1. Scope and Definitions

These API Terms ("API Terms") govern your use of the Echosaw REST API, the Echosaw remote MCP server at https://mcp.echosaw.com, and any locally installable MCP server packages (collectively, "API Services"), provided by Orange Sky Software Inc.

• "API Key" means the unique authentication credential issued to you.
• "API Services" means the Echosaw REST API endpoints under /v1/, the Echosaw remote MCP server at https://mcp.echosaw.com, and any locally installable MCP server packages (such as @echosaw/mcp-server).
• "Rate Limits" means the request frequency and volume limits applicable to your subscription plan.

These API Terms supplement the Terms of Service, Copyright & IP Notice, Privacy Policy, AI Use and Disclosure Policy, and Data Retention and Deletion Policy. In the event of conflict, these API Terms control with respect to API access.

2. API Access and Authentication

API access requires a valid API key issued through your Echosaw account.

You are responsible for safeguarding your API key. Do not share, publish, or embed API keys in client-side code or public repositories.

We may revoke, rotate, or suspend API keys at any time for security reasons or violation of these terms.

API keys are tied to your subscription plan and subject to the rate limits, quotas, and feature entitlements of that plan.

OAuth 2.0 Authentication (Remote MCP Server)

The remote MCP server at https://mcp.echosaw.com uses OAuth 2.0 for authentication. By connecting to the remote MCP server via an MCP client (such as Claude Desktop), you authorize the MCP client application to access Echosaw API Services on your behalf within the scope of your subscription plan.

OAuth tokens are issued by Echosaw's identity provider (Amazon Cognito) and are subject to the same access controls, rate limits, and usage quotas as API key authentication.

You are responsible for securing any OAuth tokens or refresh tokens stored by your MCP client application. Do not share, publish, or embed OAuth credentials in client-side code or public repositories.

Organization-Scoped Access

API keys and OAuth tokens used by Organization Members operate within the Organization's context. Usage incurred via API by any Organization Member is billed to the Organization's subscription. The Organization owner is responsible for all API usage by Organization Members.

3. Permitted Use

You may use the API Services to programmatically submit media for analysis, retrieve intelligence results, search your media library, and download source files, subject to the same use restrictions in the Terms of Service and Copyright & IP Notice.

You may integrate API Services into your internal tools, workflows, and AI-assisted development environments via MCP.

You may connect to the remote MCP server using any MCP-compatible client application (e.g., Claude Desktop, Cursor, or other AI assistants) to access Echosaw tools within the scope of your subscription plan.

API-based access to your data (exports, downloads, results) carries the same rights and restrictions as access via the Product interface.

4. Prohibited Use

You may not:

• Reverse-engineer, probe, or map API endpoints beyond documented functionality
• Resell, sublicense, or redistribute API access or API keys to third parties
• Use API Services to build, train, or improve any competing media intelligence, AI, analytics, or monitoring product or service
• Exceed published rate limits or attempt to circumvent throttling
• Use API Services for any unlawful purpose or in violation of the Terms of Service

5. Rate Limits and Quotas

API requests are subject to rate limits and quotas as defined by your subscription plan.

Exceeding rate limits may result in temporary throttling (HTTP 429) or suspension of API access.

We reserve the right to adjust rate limits with reasonable notice.

6. Service Availability and SLA

API Services are provided "as-is" and "as-available."

We do not guarantee specific uptime, latency, or availability for API Services.

We will use commercially reasonable efforts to provide advance notice of breaking changes to API endpoints. Non-breaking changes (e.g., new fields, new endpoints) may be introduced without notice.

7. Suspension and Termination

We may suspend or terminate your API access immediately if you violate these API Terms, the Terms of Service, or any other applicable policy.

Upon termination of your subscription, API keys are revoked. No API access survives termination except as required to fulfill pending data export requests within the grace period defined in the Data Retention and Deletion Policy.

8. Liability and Indemnity

The limitation of liability and indemnity provisions in the Terms of Service apply to your use of API Services.

You agree to indemnify Orange Sky Software Inc. against any claims arising from your use of API Services, including claims by third parties who access Echosaw data through your integrations.

9. Updates

These API Terms may be updated to reflect changes in API functionality, legal requirements, or our practices. Material changes will be communicated via email or in-app notice. Continued use of API Services after updates constitutes acceptance.

10. Contact

Questions? Contact: contact@orangesky.ai