Terms of Service

1. About Membara Commander

Membara Commander is a control plane connecting users and supported AI clients with enrolled devices. The service may run terminal commands, filesystem tasks, processes, system inspections, deployments, and administrative actions according to the authority granted to the user's principal.

2. User instructions and authority

Membara Commander operates according to user instructions and established authority. Clear instructions may be executed through the technical steps needed to complete the stated objective. The system does not authorize an AI client to initiate unrelated tasks, change targets, or expand scope on its own.

Users are responsible for ensuring that they have the lawful rights to access the devices, accounts, data, services, and resources on which they instruct Commander to act.

3. Devices and credentials

Access is provided only to enrolled devices and principals or those granted permission. Credentials, tokens, and device keys must be kept confidential. Membara may revoke sessions, principals, grants, or devices when necessary for security or recovery, or at the request of an authorized administrator.

4. Execution and background processes

Commands may start processes that continue running after a response is complete, such as builds, tests, workers, or interactive processes. Such processes remain part of the requested task as long as they are bound to the same task and authority. Results may be successful, failed, denied due to insufficient authority, disconnected, or of unknown outcome when the actual state cannot be verified.

5. Audit and operational data

For attribution, security, recovery, and troubleshooting, Commander may store operational metadata such as principal, target device, task/correlation identifiers, timestamps, status, outcome, and technical execution information. Secret credentials are not intended to be shown as ordinary evidence or logs.

Other data handling follows the Membara Commander Privacy Policy.

6. AI clients and third-party services

Membara Commander may be used through ChatGPT, Claude, or other supported AI clients. AI clients, Google OAuth/OIDC, Cloudflare, hosting providers, and other third parties may have separate terms and privacy policies. Membara's guarantees extend only to controls enforced by Commander Core and Agent; the behavior, reasoning, or confirmation user experience of an AI client is outside Membara's direct control.

7. Prohibited uses

Users must not use Commander to access systems without authorization, steal credentials, bypass third-party access controls, damage systems that do not belong to them, or engage in unlawful activities. Technical capabilities on a device do not relieve users of the obligation to have lawful authorization for their actions.

8. Service availability and changes

The service may change, be temporarily suspended, be updated, or experience interruptions. We strive to preserve execution integrity and accurate outcome reporting, but do not guarantee uninterrupted availability or that every external action will succeed.

9. User responsibilities

Users are responsible for reviewing task targets and objectives, maintaining appropriate backups for critical systems, and understanding the impact of requested commands. Membara may enforce fencing, serialization, verification, audit, and recovery controls to help preserve execution consistency without changing the user's intended objective.

10. Termination of access

Access may be terminated by revoking grants, principals, OAuth connections, or device enrollments. Users may also stop the Agent on a connected device to disconnect execution access.

11. Changes to terms

These terms may be updated as product capabilities, security controls, integrations, or legal requirements evolve. The latest revision date will appear on this page.