Terms of Service

Effective Date: April 1, 2026 · Last Updated: April 1, 2026

1. Service Description

CraftedTrust, operated by Cyber Craft Solutions LLC ("CCS"), provides automated trust scoring, scanning, assisted review, and certification services for Model Context Protocol (MCP) servers. Our Service includes:

  • Public MCP server registry with trust scores
  • Automated server scanning and analysis
  • Public trust asset generation
  • Publisher assisted review and certification programs
  • REST API for programmatic access

2. Acceptance of Terms

By accessing or using CraftedTrust, you agree to be bound by these Terms of Service. If you do not agree, do not use the Service.

3. Acceptable Use

You agree to use CraftedTrust responsibly. You may NOT:

  • Abuse the scan endpoint: Do not submit automated bulk scans without prior approval. Rate limits are enforced (5 scans per IP per hour for free users).
  • Submit malicious URLs: Do not attempt to scan URLs designed to exploit our scanner infrastructure.
  • Defame publishers: Do not use trust scores to harass, defame, or misrepresent MCP server publishers. Trust scores are objective, automated assessments - not editorial opinions.
  • Circumvent rate limits: Do not use VPNs, proxies, or other techniques to bypass API rate limiting.
  • Scrape or resell data: Do not systematically scrape the registry for commercial redistribution without a data license.
  • Impersonate CCS: Do not represent yourself as affiliated with CraftedTrust or CCS without authorization.

4. Trust Scores, Certifications and Scan Results

CraftedTrust trust scores, badges, certifications, and audit reports are provided for informational purposes only. They represent a point-in-time assessment based on automated scanning and do not constitute a guarantee, warranty, or assurance of any server's security, reliability, or fitness for any particular purpose.

A trust score or certification does not mean a server is free from vulnerabilities, malicious code, or security risks. Servers can change their behavior after scanning. CraftedTrust is not responsible for any damages, losses, data breaches, or security incidents that occur as a result of connecting to, using, or relying on any server listed in the registry, regardless of its trust score or certification status.

By using CraftedTrust services, you acknowledge that: (a) trust scores are automated assessments that may contain errors or omissions; (b) certification reflects compliance at the time of review and does not guarantee ongoing security; (c) you are solely responsible for your own security decisions and due diligence; (d) Cyber Craft Solutions LLC bears no liability for the actions, security posture, or behavior of any third-party MCP server listed in the registry.

CraftedTrust certifications are revocable at any time if a server no longer meets the required trust threshold. Certification does not create any partnership, endorsement, or agency relationship between Cyber Craft Solutions LLC and the certified publisher.

CCS reserves the right to rescan servers at any time and to update trust scores accordingly.

5. Certification

5.1 Public and Publisher Offers

Public registry search, public server profiles, public research, docs, and buyer-facing trust summaries are available without charge. Publishers can start with a Free Scan ($0), purchase Assisted Review ($149 one-time), or apply for Standard Certified ($399/year per server) or Premium Certified ($999/year per server). Enterprise scope is offered only as custom packaging layered on top of Standard or Premium.

5.2 Payment Terms

  • Self-serve paid offers are processed through Stripe card checkout.
  • Custom enterprise scope may be invoiced or handled through custom written terms.
  • Assisted Review includes one written findings summary and one remediation retest within 14 days.
  • Certification fees are non-refundable once the review process has begun.
  • Standard Certified and Premium Certified status are valid for one year from issuance and require renewal for continued certification.

5.3 Revocation

CCS may revoke a server's certification if:

  • The server's trust score drops below the certification threshold
  • The server is found to be engaging in malicious behavior
  • The publisher violates these Terms of Service
  • The certification was obtained through misrepresentation

6. API Usage

The CraftedTrust API is provided for programmatic access to trust scores and scan results. API usage is subject to rate limits. Commercial API access with higher limits is available - contact us for pricing.

7. Intellectual Property

  • The CraftedTrust name, logo, shield design, and trust asset designs are the intellectual property of Cyber Craft Solutions LLC.
  • Standard Certified and Premium Certified publishers are granted a license to display their certification assets as long as their certification is active.
  • Scan data and trust scores are made available under the principle of public transparency.
  • The trust scoring algorithm is proprietary to CCS.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CYBER CRAFT SOLUTIONS LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PROFITS, SECURITY BREACHES, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATED TO YOUR USE OF CRAFTEDTRUST SERVICES, TRUST SCORES, CERTIFICATIONS, TRUST ASSETS, OR ANY INFORMATION PROVIDED THROUGH THE PLATFORM, REGARDLESS OF THE THEORY OF LIABILITY.

IN NO EVENT SHALL CYBER CRAFT SOLUTIONS LLC'S TOTAL AGGREGATE LIABILITY EXCEED THE AMOUNTS PAID BY YOU TO CYBER CRAFT SOLUTIONS LLC IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

THE FOREGOING LIMITATIONS SHALL APPLY EVEN IF A REMEDY FAILS OF ITS ESSENTIAL PURPOSE AND TO THE FULLEST EXTENT PERMITTED UNDER PENNSYLVANIA LAW, INCLUDING BUT NOT LIMITED TO THE PENNSYLVANIA UNIFORM COMMERCIAL CODE (13 PA. CONS. STAT. § 2316) AND APPLICABLE COMMON LAW.

8a. Disclaimer of Warranties

CRAFTEDTRUST SERVICES, INCLUDING ALL TRUST SCORES, SCAN RESULTS, CERTIFICATIONS, TRUST ASSETS, AND RELATED DATA, ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. CYBER CRAFT SOLUTIONS LLC EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE. THIS DISCLAIMER IS MADE IN ACCORDANCE WITH THE PENNSYLVANIA UNIFORM COMMERCIAL CODE (13 PA. CONS. STAT. § 2316).

9. Indemnification

You agree to indemnify and hold harmless CCS and its officers, employees, and agents from any claims, damages, losses, or expenses arising from your use of the Service or violation of these Terms.

10. Termination

CCS reserves the right to suspend or terminate access to the Service for any user who violates these Terms. Users may discontinue use of the Service at any time.

11. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Commonwealth of Pennsylvania, without regard to its conflict of law provisions. Any legal action or proceeding arising out of or relating to these Terms or the Service shall be brought exclusively in the state or federal courts located in Lancaster County, Pennsylvania, and you consent to the personal jurisdiction of such courts. Nothing in these Terms shall limit the rights of consumers under the Pennsylvania Unfair Trade Practices and Consumer Protection Law (73 Pa. Stat. § 201-1 et seq.) to the extent such rights cannot be waived by contract.

12. Changes to Terms

CCS may update these Terms from time to time. Continued use of the Service after changes constitutes acceptance of the revised Terms.

13. Contact

Cyber Craft Solutions LLC
Email: cyber.craft@craftedcybersolutions.com