legal/legal-research-2026-05.md. Every clause that needs a counsel sign-off is marked [VERIFY]. Do not publish until those are resolved.

1. Definitions

• "Agent Armory", "we", "us": Agent Armory B.V. [VERIFY entity form — sole proprietorship vs. B.V.], registered with the Netherlands Chamber of Commerce under KVK number 42058037, with registered office at [VERIFY address], VAT number [VERIFY], contact info@agentarmory.ai.
• "Service": the website at agentarmory.ai, the REST API, the Model Context Protocol (MCP) server, the curated public skill catalogue, the personal-skill hosting feature, and the organisation-skill hosting feature.
• "You", "Customer": the natural or legal person that registers an account, accesses the Service, or pays for a subscription.
• "Consumer": a natural person acting outside trade or profession, as defined in Art. 6:230g(1)(a) BW.
• "Business Customer": any Customer that is not a Consumer.
• "Skill": a versioned instruction document (typically Markdown) describing a procedure an AI agent can execute.
• "Catalogue Skill": a Skill that we have cached from a third-party public source repository under a permissive open-source licence (MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, or CC0). The canonical text of each mirrored licence is available at agentarmory.ai/l/<spdx-identifier> and is the URL referenced in the attribution comment that travels with every Catalogue Skill.
• "User Skill": any Skill you create, upload, or modify via the Service, including Personal Skills and Organisation Skills.
• "Organisation": an Enterprise tenant created and administered by one or more Customers under a single subscription.
• "Output": any text, data, code, or action produced when an AI agent retrieves a Skill from the Service and executes it.

2. Who we are and how to reach us

Agent Armory is a Dutch undertaking. Our public identification is:

Our supervisory authority for the EU Digital Services Act is the Autoriteit Consument & Markt (ACM), the Dutch Digital Services Coordinator. Our data-protection supervisory authority is the Autoriteit Persoonsgegevens (AP).

3. Acceptance of these Terms

These Terms form a binding contract between you and Agent Armory on the earlier of (i) creating an account, (ii) paying for a subscription, or (iii) making any authenticated API or MCP call. By doing so you confirm that you have had the opportunity to take reasonable notice of these Terms (Art. 6:233(b) and 6:234 BW). You may download a PDF copy from the link at the foot of every page; we will also email a copy to the address registered to your account on first acceptance.

We may update these Terms. Material changes will be notified by email to active account holders at least 30 days in advance. You may terminate the contract without penalty during that 30-day window if a material change is unfavourable to you. Continued use after the effective date constitutes acceptance.

4. Eligibility

You must be at least 16 years old (Art. 5 UAVG). Business Customers warrant that the signing individual has authority to bind the entity. The Service is not designed for, and may not be used by, children under 16.

You may not use the Service if EU, Dutch, or UN sanctions prohibit your access, or if you are located in a jurisdiction subject to a comprehensive embargo administered by the EU or the Netherlands.

5. The Service

5.1 Catalogue

The public catalogue contains cached copies of Skills sourced from public repositories distributed under one of the licences listed in Section 1 ("Catalogue Skill"). Each Catalogue Skill is delivered with metadata identifying the upstream repository, file path, licence identifier (SPDX), licence URL, and the timestamp of the last sync. A consolidated attribution index is available at /attribution.

We make no representation that any Catalogue Skill is fit for a particular purpose or that the upstream content remains accurate. Catalogue Skills are provided "as is" subject to the original open-source licence under which we received them; nothing in these Terms reduces the rights you receive from those licences.

5.2 User Skills

You may create, upload, edit, and delete User Skills subject to the limits of your subscription tier and the Acceptable Use Policy. You retain all intellectual-property rights in your User Skills. You grant us a worldwide, non-exclusive, royalty-free, sub-licensable-to-our- sub-processors licence to host, copy, transmit, index, generate embeddings of, and deliver your User Skills solely as needed to operate the Service for you. For public User Skills you also grant the same licence to other users of the Service to receive and execute the Skill. For private User Skills no third-party licence is granted; we will not surface them outside your account or organisation.

You warrant that you have the rights necessary to upload each User Skill, that the Skill does not infringe third-party intellectual property, and that it does not violate the Acceptable Use Policy.

5.3 API and MCP access

Access to the REST API and MCP server requires an API key issued from the dashboard. You are responsible for keeping API keys confidential and for all activity under your keys. API keys are stored as cryptographic hashes; we cannot retrieve a lost key — you must rotate.

5.4 Service levels

Free and Pro tiers are provided on a commercially reasonable best- effort basis, without an availability commitment. Enterprise customers may negotiate a separate Service Level Agreement in writing.

