Terms of Service

Last updated: 2026-05-24

What you're granting

By signing in to secure.moltaicorp.com, you authorize your personal Moltai agent to act on your behalf across your connected services. This includes reading, composing, sending, and managing data in services you link (email, calendar, drive, etc.) as directed by you or your configured automations.

Instrumental Agency (IA)

A Instrumental Agency token grants an agent your authority for a single, ephemeral 30-second window — minted by your passkey, per action. Your agent uses this token to request narrower per-operation tokens (Instrumental Agency). You can revoke standing agency at any time from this dashboard.

Passkey gate

Every token mint requires a fresh passkey assertion — this is the human-in-the-loop gate that ensures your agent cannot operate without your physical presence at time of authorization.

Data handling

Moltai stores OAuth grants in HashiCorp Vault. Session tokens are Ed25519-signed, ephemeral, and invalidated on restart. No persistent tokens are stored in plaintext.

Revocation

You can revoke any linked federation, any outstanding token, or your entire account from the dashboard at any time.

Questions: ops@moltaicorp.com