Terms of Service | Protocol
Protocol
Launch your MCP server

Protocol Terms of Service

Last updated: June 13, 2026

These Terms of Service are based on the Common Paper Terms of Service and Cloud Service Agreement Standard Terms Version 2.1, licensed under CC BY 4.0. Protocol has modified the Common Paper form for its service. Common Paper has not reviewed or endorsed these Terms.

If you signed a separate Order Form or other agreement with Protocol for the same Product, and that agreement remains active, that agreement controls instead of these Terms to the extent of any conflict.

This Agreement is between Protocol LLC, a Pennsylvania limited liability company (“Provider”), and the company or person accessing or using the Product (“Customer”). If you accept this Agreement for a company or other organization, you represent that you have authority to bind it. In that case, “Customer” means that organization.

By creating an account, clicking to accept, accessing an MCP server issued by Protocol, purchasing a plan or add-on, or otherwise using the Product, Customer accepts this Agreement.

This Agreement consists of:

  1. the Cover Page below;
  2. the Common Paper Cloud Service Agreement Standard Terms Version 2.1 (“Standard Terms”), incorporated by reference; and
  3. the Protocol Addendum below.

The Cover Page and Protocol Addendum control over conflicting Standard Terms.

Cover Page

Order Form

Cloud Service: Protocol’s websites, account and workspace features, company-domain research, product-marketing and go-to-market context generation, editing and approval workflows, MCP servers and tools, Smart Routing, usage and feedback features, Active Context features, and related software, documentation, support, and services (collectively, the “Product”).

Order Date: The Effective Date.

Subscription Period: One month for a month-to-month self-service plan. For annual or custom plans, the period shown at checkout or in the applicable Order Form.

Cloud Service Fees: The fees shown on Protocol’s pricing page, at checkout, or in an applicable Order Form, including recurring plan fees and fees for additional credits, seats, services, or other capacity. A free plan has no recurring subscription fee but remains subject to its Use Limitations.

Payment Process: For self-service paid plans, Customer authorizes Provider and its payment processor, currently Stripe, to charge the payment method on file in advance for recurring fees and when purchased for add-ons or additional capacity. Custom plans may be invoiced as stated in the applicable Order Form.

Non-Renewal Notice Period: At any time before the next renewal date for a self-service plan, effective at the end of the then-current Subscription Period. A custom Order Form may state a different period.

Use Limitations: The limits associated with Customer’s plan, checkout, account, pricing page, documentation, or Order Form. Limits may include credits, Users or seats, workspaces, MCP servers, connected tools, Customer Content, Custom Docs, storage, audits, watched surfaces, tasks, or other usage.

Technical Support: Reasonable support through the channels Provider makes available for Customer’s plan. No response or resolution time is guaranteed unless an Order Form says otherwise.

SLA: None unless stated in an Order Form.

Professional Services: None unless stated in an Order Form or statement of work.

Key Terms

Customer: The company or person accessing or using the Product. If a person accepts this Agreement for a company or organization, Customer means that company or organization.

Provider: Protocol LLC, a Pennsylvania limited liability company.

Effective Date: The date Customer first accepts this Agreement or first accesses or uses the Product, whichever occurs first.

Governing Law: Pennsylvania.

Chosen Courts: The state and federal courts of competent jurisdiction in Pennsylvania where venue is proper under applicable law.

Provider Covered Claims: Any third-party action, proceeding, or claim that the Product, when used by Customer as authorized by the Agreement, infringes or misappropriates the third party’s intellectual property or proprietary rights.

Customer Covered Claims: Any third-party action, proceeding, or claim (1) that Customer Content, when used as permitted by the Agreement, infringes, misappropriates, or otherwise violates the third party’s rights; or (2) arising from Customer’s breach or alleged breach of Section 2.1 of the Standard Terms or Sections 2, 3, or 7 of the Protocol Addendum.

General Cap Amount: The greater of $100 or the fees paid or payable by Customer to Provider during the 12 months immediately before the event giving rise to the claim.

Increased Claims: None.

Unlimited Claims: None.

Additional Warranties: None.

Notice Address:

Attachments, Supplements, And Modifications

DPA: None unless Customer and Provider enter into a separate Data Processing Agreement.

Security Policy: Provider will use commercially reasonable administrative, technical, and organizational measures designed to protect the Product and Customer Content from unauthorized access, alteration, or use.

Changes to the Standard Terms: The Protocol Addendum below applies.