6. Subscriptions, pricing, and payment

6.1 Tiers

The current plans and prices are published at agentarmory.ai/pricing. Prices are stated exclusive of VAT; VAT is applied at checkout according to your location and tax status. Stripe Payments Europe Ltd processes payments on our behalf; we never receive or store full card numbers.

6.2 Billing cycle and renewal

Pro and Enterprise plans are billed in advance on a recurring monthly cycle and renew automatically. Per the Dutch Wet van Dam (codified at Art. 6:236(j) and (p) and Art. 7:408 BW), Consumers on a subscription may, after any initial fixed term, terminate at any time with a notice period of no more than one month. The cancel control is available in the dashboard under Account → Subscription, and will also be available via a prominent "cancel" button in the account interface from 19 June 2026 onwards as required by Directive (EU) 2023/2673.

6.3 Refunds and chargebacks

Where you have the statutory withdrawal right described in Section 7 and have not waived it, we refund fees paid within 14 days of receipt of your withdrawal notice. Disputed Stripe charges are handled through Stripe's dispute process; we cooperate with that process and may suspend the account during investigation of demonstrated fraudulent payment.

6.4 Price changes

We may change pricing for renewal periods with at least 30 days' prior notice by email to the registered address. You may terminate before the new price takes effect; continued use after the effective date constitutes acceptance.

7. Consumer withdrawal right (digital service)

The Service is a digital service under Art. 6:230g(1)(g) BW. Consumers have a 14-day right of withdrawal that begins on contract conclusion.

The withdrawal right is lost under Art. 6:230p(d) BW / Art. 16(a) CRD if (i) you expressly request that performance begin during the withdrawal period and (ii) you acknowledge that you will lose your withdrawal right once performance is complete. We implement both requirements as a tick-box you must select before checkout. If you do not tick the box, performance is delayed until day 15.

A withdrawal model form is reproduced in Schedule A.

8. Acceptable use

You must comply with the Acceptable Use Policy at agentarmory.ai/aup (also at docs/legal/acceptable-use-policy.md), which is incorporated by reference. In summary, you may not use the Service to host or distribute illegal content, malware, or prompt-injection payloads; circumvent rate limits or access controls; train, fine-tune, or distill a competing AI model on the Service's API outputs or catalogue metadata; upload personal data of others without lawful basis; or use Skills for any of the practices prohibited by Article 5 of Regulation (EU) 2024/1689 (the AI Act).

9. Intellectual property

9.1 Our IP

The Service, the brand "Agent Armory", the catalogue selection and arrangement, the database structure (Database Directive 96/9/EC right sui generis), the website code, and the underlying software are owned by Agent Armory or our licensors.

9.2 Open-source attribution

Catalogue Skills are redistributed subject to their original licence. We satisfy attribution obligations as follows:

• Every MCP get_skill response carries an in-content attribution comment prepended to the markdown, of the form <!-- Source: <upstream-url> · License: <SPDX> (<licence-url>) · via AgentArmory -->. This is the surface that travels with the copy of the Skill if an agent saves it locally.
• API and MCP responses additionally include per-Skill structured fields source_url, source_repository_url, source_license, source_license_url, and (where applicable) notice_text.
• For licences we mirror (MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0), source_license_url resolves to agentarmory.ai/l/<SPDX> — a canonical mirror we host, so the link in a saved attribution comment survives upstream reorganisation.
• A consolidated index of every upstream repository, file, licence, and copyright holder is published at /attribution and is exportable as a single NOTICE archive.
• For Apache-2.0 sources, the upstream NOTICE file content is preserved verbatim and surfaced in the consolidated index.
• MPL-2.0 file headers are preserved in the served content; users receiving an MPL-2.0 file receive it under the MPL-2.0 and not under these Terms.

If you believe attribution for a Catalogue Skill is incorrect or missing, contact legal@agentarmory.ai and we will correct it without undue delay.

9.3 Feedback

If you submit feedback, suggestions, or bug reports about the Service, you grant us a perpetual, irrevocable, royalty-free licence to use that feedback without obligation to you. This clause does not extend to User Skills.

10. Privacy

Our processing of personal data is described in the Privacy Statement at /privacy, incorporated by reference. For Business Customers and Organisations whose users upload personal data into User Skills, the Data Processing Addendum in docs/legal/dpa.md governs that processing under Article 28 GDPR.

