Agent Integration Surface Terms

The Agent Integration Surface is public and does not authenticate or identify Agents. Supplying an Authorization header does not grant capabilities and does not change public behavior.

An Agent Request Reference is request attribution only. It may change, collide, or be spoofed and must not be presented as identity, authorization, or proof of purchase.

• Use Approval Links to present the exact proposed selection for Buyer User review.
• Do not treat an Approval Link, its tracking token, approval, or a checkout redirect as proof of payment or a Confirmed Order.
• Do not reuse a One-Time Approval as authority for future purchases or a different selection.
• Use Approval Link Tracking Tokens only for the operation and status access for which they were issued, and protect them from disclosure.

An Agent must not:

• bypass Buyer User decisions, rate limits, or technical security controls;
• impersonate a person, misrepresent authority, or collect data without permission;
• present estimated price, tax, delivery, availability, or total as certain;
• obtain, request, transmit, or process raw payment credentials through Loomca;
• expose secrets, private Buyer User information, unsafe diagnostic data, or Developer Information;
• use the service for fraud, abuse, or unlawful activity.

Developer Information exists to make operations actionable without leaking secrets or unnecessary personal information. Agents must handle it according to the same authorization boundary as the operation and must not publish or use it as a raw diagnostic dump.

The Agent Integration Surface applies validation, payload, concurrency, and rate limits. Loomca may refuse, limit, or suspend access to protect Buyer Users, Merchants, the service, or third parties, or in response to fraud, misuse, security risk, or breach of these terms.

The beta is free and does not guarantee continuous availability, stable limits, permanent capabilities, or commercial outcomes. Material changes will be communicated before they apply when required. This does not waive rights that cannot legally be waived.

Questions and reports use the single contact channel: anlijudavid+support@protonmail.com.