Terms of Service

1. The Service

Ares is a hosted toolkit of security-oriented tools (recon, scanning, triage helpers, and related playbooks) exposed over the Model Context Protocol for use by AI agents and developers. The Service is provided for authorized security testing and research only.

Features, limits, tool inventory, and availability may change during private beta and thereafter. We may suspend, throttle, or discontinue parts of the Service with or without notice when needed for security, abuse prevention, or operational reasons.

2. Eligibility & accounts

You must be able to form a binding contract and meet the minimum age required in your jurisdiction (and at least 16). You sign in with Google OAuth. You are responsible for activity under your account and any access tokens issued to you.

You must provide accurate account information and keep access credentials (including Bearer tokens) confidential. Notify us promptly at support@aresmcp.com if you suspect unauthorized use.

3. Authorized use only

You may only use the Service to test systems that you own or for which you have explicit authorization to assess (written permission, bug bounty program scope, employment authority, or equivalent).

You agree that you will not use the Service to:

• Scan, probe, or attack systems without authorization
• Conduct mass internet-wide scanning or indiscriminate targeting
• Target private networks, loopback, or cloud instance metadata services of others
• Harass, disrupt, or deny service to third parties
• Violate any applicable law, regulation, or third-party rights

Unauthorized use may result in immediate suspension, token revocation, preservation of logs, and referral to law enforcement or affected parties where appropriate.

4. Acceptable use

In addition to Section 3, you will not:

• Attempt to bypass authentication, rate limits, sandboxing, or policy controls
• Reverse engineer the Service except as allowed by mandatory law
• Resell, sublicense, or provide the Service to third parties without our permission
• Use the Service to develop competing abuse infrastructure
• Upload malware solely to harm systems outside authorized testing scope
• Misrepresent your identity or affiliation when interacting with us

Technical controls (for example blocking private IP ranges and cloud metadata endpoints) exist to reduce harm; they do not expand your authorization and do not guarantee prevention of all misuse.

5. Authentication & tokens

Access to the MCP API is authenticated with a Bearer token (JWT) issued after Google sign-in, or other credentials we configure for operators. Tokens are personal to you. You must not share tokens publicly or commit them to source control.

We may expire, rotate, or revoke tokens at any time for security or policy reasons. You can obtain a fresh token by signing in again to the dashboard.

6. Your content & scan data

You retain rights to content you submit (for example target lists) and to outputs generated for you, subject to these Terms and third-party rights. You grant us a limited license to process that data solely to operate, secure, and improve the Service, enforce these Terms, and comply with law.

You represent that you have the rights and authorization needed to submit targets and process any personal data that may appear in scan results. Do not use the Service to collect personal data unlawfully.

7. Third-party services

Sign-in uses Google. Agent clients (for example Claude Code) are third-party products. Your use of those products is governed by their terms. We are not responsible for third-party services.

8. Beta; no warranty

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. We do not warrant that scans are complete, accurate, or suitable for any compliance purpose.

9. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ARES AND ITS OPERATORS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, OR GOODWILL. OUR TOTAL LIABILITY FOR ANY CLAIM ARISING OUT OF THE SERVICE WILL NOT EXCEED THE GREATER OF (A) AMOUNTS YOU PAID US FOR THE SERVICE IN THE 3 MONTHS BEFORE THE CLAIM OR (B) USD $50 IF THE SERVICE IS FREE.

You are solely responsible for how you use scan results and for any impact on systems you target.

10. Indemnity

You will defend and indemnify Ares and its operators against claims, damages, and expenses (including reasonable legal fees) arising from your misuse of the Service, unauthorized testing, or violation of these Terms or applicable law.

11. Suspension & termination

You may stop using the Service at any time. We may suspend or terminate access immediately if we reasonably believe you violated these Terms, create risk for others, or if required by law. Provisions that by nature should survive (including authorized use, liability limits, and indemnity) will survive termination.

12. Changes to the Terms

We may update these Terms by posting a new version on this page and updating the "Last updated" date. Continued use after changes become effective constitutes acceptance. If you do not agree, stop using the Service.

13. Governing law

These Terms are governed by the laws of the jurisdiction in which the Service operator is established, without regard to conflict-of-law rules, unless mandatory consumer protections in your country provide otherwise. Courts in that jurisdiction will have exclusive venue, except where prohibited.

14. Contact

Legal and support: support@aresmcp.com

Abuse / unauthorized scanning reports: support@aresmcp.com

Privacy details are in our Privacy Policy.