11. Content moderation, DSA notice-and-action

11.1 Reporting illegal content

Any person — Customer or not, account or no account — may notify us of content on the Service that they consider to be illegal, using the notice form at agentarmory.ai/report or by email to abuse@agentarmory.ai. The notice must contain (a) a sufficiently substantiated explanation of why the content is considered illegal, (b) a clear indication of the exact location of the content (URL or Skill identifier), (c) your name and contact details (except where the content concerns sexual offences against children), and (d) a statement of good faith. This procedure implements Article 16 of Regulation (EU) 2022/2065 (Digital Services Act).

We acknowledge receipt of every notice by email and process it without undue delay. If the notice is sufficiently substantiated to allow a diligent provider to identify the illegality without a detailed legal examination, our decision creates actual knowledge under Article 6 DSA and we act on the content. We notify both the reporter and the affected uploader of the outcome by email, accompanied by a statement of reasons under Section 11.2.

11.2 Statement of reasons

If we restrict the visibility of, demote, suspend, or remove any User Skill or account, we issue a statement of reasons to the affected user identifying the action, the legal or contractual ground, the scope, whether automated means were used, and the available redress options, in line with Article 17 DSA. Statements of reasons for User Skill removals are also submitted to the DSA Transparency Database at transparency.dsa.ec.europa.eu as required by Article 24(5) DSA once that obligation applies to us.

11.3 Internal complaint-handling (Article 20 DSA)

You may contest a moderation decision affecting your User Skill or account by submitting an appeal from within the statement-of- reasons email or at agentarmory.ai/dashboard/appeals. Appeals are accepted for six (6) months from the date of the decision. We review appeals on their merits — not by the same automated route that produced the original decision — and reply within 14 calendar days with the appeal outcome. A successful appeal reverses the action and restores the User Skill or account.

11.4 Out-of-court dispute settlement

If our internal complaint-handling does not resolve the dispute, you may refer it to a body certified under Article 21 DSA. For Consumer-side disputes in the Netherlands, the competent body is De Geschillencommissie (degeschillencommissie.nl). The discontinued EU ODR platform (formerly at ec.europa.eu/consumers/ odr/) was shut down on 20 July 2025 by Regulation (EU) 2024/3228; references to it from older templates do not apply to this Service.

Small/micro exemption. Agent Armory currently qualifies as a "small enterprise" under Article 19 DSA and is therefore exempt from Articles 20–23, 24(2), and 25 DSA. Article 14, 16, 17, and 24(3) remain fully applicable. We have nonetheless implemented the Article 20 internal complaint-handling described in Section 11.3 in full, and will implement Articles 22–25 by the time we cross the small-enterprise threshold.

12. Disclaimers and AI-specific risks

THE SERVICE AND THE OUTPUT OF ANY SKILL ARE PROVIDED "AS IS" TO THE MAXIMUM EXTENT PERMITTED BY LAW, EXCEPT WHERE THIS CONFLICTS WITH MANDATORY CONSUMER RIGHTS UNDER ARTICLE 7:50AC BW AND DIRECTIVE (EU) 2019/770, WHICH WE DO NOT EXCLUDE OR LIMIT.

You acknowledge and accept:

• Output may be wrong. Skills are instructions executed by AI systems. Output may be inaccurate, incomplete, biased, out of date, or unsafe. You are responsible for reviewing every Output before acting on it.
• Prompt-injection risk. Skills are third-party text that you or your agent will execute. A malicious or compromised Skill may attempt to influence your agent's behaviour. You are responsible for sandboxing, output filtering, and supervision of agent actions.
• Agent action liability. We are not responsible for any action your AI agent takes after retrieving a Skill, including actions taken via tools, APIs, code execution, or external systems.
• No high-risk use. You must not deploy Skills for any use prohibited under Article 5 of the AI Act, nor for medical diagnosis, life-critical infrastructure, autonomous vehicles, weapons control, election influence, or law-enforcement decision-making without separate written agreement and an independent risk assessment.
• No professional advice. Skills are not legal, medical, financial, or other professional advice.

13. Liability

13.1 Liability of Agent Armory (Business Customers)

To the maximum extent permitted by law, our aggregate liability arising out of or in connection with these Terms in any 12-month period is capped at the fees you paid to us in the 12 months preceding the event giving rise to the claim, with a floor of €500. We are not liable for indirect damages, including loss of profit, loss of revenue, loss of opportunity, loss of goodwill, or loss of data, except where this exclusion is void under mandatory law.

