The agreement for the Nustro platform account, dashboard, management APIs, and sandbox. Production participation is governed separately by the Platform Operator Agreement.
| Version | 1.0 |
| Issuer | Nustro, LLC (“Nustro”) |
| Effective date | August 11, 2026 |
| Supersedes | — |
These Terms of Service are an agreement between Nustro, LLC (“Nustro,” “we”) and the business that creates a Nustro platform account (“you”). They govern the account, the dashboard, the management APIs, and the sandbox. You accept them when you create an account.
Production participation in the Nustro scheme — live certificates, escrow, settlement, disputes, and fees — is governed by the Platform Operator Agreement, which incorporates the Nustro Operator Rulebook and is accepted at production accreditation, not at signup. If these Terms and the Platform Operator Agreement conflict on a production matter, the Platform Operator Agreement prevails. Capitalized terms not defined here have the meanings given in the Platform Operator Agreement and the AEA/P Protocol Specification.
The service is for business use. You must be at least 18, act for a legal entity or as a sole proprietor, and have authority to bind that business. Registration information must be accurate and kept current; the account email is our notice channel to you. You are responsible for everyone who uses the account under your authority. One account per platform legal entity unless we agree otherwise.
An account moves through published readiness stages: email verification, then profile completion, at which point the sandbox is active; business verification (KYB) and review gate production accreditation. Accreditation is granted at our reasonable discretion against published criteria and requires accepting the Platform Operator Agreement. Declining accreditation does not close the account or the sandbox.
The sandbox runs the complete flow — principals, agents, certificates, settlement, disputes — on test networks. Sandbox tokens and balances have no monetary value and cannot be exchanged for anything of value; attempting to move real value through the sandbox is prohibited. The sandbox is provided at no charge and without availability commitments, and we may modify it, cap usage, or reset sandbox data, on reasonable notice where practicable.
API keys and dashboard credentials identify your platform. Keep them confidential, use environment-appropriate keys, and rotate a key promptly if you suspect compromise — rotation is self-serve in the dashboard. Activity under your credentials is attributed to you until you notify us of compromise. We may require re-verification after a security event.
You agree not to: (a) break the law or use the service to facilitate unlawful activity; (b) misrepresent your identity, your business, or your account’s accreditation status — including describing an agent or platform as certified or accredited when it is not; (c) interfere with the service, probe or test its security other than through any program we publish, or access it by automated means at volumes that degrade it; (d) attempt to introduce real value into the sandbox or use it to simulate transactions for a fraudulent purpose.
You further agree not to: (e) structure accounts, Customers, or Principals to evade published thresholds, including the Customer graduation thresholds; (f) resell access to the dashboard or APIs except as the Platform Operator Agreement permits; (g) reverse engineer the service, except to the extent a law permits it notwithstanding this term. The AEA/P protocol specification itself is open and published; nothing in these Terms restricts implementing it.
The scheme may not be used, in sandbox or production, for transactions in goods or services that are illegal under applicable law, or in these categories in any jurisdiction: child sexual abuse material or any sexual exploitation; human trafficking or forced labor; controlled substances outside a valid license; weapons, explosives, or export-controlled goods outside a valid authorization; counterfeit goods or intellectual-property infringement; stolen goods, data, or credentials; malware, unlawful surveillance, or unlawful data harvesting; fraud or deceptive schemes; unlicensed money services or unlicensed gambling; and evasion of sanctions or export controls.
Nustro maintains the authoritative Prohibited and Restricted Categories list at nustro.com/legal. We may amend it on 30 days’ notice, or immediately where law requires. Restricted (as distinct from prohibited) categories require our prior written approval before your platform serves them.
You are responsible for ensuring that your Principals, their agents, and the Customers you serve do not use the scheme for prohibited categories. Where they do, we may suspend the credentials involved; enforcement acts on credentials, never on wallets, operational funds, or escrow.
You may not use the service, and may not permit access to it, from a comprehensively sanctioned jurisdiction, and you may not use the scheme in dealings with any party on an applicable sanctions list — including the U.S. OFAC SDN list and applicable EU, UN, and UK lists — or any party owned or controlled by one. You represent that neither you nor any owner or controller of your business is such a party.
