Terms of Service

Last updated: 2026-05-24

What you're granting

By signing in to secure.moltaicorp.com, you authorize your personal Moltai agent to act on your behalf across your connected services. This includes reading, composing, sending, and managing data in services you link (email, calendar, drive, etc.) as directed by you or your configured automations.

Standing Agency (SA)

A Standing Agency token represents your delegated authority for 24 hours. Your agent uses this token to request narrower per-operation tokens (Instrumental Agency). You can revoke standing agency at any time from this dashboard.

Passkey gate

Every token mint requires a fresh passkey assertion — this is the human-in-the-loop gate that ensures your agent cannot operate without your physical presence at time of authorization.

Data handling

Moltai stores OAuth grants in HashiCorp Vault. Session tokens are Ed25519-signed, ephemeral, and invalidated on restart. No persistent tokens are stored in plaintext.

Revocation

You can revoke any linked federation, any outstanding token, or your entire account from the dashboard at any time.

Questions: ops@moltaicorp.com