Terms of service
The rules for murage.ai and our online services, in plain English.
Draft, pending legal review. This page describes how Murage works today in plain words. A lawyer has not signed it off yet, so the wording may change.
Effective September 25, 2026 · Last updated September 27, 2026
About these terms
These terms are an agreement between you and Ferrox Labs, LLC, 100 Congress Ave, Suite 2000, Austin, Texas 78701, USA (“Ferrox Labs”, “we”, “us”). They cover your use of the murage.ai website and any online services we provide, including a Murage account once accounts open.
The Murage desktop app itself is open-source software. Your right to use, copy, change and share it comes from its open-source license, described in the next section, and these terms do not take any of those rights away.
By using the website or our online services, you agree to these terms. If you use Murage for an organization, you agree on its behalf and confirm you are allowed to. If you do not agree, do not use the website or create an account.
How we handle personal data is explained in our privacy policy.
The Murage app and its license
The Murage desktop app for macOS, Windows and Ubuntu is free and open source. From version 0.1.59 it is licensed under the GNU Affero General Public License v3.0 or any later version (AGPL-3.0-or-later). The full license text and notices for included third-party components are in the source repository. Releases before 0.1.59 were published under the Apache License 2.0.
The license governs your use of the app’s code. In short, you may run, study, change and share it, and if you share a changed version, or let people use a changed version over a network, you must make your source code available under the same license. Read the license itself for the exact terms.
As the license says, the app is provided “as is”, without warranty of any kind, to the extent the law allows. Nothing in these terms adds a warranty for the app.
Official installers are published on GitHub, each with a SHA-256 checksum on our download page. Builds from other sources are not made or checked by us.
Your account
You do not need an account to download or use the desktop app, and public Murage accounts are not open yet. When they open, and you create one on murage.ai:
- You must be at least 18 years old and give accurate details.
- Keep your sign-in details secure and tell us if you think someone else has used your account. You are responsible for what happens under it.
- One person per account. Do not share it or sell it.
- You can stop using your account at any time, and ask us to delete it.
Acceptable use
Do not use the website, your account or our online services (or point Murage bots at other people) to:
- break the law or help someone else break it
- send spam, run deceptive or fraudulent schemes, or impersonate a person or organization
- harass, threaten or harm anyone, or collect people’s personal data without a lawful basis
- infringe anyone’s intellectual property, privacy or other rights
- get into systems, accounts or data you are not authorized to access, or test the security of our services without permission (see our security policy for responsible disclosure)
- overload, disrupt or reverse-engineer our website or online services, or scrape them in bulk, except where the law allows it
- create malware, or skills and team packages designed to mislead or harm the people who install them
- break the terms or usage policies of the AI providers and other services you connect
We may suspend or close an account that breaks these rules. This does not affect your rights under the app’s open-source license.
You are in charge of your bots
Murage lets you build and run teams of AI bots that can read, write, search, use connected apps and, if you allow it, use a browser or your computer. They run on your computer, on the AI engines and accounts you choose, and act using the access you give them.
You are responsible for what your bots do, for the access you give them, and for every action you approve or allow them to take without asking. That includes emails and messages they send, posts they publish, payments they make, files they change or delete, and anything they do in connected apps or on websites. Check their work before it goes out, especially anything that matters.
House Rules and bot instructions guide behavior but are not guarantees. A bot can misunderstand, and content it reads (an email, a web page, a file, or a skill someone else wrote) can try to steer it. Only give bots the access they need.
Permission levels and the stop line
Each bot has a permission level that decides what it may do without asking you. You set it, per bot, and can change it at any time.
| Level | What it means |
|---|---|
| Ask | The default for every new bot, task and imported team. The bot asks before each action it tells Murage about, and you choose Allow once, Allow for this task, Always allow or Deny. |
| Auto | The bot keeps going on its own, but still asks about anything destructive and about questions it has for you. The stop line applies. |
| Full access | The bot keeps going without asking, but still stops at the stop line and before reading your keys and passwords. Set on the desktop only. |
| No limits | The bot does anything without asking, except reading your keys and passwords. There is no stop line for your own chats with it. Set on the desktop only, after a warning. |
The stop line
In Ask, Auto and Full access, Murage stops and asks you before a bot pays for something, deletes something outside its own folder, messages someone new, or posts publicly. This is an automated check on the actions a bot tries to take. It is a backstop, not a sandbox, and it can miss things. For example, a reply to someone the bot has already written to is not “new” and does not stop in Auto or Full access.
If you switch a bot to No limits, you remove the stop line for your own chats with that bot. It can then pay, delete, message and post without asking. Only use No limits for bots, accounts and tasks where you accept that risk. Runs started by a routine or a webhook still ask, whatever level a bot has.
Approving an action, choosing Always allow, or raising a bot’s permission level is your decision, and you are responsible for the result.
AI output can be wrong
Murage bots are powered by AI models that can be wrong, out of date, incomplete or biased, and can state things confidently that are not true. Research, summaries, drafts, numbers, code and advice from your bots are a starting point, not a final answer.
