The deal,
in plain English.

01Acceptance of these terms

These Terms of Service ("Terms") form a binding agreement between you and MUSWA ("we", "us"), for the use of Muswa.com, including the website, the dashboard, the REST API and the MCP server (together, the "Service").

If you use the Service on behalf of an organisation, you confirm you are authorised to bind it, and "you" means that organisation. Our Privacy Policy and Cookie Policy form part of these Terms.

02Eligibility

• You must be at least 18 years old and able to enter a contract.
• You must not be located in, or acting for a person in, a country or list subject to comprehensive sanctions that would prohibit us from serving you.
• Information you give at registration, including your account type (individual, enterprise or government), must be accurate. We may verify it and refuse or close accounts registered with false details.

03Your account

• Accounts are personal. Do not share sign-in details. Teams need one account per member, or an enterprise agreement.
• You are responsible for activity under your account and your API keys.
• Sensitive changes (email, password) require a captcha and an email confirmation.
• Report suspected unauthorised access to [email protected] immediately. You can revoke sessions and keys from the dashboard at any time.

04The Service

The Service lets you look up a target and receive a report assembled from public registries, DNS, certificates, routing data, reputation lists, passive observations and our own internet-wide scanning. It currently includes IP, domain and autonomous-system (ASN) reconnaissance, AML and crypto-wallet screening, indicator-of-compromise (IoC) lookups for file hashes and other indicators, WAF and CDN detection with origin resolution, origin discovery for domains hidden behind content delivery networks, and an investigation case workspace for organising your lookups. Automated access is available through the REST API and the MCP server.

Some checks contact the target directly (for example a TLS handshake or a passive HTTP request). These checks are standard, non-intrusive requests. The Service does not perform exploitation, brute force or denial-of-service testing, and you must not try to make it do so.

We improve the Service continuously and may add, change or remove checks and modules. Beta modules are provided as-is and may change or disappear without notice.

05Plans and quotas

• Longer periods are discounted: 6 months at -10% and yearly with 2 months free.
• A lookup is one target processed by one module. Re-opening a saved report does not consume a lookup.
• Unused lookups do not roll over to the next day.
• We may apply reasonable technical rate limits to protect the Service and its data sources.
• There is no free tier. Prices may change for future periods; a period you already paid for is never repriced.

06Payments and renewal

Plans are paid in advance through a hosted cryptocurrency checkout, where you choose the coin and network. Your plan starts when the payment is confirmed. Invoices that are not paid within 24 hours expire and must be created again.

• Plans do not renew automatically. We remind you by email before your plan ends.
• You are responsible for network fees and for sending the exact amount requested. Underpayments may delay activation.
• Prices are in US dollars and exclude any taxes that may apply to you.
• Other payment methods may be added later and will be governed by these Terms.

07Refunds

Because access to the Service is delivered immediately on payment, fees are generally non-refundable, including for unused lookups or unused time.

If a fault on our side prevents you from using the Service, contact [email protected] within 14 days of the problem. We will extend your plan or refund you, at our discretion. Refunds are paid in the same cryptocurrency where possible, net of network fees. Nothing in this section limits rights you have under mandatory consumer law.

08Acceptable use

The Service exists for abuse handling, threat research, incident response, fraud prevention, due diligence and lawful investigations. You may use it only for lawful purposes and in line with the laws that apply to you. You must not:

• harass, stalk, intimidate, dox or otherwise target an individual;
• plan, prepare or carry out attacks, intrusions or denial of service against any system, including targets you looked up;
• use results to send spam, conduct fraud or evade law enforcement;
• resell, sublicense, mirror or publish the Service or bulk results as a competing dataset;
• scrape the dashboard, automate it outside the API, or bypass quotas, captchas or rate limits;
• probe, scan or test the security of the Service except under our bug bounty rules;
• upload malicious code or interfere with other users.

We review suspected abuse by hand. Serious or repeated violations lead to suspension without refund and, where required, a report to the competent authorities.

09API and MCP access

• The REST API and the MCP server are available on the Professional plan and on enterprise agreements.
• API and MCP calls consume the same daily quota as the dashboard.
• API keys are personal to your account. Do not embed them in public code or share them outside your organisation.
• If you connect an AI assistant through MCP, you remain responsible for every lookup it makes and for how its output is used.
• We may version, deprecate or change endpoints. We give reasonable notice of breaking changes on the API documentation page.

10Accuracy of results

Internet data changes constantly and third-party sources can be wrong or out of date. Scores, classifications and origin findings are probabilistic. We work hard to be accurate, but we do not guarantee that any result is complete, current or correct. You are responsible for verifying results before taking action that affects others, such as blocking, takedown requests or legal proceedings.

11Intellectual property

We and our licensors own the Service, its software, design, scoring methods, scanning data and brand. We grant you a limited, non-exclusive, non-transferable licence to use the Service during your plan.

You may use, store and share reports you generate inside your organisation and with parties involved in your case (for example a hosting provider, a registrar or an authority). You may not repackage them as a product.

12Confidentiality

We treat your lookup history as confidential. We do not disclose it to targets or to other customers, and we access it only to run, secure and support the Service, or when legally required as described on our legal requests page. Aggregated, non-identifying statistics may be used to improve the Service.

13Suspension and termination

You can delete your account at any time from the dashboard settings. Deletion is final and does not entitle you to a refund.

We may suspend or terminate your access, with or without notice, if you breach these Terms, if required by law, or if your use creates a risk for the Service or others. Where reasonable, we tell you why and give you a chance to respond. Sections on liability, indemnity, intellectual property and governing law survive termination.

14Disclaimer of warranties

To the extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Service will be uninterrupted, error-free or that results will meet your needs.

15Limitation of liability

To the extent permitted by law, we are not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, data or goodwill, arising from your use of the Service or of its results.

Our total liability for any claim relating to the Service is limited to the amount you paid us in the 12 months before the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited by law, such as liability for fraud or for death or personal injury caused by negligence.

16Indemnity

You agree to indemnify and hold harmless MUSWA, its officers and staff from claims, damages and costs (including reasonable legal fees) arising from your breach of these Terms, your misuse of the Service or its results, or your violation of any law or third-party right.

17Governing law and disputes

These Terms are governed by the laws of [JURISDICTION], without regard to conflict-of-law rules. Before starting any proceedings, contact [email protected] so we can try to resolve the issue informally within 30 days. Disputes that cannot be resolved go to the competent courts of [JURISDICTION], unless mandatory consumer law gives you the right to sue where you live.

18Changes and contact

We may update these Terms. Material changes are announced by email at least 14 days before they take effect; continuing to use the Service after that date means you accept them. If these Terms are unenforceable in part, the rest remains in force.

MUSWA
General and support: [email protected] · Legal: [email protected]