Terms of Service

These Terms of Service ("Terms") govern access to and use of the TenantMCP service ("the Service") provided by Circle of Bytes ApS, CVR no. 45063925, Sønderholmvej 64, 8543 Hornslet, Denmark ("Circle of Bytes", "we"). They form an agreement between Circle of Bytes and the organisation that connects its Microsoft tenant to the Service ("Customer", "you"). The person accepting these Terms confirms they are authorised to bind the Customer.

1. The Service

TenantMCP is a Model Context Protocol (MCP) server that lets AI assistants chosen by the Customer read from, and with explicit human approval act on, the Customer's Microsoft 365 tenant through Microsoft Graph. The Service relays tenant data on demand; it does not warehouse tenant content. The Service is provided in early access, and features, modules and limits may evolve.

2. Accounts and administrator authority

The Service is connected to a tenant through Microsoft admin consent granted by an administrator of that tenant. The Customer is responsible for who in its organisation can sign in, for the directory roles it assigns, and for keeping its Microsoft accounts secure. Only directory administrators may obtain MCP access; changing tenant-level settings, managing billing and approving write actions require the privileged administrator roles described in the product documentation. The Customer may revoke TenantMCP's access at any time by removing the enterprise application from its tenant.

3. Write actions and approvals

The Service is read-only by default. Write tools are only available after an administrator enables write actions in the portal, and every write an assistant proposes is queued for a human administrator to approve or reject. An approved action is executed as instructed by the Customer. The Customer is responsible for reviewing each proposed action before approving it and for the consequences of the actions it approves, including irreversible actions such as a device wipe. AI assistants can be wrong; the approval step exists so that a human makes the decision.

4. Acceptable use

The Customer must not use the Service to access tenants it is not authorised to administer, to break the law, to infringe others' rights, to interfere with or probe the Service's security or availability beyond responsible disclosure to security@tenantmcp.com, or to resell the Service without our written agreement. The Customer's use of Microsoft services and of its chosen AI assistants remains subject to those providers' own terms.

5. Plans, fees and trial

The Free plan is read-only and subject to a monthly call cap. The Pro plan is priced per administrator seat per month as shown on the website or in the portal at the time of purchase, plus applicable taxes. A Pro subscription may start with a free trial; unless cancelled before the trial ends, the subscription continues as a paid subscription. Direct purchases are billed in advance through our payment processor, Stripe, and can be managed or cancelled in the billing portal; cancellation takes effect at the end of the current billing period. Purchases made through Microsoft Azure Marketplace are billed by Microsoft under the Marketplace terms. Fees already paid are non-refundable except where required by law.

6. Data protection

Circle of Bytes processes personal data on the Customer's behalf as a processor under the Data Processing Addendum, which forms part of these Terms. How we handle personal data is described in the Privacy Policy, and our security model is summarised on the Security page.

7. Availability and changes

We aim to keep the Service available and secure, but during early access no service level is guaranteed. We may perform maintenance, and we may change or discontinue features; where a change materially reduces a paid feature, we will give reasonable advance notice and the Customer may cancel.

8. Intellectual property

Circle of Bytes retains all rights in the Service and its software. The Customer retains all rights in its tenant data and in the content it submits. The Customer grants Circle of Bytes the rights necessary to provide the Service. Feedback may be used to improve the Service without obligation.

9. Warranties

The Service is provided "as is" and "as available". To the extent permitted by law, Circle of Bytes disclaims all implied warranties, including fitness for a particular purpose. Circle of Bytes does not warrant that answers produced by AI assistants using the Service are accurate or complete.

10. Limitation of liability

To the extent permitted by law, neither party is liable for indirect or consequential loss, including loss of profit, revenue, data or goodwill, and each party's total liability arising out of or in connection with the Service in any 12-month period is limited to the fees paid or payable by the Customer for the Service in that period. These limitations do not apply to liability that cannot be limited under applicable law, including liability for gross negligence or wilful misconduct.

11. Term, suspension and termination

These Terms apply from the first use of the Service until the Customer's use ends. The Customer may stop using the Service and revoke consent at any time. Circle of Bytes may suspend or terminate access for material breach, for non-payment, or where needed to protect the Service or other customers, with notice where reasonably possible. On termination, data is returned or deleted as set out in the Data Processing Addendum.

12. Governing law

These Terms are governed by Danish law. The courts of Denmark have exclusive jurisdiction, without prejudice to any mandatory consumer or data protection law that applies to the Customer.

13. Changes to these Terms

We may update these Terms. Material changes will be announced on this page and, where practical, by email to the Customer's administrators at least 30 days before they take effect. Continued use of the Service after that date constitutes acceptance.

14. Contact

Circle of Bytes ApS, Sønderholmvej 64, 8543 Hornslet, Denmark, CVR 45063925. General questions: hello@tenantmcp.com. Privacy: privacy@tenantmcp.com. Security: security@tenantmcp.com.