Protocol Addendum

1. Plans, Credits, Seats, And Additional Capacity

  1. Plans. Product features and Use Limitations vary by plan. Current or illustrative plan names may include Embedded Context Free, Embedded Team, and Active Context. Provider may rename or reorganize plans without reducing Customer’s paid entitlements during the then-current Subscription Period.
  2. Credits. Credits are a limited, revocable unit used to measure Product usage. Today, Protocol generally charges credits when Smart Routing returns Selected Context through an MCP call. Provider may prospectively change which Product actions consume credits, how many credits an action consumes, or how credits are described as the Product develops.
  3. Credit limits. Each plan may include a recurring credit allowance. Unless Provider states otherwise, included credits reset at the end of each billing or usage period, do not roll over, have no cash value, are non-transferable, and are not refundable. Customer may be able to purchase additional credits.
  4. Seats. Each plan may limit Users or seats, especially for workspace, workflow, task-management, editing, approval, assignment, feedback-attribution, or administrative features. Customer may be able to purchase additional seats. Customer may not share individual login credentials or use one seat for multiple people.
  5. Enforcement. Provider may throttle, pause, limit, or require an upgrade or additional purchase when Customer reaches a Use Limitation. Provider is not required to allow overages.

2. Signup, Verification, And Eligibility

  1. Customer must provide accurate account, company-domain, and contact information.
  2. Provider uses WorkOS and other service providers for authentication, account security, email verification, and abuse prevention.
  3. Provider may refuse or delay account creation, research, generated context, MCP server access, or other Product access until an email address is verified.
  4. Provider may reject disposable, fraudulent, abusive, sanctioned, unlawfully obtained, or otherwise ineligible email addresses or accounts. Provider may also reject signups that create security, legal, reputational, or operational risk.
  5. Submission of a company domain does not establish ownership of, affiliation with, or authority to act for that company. Customer may not impersonate another person or organization or misrepresent its affiliation with a domain.
  6. The Product is marketed primarily to business customers in the United States. Provider may restrict or decline access based on location, sanctions, legal requirements, vendor availability, or operational readiness. Customer is responsible for ensuring its use is lawful where it is located.

3. Domain Research, Draft Context, And Generated Output

For this Agreement, “Generated Output” means text, analysis, context, suggestions, drafts, classifications, routing results, and other material generated by or through the Product for Customer.

  1. Customer may submit a company domain or URL. Provider may collect and analyze publicly available information about that domain, company, market, products, and related sources to create draft product-marketing, go-to-market, or company context.
  2. Draft context and other Generated Output may be incomplete, inaccurate, outdated, non-unique, or unsuitable for Customer’s purpose. Customer is responsible for review, approval, correction, and use.
  3. Provider does not represent that Customer owns, controls, or is affiliated with a submitted domain. Generated Output about a company is not an endorsement by, or an official statement of, that company.
  4. Customer must not use the Product or Generated Output to impersonate, deceive, defame, infringe, or falsely claim authorization from another person or organization.
  5. As between Provider and Customer, and to the extent permitted by law, Customer may use Generated Output created specifically for Customer for its internal business purposes and may modify and publish it at its own risk. Provider retains ownership of the Product, underlying systems, templates, taxonomies, workflows, models, know-how, and pre-existing materials.
  6. The Product does not provide legal, financial, security, compliance, or other professional advice. AI-enabled features are not a substitute for human review.

4. Customer Content, Usage Data, And Machine Learning

  1. Customer retains ownership of Customer Content, subject to the limited rights granted in the Standard Terms.
  2. Provider may process Customer Content as needed to research, generate, host, route, display, secure, support, and improve the Product and related offerings.
  3. Modifying Section 1.6 of the Standard Terms, Provider may use Public Marketing Content, Product Feedback, and aggregated or commercially reasonably de-identified Usage Data to evaluate and improve the Product and related AI or machine-learning systems.
  4. “Public Marketing Content” means information Customer has made publicly available, such as public website copy, product pages, blog posts, documentation, and public social content. “Product Feedback” means suggestions, corrections, ratings, and other feedback submitted for the purpose of improving the Product, excluding Customer Confidential Information and personal information.
  5. Provider will not use private or proprietary Customer Content, Customer Confidential Information, or sensitive personal information to train generalized AI or machine-learning models or to improve the Product for other customers.
  6. Provider may use Usage Data to operate, secure, analyze, and improve the Product. Provider may disclose Usage Data externally only in aggregated form that does not identify Customer or Users.

