These terms apply to RepoPilot at repopilot.app and its hosted APIs, MCP tools and related services (the service). References to RepoPilot, we and us mean the service operator. Contact us at hello@repopilot.app. Our privacy policy explains how we handle data.
By using the service after being given notice of these terms, you agree to them. If you use it for an organisation, you must have authority to act for that organisation. If you do not agree, do not use the service. Separately distributed software may also have its own licence.
1. What the service provides
RepoPilot supplies automated repository analysis, source excerpts, dependency information, comparisons, risk signals and verification receipts. Outputs may use AI, deterministic rules, public data or information supplied by you or your tools. The service is a decision-support tool, not a substitute for qualified judgment, security review or testing.
RepoPilot is a non-commercial hobby research project, offered free of charge and without any commitment to keep running. It is not provided in the course of a business.
2. Output is not a guarantee or approval
Outputs can be inaccurate, incomplete, misleading or out of date. You must independently verify them before relying on them. We do not guarantee that an output identifies every defect, vulnerability, licence issue, incompatibility or material fact, or that a recommendation is suitable for your project.
A positive score, absent advisory, passed check, source citation, proof receipt or recommendation is not a certification, warranty, security audit, legal opinion, or approval to install, deploy or merge. An unavailable result is not evidence of safety. A repository commit may differ from a published package. Reported checks may come from third parties or caller assertions; RepoPilot has not executed them unless a result expressly says so.
You are responsible for reviewing the underlying sources, licences and evidence gaps; testing changes in your own environment; keeping appropriate backups; and deciding whether and how to use an output. If you connect a coding agent, you are responsible for its permissions, actions and review process. RepoPilot output must not be treated as authorisation for an agent to act on your behalf.
3. No professional advice; third-party materials
Outputs are general technical information, not professional legal, financial, compliance or security advice. Obtain specialist advice where your decision requires it. Repository authors, package maintainers, registries, model providers and other services are independent third parties; we do not endorse them or control the accuracy, availability or conduct of their services.
Public source code and other third-party materials remain subject to their owners' rights and applicable licences. A link, excerpt or generated description does not grant a licence to copy, distribute or use that material, or guarantee that output is original or non-infringing.
4. Your submissions and permitted use
Submit only material you are entitled to provide. Do not submit credentials, secrets, confidential source code or unnecessary personal data. Public repository analysis and web chat may be saved and made publicly accessible, as explained in the privacy policy. You retain your rights in submissions and permit us to process, store and display them as necessary to provide the feature you use, including its described public surfaces.
Do not use the service unlawfully, infringe others' rights, bypass access controls or rate limits, misrepresent output as a certification, interfere with the service, or attempt to access private data without permission. Keep account credentials and API keys secure. Report suspected misuse or a material error through our contact address.
5. Automated and agent access
You may call the API and MCP tools from software, including coding agents, within the published rate limits. These terms apply to that use: whoever configures or operates the agent, or the organisation it acts for, accepts them, and is responsible for the agent's requests and for what it does with the output. Each tool result repeats that it is decision support, not approval, and links here.
Do not use automated access to bulk-copy, mirror or resell outputs as a dataset or competing service, to evade rate limits or quotas (for example by rotating identities or addresses), or to send requests designed to disrupt the service. We may limit or block automated traffic that does.
6. Availability, changes and payments
We may change features, limits, supported integrations or free allowances, and may suspend access to address abuse, security issues, legal requirements or service operation. We do not promise uninterrupted availability, a service level, or continued support for a particular output format unless separately agreed in writing.
Where paid features are offered, the price, currency and allowance displayed at purchase apply. Payments are processed through the payment provider identified at checkout. Contact us about billing errors, unused credits or refund requests. Nothing in these terms removes statutory cancellation, refund or other consumer rights; we do not treat purchase alone as a waiver of those rights. Material changes will not retrospectively remove rights attached to an existing purchase.
7. Warranty disclaimer
To the fullest extent permitted by applicable law, the service and its outputs are provided "as is" and "as available", without warranties or representations, express or implied, including accuracy, completeness, currency, merchantability, satisfactory quality, fitness for a particular purpose, non-infringement or freedom from errors. No information provided through the service creates a warranty or professional duty beyond obligations that cannot lawfully be excluded.
8. Limits on liability
The exclusions and limits below apply only to the extent permitted by applicable law. Nothing excludes or limits liability for fraud or fraudulent misrepresentation, death or personal injury caused by negligence, or any liability or rights that cannot legally be excluded or limited, including mandatory consumer and data-protection rights.
Subject to those exceptions, we are not responsible for losses arising from reliance on erroneous, incomplete or stale outputs, third-party content or services, or changes made by you or your agents. For business users, we exclude liability for indirect or consequential loss, lost profits or revenue, lost business opportunities, interruption, and loss or corruption of data, to the extent such exclusions are lawful and reasonable.
For business users, and subject to the exceptions above, our total aggregate liability arising from the service is limited to the greater of £100 and the fees you paid us for the service in the 12 months before the event giving rise to the claim. This business liability cap does not apply to consumers. If you are a consumer, your mandatory rights and remedies continue to apply; we do not exclude liability where the law makes us responsible.
9. Data sources and security reports
Advisory, dependency and repository data come from third-party sources under their own licences and terms; see data sources and attributions. To report a security vulnerability in RepoPilot, email hello@repopilot.app with the subject email security@repopilot.app; pleasequot;Security reportemail security@repopilot.app; pleasequot;; please do not test against other users' data.
10. Ending use and changes to these terms
You may stop using the service at any time. Contact us about account or data deletion. Ending use does not erase obligations already incurred or the lawful continued use of public material, and retention remains subject to the privacy policy and applicable law.
We will publish changes here with an updated date and provide additional notice of material changes where appropriate or required. Changes apply prospectively. If a provision is unenforceable, the remaining provisions apply to the extent lawful. These terms do not prevent you from exercising mandatory rights or bringing a claim in a court available to you under applicable law.