End-User Licence Agreement: endoflife.ai MCP Server
This agreement is between EndofLife AI Inc. ("endoflife.ai", "we") and the organisation or person that subscribes to the endoflife.ai MCP Server through AWS Marketplace or otherwise connects an AI agent or MCP client to it (the "Service", "you"). Amazon Web Services operates the marketplace where the Service is listed; it does not license the Service to you and is not a party to this agreement.
1. What the Service is
The Service is a remote Model Context Protocol (MCP) server at https://mcp.endoflife.ai. It gives AI agents and MCP clients read-only access to the endoflife.ai dataset: end-of-life and end-of-support dates, lifecycle status, EOL Risk Scores, CISA Known Exploited Vulnerabilities exposure, and CPE and package-URL identifiers for the software, operating system and hardware products endoflife.ai tracks, together with tools to check versions, scan a stack, audit an SBOM and find upgrade paths. Data stays at endoflife.ai and is fetched when a tool is called. Nothing is installed in your environment.
2. Licence
We grant you a non-exclusive, non-transferable, revocable licence to connect your MCP clients and AI agents to the Service and to use the answers it returns for your own internal business purposes, including inside internal tools, dashboards, reports and automations. You may quote individual answers, with attribution to endoflife.ai, in material you produce. You may not resell the Service or access to it, offer it to third parties as a service of your own, systematically extract or copy the dataset in bulk to build a competing product or a substitute for the Service, remove or obscure source attributions the Service returns, or use the Service in a way that circumvents its rate limits or interferes with its operation.
3. Price and API keys
The Service is free of charge, including where it is offered through AWS Marketplace. No account or key is needed; anonymous use is subject to the daily allowance and per-call limits published at https://endoflife.ai/api. An optional endoflife.ai API key, obtained from us directly under the plan terms on that page, raises those limits when sent in the X-API-Key header. A key is yours to keep confidential; we may rotate or revoke a key that is shared publicly or used to circumvent plan limits.
4. The data
Dates and scores are compiled from vendor lifecycle pages, the endoflife.date dataset and CISA's Known Exploited Vulnerabilities catalog, with the source and verification day of each date exposed in the answer. A product or version we cannot match is reported as unmatched, never guessed. We work to keep the data accurate and re-read sources daily, but it is provided as information to support your own decisions; you remain responsible for verifying dates that drive a business or security action. See https://endoflife.ai/accuracy for how disagreements are handled.
5. What we receive and keep
Tool calls carry the product names, versions, package URLs or SBOM contents you ask about. The Service is stateless: we do not store request bodies or answers. For each call we record the tool name, whether it succeeded, how long it took and the client's user-agent string, and we log IP addresses for rate limiting for the period stated in our privacy policy. The Service is not designed to receive personal data; do not send it any. The privacy policy governs everything the Service processes.
6. Availability, support and changes
The Service is provided on a reasonable-efforts basis without an uptime commitment or service credits; a liveness endpoint is published at https://mcp.endoflife.ai/health. We provide written technical support by email at [email protected] and answer on business days. We may add, change or retire tools, limits and features, and will describe material changes in the documentation at https://endoflife.ai/mcp; we may discontinue the Service on 30 days' notice on that page.
7. Term and termination
This agreement runs while you use the Service. You may stop at any time by disconnecting. We may suspend or end your access on written notice for a breach of section 2 or 3 that is not cured within 30 days, or immediately where use threatens the Service or other users. Sections 4, 5, 8 and 9 survive.
8. Warranties and liability
The Service and its data are provided as is. To the extent permitted by law we disclaim implied warranties, including merchantability, fitness for a particular purpose and non-infringement, and we are not liable for indirect, consequential, special or punitive losses, lost profits or lost data. Our total liability under this agreement is limited to the fees you paid us for the Service in the twelve months before the claim, which for a free subscription is nil; where law does not allow that limit, our liability is limited to the greatest extent it does allow. You are responsible for how your agents and systems act on the answers the Service returns.
9. General
This agreement is governed by the laws of the Province of Alberta and the federal laws of Canada applicable there, and the courts of Alberta have exclusive jurisdiction. It is the whole agreement between us for the Service; our website terms and privacy policy apply to the endoflife.ai API and website. Neither party will use the other's name or marks in publicity without written consent, except that we may list your organisation among Service users only if you agree in writing. If any part is unenforceable the rest stands.
Contact: EndofLife AI Inc., [email protected]