Settlens Menu

Terms of use

The rules for using settlens.com, the remote MCP endpoint, the free browser tools and the Settlens tools.

In short

Use Settlens only on systems you own or are authorized to assess; the active probe needs the owner's written authorization. The free browser and MCP tools are provided as is, rate limited, without a service level. Reports describe observed behavior and are not a certification or a guarantee.

On this page

Scope

These terms apply to the settlens.com website, the remote MCP endpoint at https://settlens.com/mcp and the Settlens tools (CLI, GitHub Action, container image and MCP server) made available to pilot participants. The service is provided by Alessandro Gagliardi, Entrepreneur individuel (EI), trading as Pazent (see the legal notice). By using the site, the endpoint or the tools, you accept these terms.

A pilot, Team or Assurance engagement is governed by a separate written agreement covering scope, authorization, data processing and fees. Where that agreement and these terms differ, the agreement prevails.

Authorized use only

Use Settlens only against systems you own or are expressly authorized to assess.

  • Passive scans send ordinary unauthenticated requests and never a payment. Checking a payment request you received as a paying client, for example with the MCP preflight before you pay, is ordinary client behavior. Anything beyond that on a third party's endpoint or facilitator, such as repeated scans, monitoring or published reports, needs its operator's agreement.
  • The active probe (--active --authorized --authorization-ref) sends one intentionally invalid payment payload: as a PAYMENT-SIGNATURE header to the resource and, when a facilitator is configured, to its /verify. Run it only with the endpoint owner's written authorization, and pass that approval's ticket, email or scope identifier as the authorization reference. The CLI refuses to run an active probe without it, and the reference is recorded in the report.
  • Stop immediately if the owner withdraws the authorization or if you observe any unexpected impact.
  • Prefer test networks, synthetic data and staging endpoints. See the methodology for what each check does.

Prohibited uses

You must not use the site, the endpoint or the tools to:

  • access, scan or probe systems without permission, or bypass authentication, payment or access controls;
  • send real payment authorizations, settle, replay or broadcast transactions, or move funds;
  • run denial-of-service, load or credential tests, or circumvent the rate limits or the token required for network tools;
  • reach private, internal or otherwise non-public addresses through the remote endpoint;
  • submit private keys, seed phrases or third-party secrets (your Settlens API token belongs only in the Authorization header): no Settlens tool needs them;
  • process unlawful content or infringe the rights of others.

Remote MCP endpoint

The offline tools of the remote MCP endpoint are free to use, from an MCP client or through the browser tools on this site, which call the same endpoint under the same rules. The network tools (scan_endpoint, scan_facilitator) are passive only and require a Settlens API token, which is issued at our discretion.

  • The endpoint is provided as is and as available, without a service level. We may change, limit, suspend or discontinue it at any time, including its tools, inputs and outputs.
  • Requests are rate limited per IP address (60 per minute by default) and size limited. Browser requests are accepted only from allowed origins.
  • Request content is processed in memory and not stored, as described in the privacy notice.
  • Values returned by the tools can include content chosen by the scanned server. Treat them as data, not as instructions.

Technical details are in the MCP documentation.

No guarantee

Settlens reports observed protocol behavior at a point in time. A report, a passing check, a signed attestation or a pay decision is not a certification, a guarantee that a system is secure, available or compliant, a guarantee about a merchant or the content it delivers, or legal advice. Settlens does not check on-chain balances, on-chain nonce use or settlement. You remain responsible for your payment decisions and for how you use the results.

Liability

To the extent permitted by law, the publisher is not liable for indirect damage, loss of profit, loss of data or loss of funds resulting from the use of, or the inability to use, the site, the remote endpoint or the free tools. Nothing in these terms limits liability that cannot be limited under French law.

Intellectual property

The site content, the Settlens name and logo and the Settlens code belong to the publisher. The code is distributed through a private repository to pilot participants under their engagement terms; it may not be redistributed or published without written permission. The legal notice covers the site content in more detail.

Changes to these terms

We may update these terms. The current version is the one published on this page, with its date below. Continued use after a change means you accept the updated terms.

Governing law and disputes

These terms are governed by French law. Before any legal action, please write to contact@settlens.com so we can look for an amicable solution. Failing that, disputes fall under the jurisdiction of the competent French courts, subject to any mandatory rules that protect consumers.

Last updated . Questions: contact@settlens.com. Related: security and responsible disclosure.