Do not rely on AI output as legal, financial, medical, tax or other professional advice. Check anything important before you act on it or send it to anyone.
Third-party services
Murage works with services we do not run, including AI providers (such as Anthropic, OpenAI, xAI and others) and their tools like Claude Code and Codex; the apps you connect; Box by ascii.dev; ElevenLabs; Telegram, Slack and Discord; Tailscale; and GitHub. When you connect one:
- your use of it is governed by that provider’s own terms and privacy policy, and you are responsible for following them;
- any fees are between you and that provider, including Box plans and model usage on your own keys;
- we are not responsible for their availability, what they do with data you send them, or changes they make.
Flux Router
Flux Router is an optional, credit-billed service from Ferrox Labs for AI models, connected apps, voice, images and web search. It is ours, not a third party’s. Murage works without it: your own provider keys or connected-apps key work instead. Its prices are published on fluxrouter.ai. The models, search, voice and app services that Flux Router passes your requests to are third-party services, and the points above apply to them.
Skills, team packages and MCP servers made by other people are also third-party content. Skill Guard checks skills for known risky patterns, but it cannot guarantee a skill is harmless. Review what you install.
Your content
What you create with Murage is yours. We do not claim ownership of your bots, conversations, files or the output your bots produce, and most of it never reaches us. Your rights in AI-generated output may also depend on the terms of the AI provider you used and on the law where you are.
If you send us something (a message, feedback, or a contribution to the open-source project), you let us use it to answer you and to improve Murage. Code contributions are covered by the project’s contributing guidelines.
Our name and website content
The app’s code is open source, but the Murage and Ferrox Labs names, logos and brand, and the website’s own text, design and images, are ours and are not covered by the software license. You may refer to Murage by name, and link to us, but do not use our brand in a way that suggests we made, endorse or support something we did not. Forks and modified versions should use a different name and logo.
Other product names mentioned on the site, such as Claude Code, Codex or Hermes, belong to their owners. Mentioning them does not mean they endorse Murage.
Murage Cloud and paid services
Murage Cloud, a hosted version of Murage, is planned and not yet open. Joining the waitlist does not create a contract or guarantee access, a date or a price. Murage Cloud and any other paid service we offer will have their own terms, including pricing, billing, uptime and data handling, which you will see and accept before you pay.
Disclaimers
To the fullest extent the law allows, the website, your account and our online services are provided “as is” and “as available”, without warranties of any kind, whether express or implied, including warranties of merchantability, fitness for a particular purpose and non-infringement. We do not promise that they will be uninterrupted, error-free or secure, or that information on the website is complete or current.
Some places do not allow certain warranties to be excluded. If you are a consumer, you keep any rights the law gives you that cannot be waived.
Limitation of liability
To the fullest extent the law allows, Ferrox Labs and its people are not liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, arising from these terms, the website, your account, our online services, the Murage app, the actions of your bots, AI output, or third-party services, even if we were told they were possible.
Our total liability for any claim relating to these terms or our services is limited to the greater of the amount you paid us for the service in the 12 months before the claim, or 100 US dollars.
Nothing in these terms limits liability that cannot be limited by law, such as liability for death or personal injury caused by negligence, or for fraud.
Indemnity
If someone brings a claim against us because of how you used Murage, your bots’ actions, your content, or your breach of these terms or the law, you agree to cover our reasonable costs and losses from that claim, to the extent the law allows. If you are a consumer, this applies only as far as the law where you live permits.
Ending these terms
You can stop using the website and delete your account at any time. We may suspend or end your access to the website, your account or our online services if you break these terms, if the law requires it, or if we stop offering a service, giving notice where we reasonably can. The sections that by their nature should continue (such as responsibility for your bots, disclaimers and limits of liability) continue after these terms end. Your rights under the app’s open-source license are governed by that license.
Governing law and disputes
These terms are governed by the laws of the State of Texas, USA, without regard to conflict-of-law rules. Disputes will be handled by the state and federal courts located in Travis County, Texas, unless the law where you live gives you the right to bring a claim in your local courts.
Before starting a formal dispute, please contact us first so we can try to sort it out informally.
Changes
We may update these terms as Murage changes. We will change the effective date at the top, and for significant changes we will give reasonable notice on the site or by email before they take effect. If you keep using the website or your account after that, the new terms apply.
General
- These terms, together with the privacy policy and cookie policy, are the whole agreement between us about the website and your account.
- If any part is found unenforceable, the rest still applies.
- If we do not enforce a right straight away, we have not given it up.
- You may not transfer these terms without our consent. We may transfer them as part of a reorganization, merger or sale.
- We are not responsible for delays or failures caused by events outside our reasonable control.
Contact
Ferrox Labs, LLC, 100 Congress Ave, Suite 2000, Austin, Texas 78701, USA
Or use the contact form. A person at Ferrox Labs reads every message.
Related: Privacy policy · Cookie policy · Privacy and security overview