Terms of Service

1. Who we are and accepting these terms

DevSly (devsly.io, its REST API and its MCP server, together "the Service") is operated by WAPI Solutions LLC ("WAPI", "we", "us"). By accessing or using the Service you agree to these Terms of Service and to our Privacy Policy. If you use the Service on behalf of an organisation, you confirm that you are authorised to accept these terms for it. If you do not agree, do not use the Service.

2. The Service

DevSly provides developer tools. Some run entirely in your browser; others send your input to our servers to compute the result:

• In your browser: some utilities, such as the PDF watermark remover, process your input locally and do not send it to us.
• On our servers: many tools send what you enter to our servers, including several encoders, formatters and hash generators (for example the MD5 and bcrypt hashers and the JSON tools), DNS, WHOIS, IP and HTTP-header lookups, the webhook tester, load testing, website and design audits, the llms.txt reader, video processing and the Best Skills rankings. Do not enter real passwords, secrets or personal data into a tool unless you need to. The Privacy Policy explains what we keep and for how long.
• API and MCP server: programmatic access to many of the same tools, subject to the published rate limits.

An account is optional for most tools and required for some features, such as API keys and saved webhooks.

3. Accounts and API keys

• Give accurate information and keep your password, API keys and OAuth tokens secret. You are responsible for activity under your account and keys.
• API keys require a verified email address and are subject to rate and daily limits.
• Tell us at [email protected] if you believe your account has been compromised.
• We may suspend or delete accounts and revoke keys that break these terms or put the Service or others at risk.

4. Acceptable use

You may use the Service only for lawful purposes. You must not:

• Run load tests, scans or other network tools against systems you do not own or do not have written permission to test. We limit tests against targets we cannot link to you, and we may block tests at our discretion.
• Use the webhook tester, proxy, fetchers or any other tool to send spam, distribute malware, host phishing, collect other people's credentials or attack, probe or overload third-party systems.
• Upload or process content you do not have the right to use, including removing watermarks or other marks from material you are not entitled to modify.
• Circumvent rate limits, access controls or usage restrictions, or resell or re-host the Service or its API without our written permission.
• Attempt to gain unauthorised access to the Service, its data or other users' accounts, except as permitted for security research in section 9.
• Break any law or infringe anyone's intellectual property or privacy rights.

5. Your content

You keep all rights to the content you submit. You give us a limited licence to host, process and transmit it only as needed to provide the tool you are using and to keep the Service secure. Anyone who knows the address of a webhook you create can send data to it, so treat those addresses as secrets and do not route sensitive data through test tools.

6. Third-party content and links

Some features show or link to content we do not control, such as the GitHub repositories listed on Best Skills and the websites you look up. We do not endorse that content. Community skills and code can run on your machine; review them before you install anything. Your use of third-party sites and services is governed by their own terms.

7. Fees

Most of the Service is free. Where we offer a paid plan, its price, billing period and cancellation terms are shown to you before you pay and form part of these terms. Nothing is charged without your explicit agreement.

8. Intellectual property

The Service, including its design, code, text and branding, belongs to WAPI Solutions LLC and is protected by intellectual property laws. The Service uses open-source components, each under its own licence. The public REST API and MCP server may be used free of charge within the published rate limits. You may not use our names or logos in a way that suggests we endorse you without our written permission.

9. Security research and responsible disclosure

We welcome good-faith security research. This section is our standing permission for security testing and applies to anyone who follows it; you do not need to sign anything else.

9.1 Scope

The following WAPI products, including their web applications and APIs, are in scope: devsly.io, wapiso.com, sendwmail.com and caretta.cloud.

Out of scope: services we do not operate (for example Cloudflare, GitHub, email and payment providers), websites of our customers that embed our widgets, physical attacks, and social engineering of our staff, customers or users.

9.2 Rules of engagement

• Test only with accounts and data you created. Do not access, change or delete other users' data; if you reach personal data by accident, stop, do not keep or share it, and tell us in your report.
• Access only as much as you need to demonstrate the issue. Do not pivot into internal systems or keep access after you have confirmed a finding.
• No denial-of-service or volumetric testing, and keep automated scanning to a rate that does not degrade the Service (no more than 5 requests per second).
• Do not use our tools (for example the load tester, proxy or webhook tester) against third parties while testing.
• No spam, phishing or social engineering, and nothing that breaks the law.

9.3 How to report

Email [email protected] with the affected product and URL, clear steps to reproduce, the impact and any proof of concept. Please keep the details confidential until we have fixed the issue, or for 90 days after your report, whichever comes first, and coordinate public disclosure with us.

9.4 Safe harbor

If you act in good faith and follow this section, we consider your research authorised. We will not bring legal action against you or report you to law enforcement for it, including under anti-hacking and anti-circumvention laws, and if a third party takes action against you over research that followed this section, we will make it known that your work was authorised. This protection cannot bind third parties, and it does not cover testing outside the scope above or in breach of these rules.

9.5 Recognition

Verified, original reports earn points on our Security Hall of Fame and a verifiable certificate. Automated-scanner output without demonstrated impact, duplicates and best-practice suggestions do not qualify. By reporting you agree that we may show your chosen name on the Hall of Fame; tell us if you prefer to stay anonymous.

We have announced a yearly reward pool for researchers across WAPI products, shared in proportion to points. Its rules will be published separately, and no payment is owed until they are. Outside that programme we pay cash rewards only when we agree to one in writing.

10. No warranty

We do not guarantee that the Service will be uninterrupted or error-free, or that results (for example lookups, audits and rankings) are complete or correct. Verify important results independently.

11. Limitation of liability

To the maximum extent permitted by law, WAPI Solutions LLC and its members, employees and affiliates are not liable for any indirect, incidental, special, consequential or punitive damages, or for loss of data, profits or business, arising from your use of or inability to use the Service. Our total liability for any claim relating to the Service is limited to the greater of USD 100 and the amount you paid us for the Service in the twelve months before the claim.

12. Indemnification

You agree to indemnify and hold harmless WAPI Solutions LLC and its affiliates from claims, damages and expenses arising from your use of the Service, your breach of these terms, or your violation of anyone else's rights.

13. Suspension and termination

You can stop using the Service at any time and delete your account yourself under Account → Security. We may suspend or end your access, with or without notice, if you break these terms or if we need to protect the Service, our users or third parties. Sections 5, 8 and 10 to 15 survive termination.

14. Changes to these terms

We may update these terms. The date below shows the latest version. For material changes we will give notice on the site, or by email if you have an account, before they take effect. Continuing to use the Service after that means you accept the updated terms.

15. Governing law

These terms are governed by the laws of the State of Wyoming, United States, without regard to its conflict-of-law rules. The state and federal courts located in Wyoming have exclusive jurisdiction over any dispute, except where the law of your country of residence gives you a mandatory right to bring a claim elsewhere.

16. Contact

• Operator: WAPI Solutions LLC
• Legal questions: [email protected]
• Security reports: [email protected]
• Website: DevSly home page (devsly.io)