AI, MCP & Automation Terms

1. Scope and Acceptance

These AI, MCP & Automation Terms (these Terms) govern your use of the artificial-intelligence features and automation interfaces offered by Funded with Flow L.L.C. (Funded with Flow, the Platform, we, us). This includes (a) our informational AI support assistant and (b) our Model Context Protocol (MCP) server, which allows you to connect AI agents and other automation to your own account using permissioned API tokens.

These Terms supplement, and form part of, your overall agreement with the Platform. By generating an API or MCP token, connecting an AI agent, or otherwise using any AI or automation feature, you agree to these Terms. If you do not agree, do not use these features.

The Platform is a simulated, evaluation-based prop-trading practice environment. It is not a broker-dealer, investment adviser, exchange, custodian, or bank, and it does not provide financial, investment, legal, or tax advice.

2. AI Output Is Informational Only

Our AI support assistant provides general, informational responses to help you navigate and understand the Platform. The AI support assistant does not place trades, execute orders, or take actions on your account.

AI-generated output may be incomplete, inaccurate, outdated, or otherwise unreliable, and may not reflect your specific circumstances. AI output does not constitute financial, investment, legal, tax, or professional advice and must not be relied upon as such.

You are solely responsible for independently reviewing, verifying, and evaluating any AI output before acting on it. You should not make trading or financial decisions based solely on AI output.

3. MCP, API Keys, and Connected Agents

Our MCP server lets you connect AI agents and automation tools to your own account using API tokens that you generate. Each token is user-scoped: it may access only your account and data, and never administrative functions or any other user's account or data.

Tokens are issued under granular permission scopes. You are responsible for all activity conducted through your tokens and connected agents, including any orders, instructions, or actions they generate, whether or not you intended or anticipated them.

You must keep your tokens secure. Tokens are displayed only once at creation and are stored by us solely as cryptographic hashes (HMAC), never in plaintext. You should treat each token like a credential: do not share, embed, or expose it; rotate it periodically; and revoke it immediately if it may have been compromised.

4. Read-Only Access vs. Trade-Execution Access

New API and MCP keys are read-only by default. A read-only key can retrieve information but cannot place, modify, or cancel orders.

Trade-execution permission is opt-in and is gated by multiple independent controls. You must take deliberate, affirmative steps to enable trade-execution access on a key, and you must understand the difference between read-only and trade-execution access before doing so.

Before enabling trade-execution permission on any key, you must:

• Test your agent or automation in paper mode first and confirm it behaves as intended;
• Understand exactly which scopes you are granting; and
• Accept full responsibility for orders and actions the key may generate.

5. Automation and Trading Risks

Automated and AI-driven trading carries significant risks that differ from manual trading. Connecting an agent or automation to a trade-enabled key can result in:

• Rapid losses, including losses that accumulate faster than you can react;
• Unintended orders caused by faulty logic, prompts, or configuration;
• Duplicate or repeated orders;
• Execution errors, missed orders, or unexpected behavior; and
• Cascading effects from interactions between your agent, market data, and Platform conditions.

You acknowledge these risks and accept full responsibility for them. We do not guarantee that automation will behave correctly, that orders will execute, or that any outcome will be achieved. You should not enable trade-execution access unless you fully understand and accept these risks.

6. Rate Limits and Abuse Prevention

All AI and MCP/API access is subject to rate limits and other protective controls designed to preserve Platform stability and security. We may throttle, suspend, or block requests that exceed limits or that we reasonably believe pose a risk to the Platform, other users, or our providers.

Rate limits and protective thresholds may change without notice. You are responsible for designing your automation to handle throttling, errors, and retries responsibly, and to avoid generating excessive or abusive request volumes.

7. Prohibited Conduct

When using AI or automation features, you must not:

• Deploy malicious, deceptive, or harmful automation;
• Scrape, harvest, or bulk-extract data except through permitted interfaces and within applicable limits;
• Reverse engineer, decompile, probe, or attempt to circumvent the Platform, its security controls, or its rate limits;
• Redistribute, resell, republish, or otherwise share market data or other protected data in violation of these Terms or our Market Data Disclaimer;
• Attempt to access administrative functions, other users' accounts, or data outside your authorized scopes;
• Use AI or automation to abuse, manipulate, or game the evaluation or challenge mechanics; or
• Interfere with, degrade, or disrupt the Platform or its providers.

8. Logging, Monitoring, and Auditing

We log and monitor AI interactions and MCP/API activity, including AI support conversation logs and MCP/API access logs. These logs are retained and used for safety, debugging, security, abuse prevention, and compliance purposes.

Monitoring helps us detect misuse, investigate incidents, and protect the Platform and its users. Handling of this information is described in our Privacy Policy and Data Processing Information.

9. Suspension and Revocation of Access

We may suspend, restrict, rate-limit, or revoke your AI or MCP/API access, or any individual key, at any time, with or without notice, where we reasonably believe it is necessary to protect the Platform, its users, our providers, or compliance obligations, or where you violate these Terms.

You may also revoke your own keys at any time. Revocation may interrupt or terminate any connected agent or automation relying on that key.

10. No Warranty; Disclaimer

AI features, the MCP server, and the API are provided "as is" and "as available", without warranties of any kind, whether express or implied, to the fullest extent permitted by law. We do not warrant the accuracy, completeness, reliability, timeliness, or availability of AI output, automation behavior, or these interfaces.

We do not guarantee uptime, data accuracy, AI accuracy, order execution, or any trading outcome. You use AI and automation features at your own risk and are responsible for all resulting actions and outcomes.

11. Changes and Contact

We may update these Terms from time to time. Material changes will be communicated through the Platform or by other reasonable means, and your continued use of AI or automation features after an update constitutes acceptance of the revised Terms.

For questions about these Terms, contact us at [email protected]. To report a security concern relating to AI or MCP/API access, contact [email protected].