13.2 Liability of Agent Armory (Consumers)

Nothing in these Terms limits our liability for (i) death or personal injury caused by our negligence, (ii) fraud or fraudulent misrepresentation, (iii) intent or willful recklessness (opzet of bewuste roekeloosheid), (iv) statutory remedies under Articles 7:50ac e.v. BW, or (v) any other liability that cannot lawfully be limited.

13.3 Carveouts

The caps and exclusions in Section 13.1 do not apply to (a) liability for intent or willful recklessness, (b) breach of confidentiality, (c) infringement of third-party intellectual property by us, (d) violation of GDPR by us in our capacity as controller, or (e) our IP indemnity in Section 13.4.

13.4 IP indemnity (Business Customers)

We will defend Business Customers against third-party claims that the Service or a Catalogue Skill, as delivered by us and used in accordance with these Terms, infringes a third party's intellectual property right enforceable in the EU. This indemnity does not cover User Skills, modifications you make, or use of Output in a manner not contemplated by the Service.

13.5 Your indemnity

You will defend us against any third-party claim arising from (a) your User Skills, (b) your violation of the Acceptable Use Policy, (c) personal data you uploaded without lawful basis, or (d) actions your agent took with our Service.

14. Suspension and termination

14.1 By you

You may terminate at any time from the dashboard. Termination takes effect at the end of the current billing period; access continues until then. Consumer subscriptions follow the Wet van Dam mechanic in Section 6.2.

14.2 By us

We may suspend or terminate immediately, with written notice (which may be by email), if you (a) materially breach these Terms or the Acceptable Use Policy and fail to cure within 14 days where the breach is curable, (b) become insolvent, (c) make the Service unsafe for other users, or (d) host content we are ordered to remove by a competent authority.

14.3 Effect of termination

On termination we delete your account data within 30 days, except billing records retained for 7 years as required by Article 52 Algemene Wet inzake Rijksbelastingen. You may export your User Skills in machine-readable form (JSON) up to the moment of termination via the dashboard or GET /api/v1/account/export.

15. Confidentiality (Business Customers)

Each party will protect the other's confidential information with the care it uses for its own confidential information and at least reasonable care, and will use it only to perform under these Terms. The obligation survives termination by 3 years.

16. Force majeure

Neither party is liable for failure or delay caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, regulated cyber-attack, government action, internet backbone failure, or failure of a Tier 1 sub-processor, provided the affected party gives prompt notice and resumes performance as soon as practicable.

17. Sub-processors and changes to them

Our current sub-processors are listed at agentarmory.ai/subprocessors and reproduced in docs/legal/subprocessors.md. We may add or replace sub-processors. For Enterprise customers, we provide at least 30 days' advance notice of a new sub-processor by email; the Enterprise customer may object for reasonable grounds, in which case the parties will negotiate in good faith, and absent resolution the Enterprise customer may terminate the affected Service without penalty.

18. Export control and sanctions

You may not use the Service in violation of EU dual-use Regulation (EU) 2021/821 or any applicable export-control regime. You confirm you are not on any EU or UN consolidated sanctions list.

19. Governing law and jurisdiction

These Terms are governed by Dutch law, excluding the conflict-of- laws rules and the UN Convention on Contracts for the International Sale of Goods (CISG).

For Business Customers, the Rechtbank Amsterdam has exclusive jurisdiction. For Consumers, the rules of Brussels Ibis (Regulation 1215/2012) apply: you may bring claims in the courts of your domicile, and we may only sue you there.

Nothing in this section deprives a Consumer of the protection of mandatory rules of the consumer's country of habitual residence under Article 6 Rome I.

20. Miscellaneous

• Entire agreement. These Terms, the Acceptable Use Policy, the Privacy Statement, and (for Enterprise) the Enterprise MSA / DPA form the entire agreement between us. They supersede any prior understanding.
• First-shot rule (Art. 6:225(3) BW). We expressly reject incorporation of any general terms tendered by a Business Customer unless we accept them in writing.
• No waiver. Our failure to enforce any right is not a waiver of that right.
• Severability. If any clause is held unenforceable, the rest remains in force.
• Assignment. You may not assign without our written consent. We may assign in connection with a merger, sale, or restructuring on notice.
• Notices. Notices to us go to legal@agentarmory.ai. Notices to you go to the email on your account.

Schedule A — Withdrawal model form (Consumers)

To Agent Armory, support@agentarmory.ai:

I/We () hereby give notice that I/We () withdraw from my/our (*) contract of sale of the following service:

Ordered on: Name of consumer(s): Address of consumer(s): Signature of consumer(s) (only if this form is notified on paper): Date:

(*) Delete as appropriate.

This document is a draft. Consult Dutch counsel before publication.