Screening the parties you onboard is your obligation: you will screen Principals at verification and on an ongoing basis, and the Customers you serve to the standard of your own verification of them. Nustro may independently screen, may block or suspend credentials, and may decline or revoke accreditation on sanctions grounds, without prior notice where the law requires. You will also comply with applicable export-control laws in your use of the software and APIs.
A Customer is a commercial client of your platform under which you may group Principals for your own administration, support, and reporting. A Customer has no protocol standing: it is never verified by the Operator — your platform can, and should, verify its own Customers — it appears in no identity document, certificate, or settlement, and gates no transaction, escrow, dispute, or rating behavior; accountability rests with each Principal.
A Customer is expected to hold its own accreditation once its activity reaches platform scale. Where the Principals grouped under one Customer — or under common control across Customer records — exceed $1,000,000 in settled transaction value over any trailing twelve months, or 10,000 agents concurrently holding production certificates, graduation is mandatory: Nustro notifies you, and within 180 days of notice the Customer accredits as a platform in its own right, its Principals migrating under protocol identity portability. Below the thresholds, a Customer may accredit voluntarily at any time.
Where mandatory graduation is not completed in the window, issuance of new production certificates to Principals under that Customer is suspended until it is — existing certificates, agents, and funds are untouched. Graduation transfers accreditation obligations, not the commercial relationship: a graduated platform may contract any part of its servicing to another accredited platform, including yours, on terms the two of you set.
The Nustro service, dashboard, documentation, and marks belong to Nustro, LLC or its licensors; these Terms grant you a limited, revocable, non-exclusive right to use them to operate your account. The AEA/P protocol specification is published openly at aeap.dev under its own license, and nothing in these Terms narrows that license. If you send us feedback, we may use it without obligation to you.
Our Privacy Policy explains what we collect and why. It is deliberately narrow: we do not collect personal data about your principals’ customers or the parties your agents transact with beyond what verification requires. You are responsible for having a lawful basis for the principal and business data you submit to us, and for your own notices to your principals.
The dashboard and sandbox are provided “as is” and “as available,” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. Production service commitments, where they exist, are made in the Platform Operator Agreement, not here.
To the maximum extent the law allows, neither party is liable under these Terms for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data. Nustro’s total liability under these Terms is capped at the greater of one hundred US dollars and the amounts you paid us under these Terms in the twelve months before the event giving rise to liability. Liability under the Platform Operator Agreement is addressed there. Nothing in these Terms excludes liability that cannot be excluded by law.
You will defend and indemnify Nustro, LLC against third-party claims arising from your breach of these Terms, from your platform and its services to Principals and Customers, or from data you submit without a lawful basis — except to the extent a claim results from our own breach of these Terms.
You can close the account from the dashboard at any time; the closure preview shows what closing affects before you confirm. We may suspend the account or its credentials for material breach, security risk, unlawful use, or failed verification, giving notice where practicable. Enforcement acts on credentials — never on wallets, operational funds, or escrow, whose treatment is fixed by the Platform Operator Agreement and the protocol. Sections that by their nature survive closure — including intellectual property, disclaimers, liability limits, indemnity, and general terms — survive.
We may update these Terms. For material changes we give at least 30 days’ notice to the account email before the new version takes effect; continued use after the effective date is acceptance. Each version carries its version number and effective date, and superseded versions remain published at nustro.com/legal.
These Terms are governed by the laws of the State of Delaware, without regard to conflicts rules, and the state and federal courts sitting in Delaware have exclusive jurisdiction over disputes under them. You may not assign these Terms without our consent; we may assign them to an affiliate or in a merger or asset sale. Notices to you go to the account email; notices to us go to legal@nustro.com. These Terms, the Privacy Policy, and — once accepted — the Platform Operator Agreement are the entire agreement about the account. If a term is unenforceable, the rest stand; not enforcing a term is not a waiver; the parties are independent contractors.
The trust layer for transacting AI agents. Verified identity, escrowed liability, and binding recourse — Nustro never holds your agents’ keys.