1. Agreement to these terms
These Terms of Use (“Terms”) are a binding agreement between you and Z Strike LLC, a New Jersey limited liability company, United States (“Z Strike,” “Wicket,” “we,” “us”). By accessing or using the Wicket service at wicket.sh and its subdomains — including our application, MCP proxy, marketing site, and documentation, together the “Service” — you agree to these Terms and to our Privacy Policy and Acceptable Use Policy. If you use the Service on behalf of an organization, you represent that you are authorized to bind that organization.
2. Beta service
The Service is offered as a beta. It is provided for evaluation and may change, be interrupted, or be discontinued at any time. It may contain defects, and features described in our documentation may be incomplete or on the roadmap. No service-level agreement, uptime commitment, or support guarantee applies during the beta unless we agree otherwise in a separate written agreement (for example, a design-partner agreement).
3. The Service
Wicket is a hosted authorization gateway. AI agents authenticate with a per-member key; we evaluate a Cedar-based policy decision for each MCP tool call; if permitted, we decrypt your connected-service credentials in flight and forward the call to the upstream service; and we record an audit entry of the decision. We do not store tool-call arguments or responses and do not store credentials in plaintext.
4. Accounts and member keys
- You must provide accurate account information and keep it current.
- You are responsible for activity under your account and for maintaining the confidentiality of your credentials.
- Member keys are shown once and never stored by Wicket. If a key is lost, the associated connections must be re-established. You are responsible for safeguarding member keys and for promptly revoking any that are compromised.
5. Your responsibilities
- You authorize Wicket to connect to the upstream services you choose and to act on the tool calls your agents make through the proxy.
- You are responsible for the policies you configure and for the consequences of allow/deny decisions that result from them.
- You must have the right to connect each upstream service and must comply with that service's own terms (e.g. GitHub, Slack, Linear).
- You must use the Service only as permitted by our Acceptable Use Policy.
6. Fees
The Service is currently free during the beta, including for design-partner teams. Pricing has not yet been established and is to be determined. We may introduce fees for the Service in the future; if we do, we will provide reasonable advance notice and the terms on which paid use applies before any charges take effect. You will never be charged for the beta period unless you agree to paid terms in writing.
7. Customer data and intellectual property
As between you and Wicket, you retain all rights to the data you submit or route through the Service (“Customer Data”), including your policies and audit records. You grant us a limited license to host, process, and transmit Customer Data solely to provide and secure the Service. We retain all rights to the Service itself, including its software, design, and documentation. If you give us feedback or suggestions, you grant us a perpetual, royalty-free license to use them without restriction.
8. Third-party services
The Service connects to third-party upstream services that we do not control. Your use of those services is governed by their terms, and we are not responsible for their availability, content, or actions. The Service may also rely on third-party infrastructure providers described in our Privacy Policy.
9. Confidentiality
During the beta you may receive non-public information about the Service. You agree to use it only to evaluate and use the Service and not to disclose it, except as required by law. This does not apply to information that is or becomes public through no fault of yours.
10. Disclaimers
THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WICKET DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT ANY PARTICULAR POLICY DECISION WILL PREVENT A GIVEN OUTCOME. YOU ARE RESPONSIBLE FOR MAINTAINING APPROPRIATE INDEPENDENT CONTROLS.
11. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, WICKET WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, DATA, OR GOODWILL. BECAUSE THE SERVICE IS PROVIDED FREE OF CHARGE DURING THE BETA, WICKET'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE WILL NOT EXCEED USD 500, OR THE AMOUNT YOU PAID US IN THE 12 MONTHS BEFORE THE CLAIM, WHICHEVER IS GREATER. SOME JURISDICTIONS DO NOT ALLOW CERTAIN LIMITATIONS, SO SOME OF THESE MAY NOT APPLY TO YOU.
12. Indemnification
You agree to indemnify and hold Wicket harmless from claims arising out of your Customer Data, your use of the Service in violation of these Terms or the Acceptable Use Policy, or your violation of any law or third-party right.
13. Term and termination
These Terms apply while you use the Service. You may stop using the Service and close your account at any time. We may suspend or terminate your access if you violate these Terms or the Acceptable Use Policy, or to protect the Service or others. On termination, your right to use the Service ends; the sections that by their nature should survive (ownership, disclaimers, liability, indemnity) will survive.
14. Governing law and dispute resolution
These Terms are governed by the laws of the State of New Jersey, United States, without regard to its conflict-of-laws rules.
Binding arbitration
Except for the carve-outs below, any dispute, claim, or controversy arising out of or relating to these Terms or the Service will be resolved by final and binding arbitration, administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules. The arbitration will be conducted by a single arbitrator, seated in New Jersey (or by videoconference at the arbitrator's discretion), and judgment on the award may be entered in any court of competent jurisdiction. You and Z Strike waive any right to a jury trial.
Class-action waiver
All disputes will be brought solely on an individual basis. You and Z Strike waive any right to bring or participate in a class, collective, consolidated, or representative action, and the arbitrator may not consolidate more than one party's claims or preside over any representative or class proceeding. If this class-action waiver is found unenforceable as to a particular claim, that claim — and only that claim — will be severed and heard in the courts identified below.
Carve-outs
Notwithstanding the above, (a) either party may bring an individual claim in small-claims court, and (b) either party may seek injunctive or other equitable relief in court to protect its intellectual property, confidential information, or to prevent unauthorized use of the Service. For those matters, and for any dispute not subject to arbitration, the exclusive venue is the state and federal courts located in New Jersey, and you consent to their jurisdiction.
15. Changes to these terms
We may update these Terms as the Service evolves. Material changes will be reflected by an updated date and, where appropriate, additional notice. Continued use after changes take effect constitutes acceptance.
16. General
These Terms, together with the Privacy Policy and Acceptable Use Policy, are the entire agreement between you and Wicket regarding the Service. If any provision is unenforceable, the rest remain in effect. We may assign these Terms in connection with a merger, acquisition, or sale of assets. Our failure to enforce a provision is not a waiver.
17. Contact
Questions about these Terms? Email eng@wicket.sh.