5. Fees, Billing, Taxes, And Refunds

  1. Stripe or another payment processor may collect and process Customer’s payment information. Provider generally does not receive full payment-card numbers.
  2. Paid subscriptions renew automatically for successive Subscription Periods unless canceled before renewal.
  3. Except where the Agreement or applicable law expressly requires otherwise, fees and purchased credits, seats, and other capacity are non-refundable.
  4. Customer is responsible for keeping billing and payment information current. Provider may suspend paid features for failed or overdue payments.
  5. Customer must notify Provider of a good-faith billing dispute within 30 days after the charge. Customer remains responsible for undisputed amounts.

6. Free Offerings, Product Changes, Pricing Changes, And Updated Terms

  1. Free offerings. Provider may add, modify, limit, suspend, or discontinue any free, beta, trial, promotional, or no-fee plan, feature, MCP server, allowance, or access at any time, with or without notice. No free or no-fee offering is guaranteed to remain available indefinitely or unchanged.
  2. Paid Product changes. Provider may improve or change the Product over time. Provider will not materially reduce the general functionality of a paid plan during Customer’s then-current Subscription Period, except as needed to address legal, security, abuse, third-party dependency, or emergency issues.
  3. Pricing and limits. Provider may change prices, credit economics, seat prices, included capacity, and other commercial terms prospectively. For an existing paid subscription, a change to recurring price or included paid-plan capacity will apply no earlier than the next renewal after at least 30 days’ notice, unless Customer affirmatively accepts the change sooner.
  4. Updated Agreement. Provider may update this Agreement by posting a revised version and changing the “Last updated” date. Material changes will apply on the stated effective date after reasonable notice, or when Customer electronically accepts them. Changes required by law or needed to address security, fraud, abuse, or a new feature may take effect sooner. Continued use after the effective date constitutes electronic acceptance. If Customer does not agree, Customer must stop using the Product and cancel before the change takes effect.

7. Additional Restrictions

Customer will not, and will not allow anyone else to:

  1. use the Product or Generated Output unlawfully or to violate another person’s rights;
  2. submit Customer Content without the rights and permissions needed for Provider to process it;
  3. submit regulated health information, payment-card data, government identifiers, biometric data, account passwords, or other sensitive or regulated data unless Provider expressly authorizes it in writing;
  4. send spam, phishing, malware, harassment, discriminatory content, deceptive content, or harmful code through the Product;
  5. circumvent authentication, verification, security, billing, credit, seat, rate, or access controls;
  6. probe, scan, test, overload, disrupt, or compromise the Product or related systems without Provider’s written permission;
  7. resell, sublicense, rent, or provide the Product to third parties except as expressly allowed by the applicable plan; or
  8. use the Product to build or improve a competing product or service, except to the extent applicable law prohibits this restriction.

8. Third-Party Services

The Product may interoperate with or depend on third-party services, including Anthropic, OpenAI, Sentry, WorkOS, Stripe, Attio, public websites, MCP clients, and Customer-selected integrations. Third-party services are governed by their own terms and privacy practices. Provider is not responsible for third-party services or for changes, outages, or acts outside Provider’s reasonable control.

9. Suspension And Termination

  1. In addition to the Standard Terms, Provider may suspend or terminate access if Customer’s email is unverified or rejected, Customer reaches a Use Limitation, payment fails, Customer creates legal or security risk, a third-party dependency requires suspension, or Provider discontinues a free offering.
  2. Customer may stop using a free plan at any time and may cancel a paid self-service plan before renewal through the Product or by contacting Provider.
  3. Following termination or a verified deletion request, Provider will delete or de-identify Customer Content from active systems within 30 days and allow routine backups containing Customer Content to expire within 90 days, unless retention is required by law, needed for legitimate security, fraud-prevention, dispute, or legal-hold purposes, or permitted in aggregated or irreversibly de-identified form.

10. Publicity

Modifying Section 12.8 of the Standard Terms:

  1. For free, beta, trial, promotional, or no-fee access, Provider may identify Customer as a Product user and use Customer’s name and logo for that limited purpose.
  2. For paid self-service access, Provider may do the same unless Customer opts out by emailing legal@protocolgtm.com.
  3. Provider will obtain separate permission before publishing a case study, testimonial, press release, attributed quote, or detailed customer story.
  4. A custom Order Form may replace this section.

11. Precedence

If documents conflict, the following order controls: (1) a signed custom Order Form or other signed agreement; (2) this Protocol Addendum; (3) the Cover Page; and (4) the Standard Terms.

Contact

Protocol LLC
legal@protocolgtm.com