Terms of service

These terms govern the KushBitx website and API tools. Using the website, the API or a paid service means you accept them.

Who we are

The services are provided by KushBitx E-Commerce, registered in the Sultanate of Oman. KushBitx E-Commerce is the contracting party for every service and the recipient of every payment.

Refunds

Technical REVIEW. If a KushBitx Preflight report is REVIEW only because a required check could not run on our side or at a data provider, the report shows "technicalReview": true. Paid with credits, the credits are returned automatically and the response shows "charged": 0. Paid with x402, you may request a refund within 7 days on the same terms as an INCOMPLETE report. A REVIEW caused by a risk signal, or by missing input (for example no from), is a delivered result and is not refunded.

• INCOMPLETE reports: if a paid report is delivered as INCOMPLETE, you may request a refund within 7 days (see Paid API calls).
• Mistaken or excess payments: refunded after verification, less the network fee only, to a verified refund address.

Refunds are paid in the asset and network originally used. Request a refund from admin@kushbitx.com with the report ID, the payment transaction hash, your refund address and the signed message described below.

Refund address verification

We do not refund automatically to the address that paid, because it may belong to an exchange or another platform. To receive a refund, give us a receiving address on Base that you control, and sign a plain-text message with that same address using your wallet's standard message signing (personal_sign). The message must include the order or report ID, the payment transaction hash and the date, for example:

KushBitx refund request
Order or report ID: <ID>
Payment transaction: <0x… transaction hash>
Refund address: <0x… your address>
Date: <YYYY-MM-DD>

We check that the signature comes from the refund address before any refund is sent. Refund transfers are made manually by KushBitx.

To claim a refund for an INCOMPLETE report or a mistaken payment, you must also prove that the payment is yours: include the report recovery key you received with the report, or sign the same request with the wallet that paid. A report ID and transaction hash alone are not enough.

Exception: prepaid credits. Credit refunds are not sent to a separate refund address. Credits belong to the Base wallet that paid for the top-ups: that wallet is the account. A credit refund is therefore sent only to that wallet, in USDC on Base, and only after that wallet signs the refund request (see Prepaid credits). If you can no longer sign with that wallet, we cannot refund the credits.

Fraud warningKushBitx will never ask for your wallet's private key, seed phrase or recovery phrase, and will never ask you to sign a transaction or token approval to receive a refund. A refund needs only a plain-text message signature. Treat any other request as fraud and report it to admin@kushbitx.com.

Existing API tools

What the API tools do

The free token preview provides market data and is not a security verdict. SpendGuard provides policy decisions but does not hold keys, sign transactions or execute payments. A separate trusted signer or approval service must enforce any decision. KushBitx reports provide evidence from the sources available at the time of the request.

Paid API calls

Paid API calls use Base USDC through x402: KushBitx Preflight is 0.005 USDC, token risk is 0.001 USDC, unsigned transaction preflight is 0.001 USDC, payment verification is 0.00288 USDC, Signature Check is 0.003 USDC and Quick Check is 0.001 USDC. The exact network, asset, recipient and amount are presented before authorization. There is no account or subscription. Missing evidence never means zero risk. If a paid report is delivered as INCOMPLETE, the client may request a refund within 7 days, sent to a verified refund address (see Refunds).

Free trial keys

We may give a project a free trial key for KushBitx Preflight and Token Risk. The key is sent in the X-KushBitx-Trial-Key header, and only these two routes accept it.

• Duration: the trial lasts 30 days from the key's first use.
• Daily limits: a key has a daily limit (100 checks unless agreed otherwise). All trials together share a daily limit.
• Pauses: we may pause trials when a data provider's capacity runs low.
• When a key does not apply (unknown, revoked, expired, over a limit or paused), the request is refused with HTTP 403 and an error code such as TRIAL_EXPIRED, TRIAL_QUOTA_EXHAUSTED or TRIALS_PAUSED (HTTP 503 TRIAL_UNAVAILABLE if the key cannot be checked). No payment is requested. To use the paid service, send the request without the trial key; nothing is charged unless your client authorizes that payment.
• After the trial: paid use is optional, at the price listed at the time. There is no automatic charge or subscription.
• Your key: keep it secret. We may revoke a key that is shared, abused or used outside the project it was issued to.
• Same rules as paid checks: trial results are the same reports, with the same limits, and are not financial advice.

Prepaid credits

• What they are. Credits are a prepaid balance for KushBitx checks. 1 credit equals 0.001 USDC. Each check deducts the credits shown on the pricing page at the time of the request. Credits can be used only for KushBitx services. They are not money, a deposit or an investment, earn no interest or return, and cannot be transferred, sold or exchanged.
• Account. There is no registration. The Base wallet that paid for a top-up is the account for those credits.
• Top-ups. A top-up is paid in USDC on Base through x402. The minimum top-up is 1 USDC. Top-ups of 10 USDC or more include bonus credits of 10% of the credits bought. During the first month after a wallet's first top-up, the total top-ups from that wallet are limited to 50 USDC.
• Business pack. A business pack is a one-time prepaid top-up of 99 USDC (send "plan": "business" to /api/credits/topup) that adds 120,000 credits and 30 days of integration support from the date of payment. The business pack is exempt from the 50 USDC first-month limit on top-ups and does not count toward it. It does not renew automatically: no payment is ever taken without your new authorization, and you may buy another pack at any time. Integration support means help connecting KushBitx checks to your system by email to admin@kushbitx.com, with a reply within one business day; it is not a guarantee of results, availability or response time beyond that. Credits from a pack follow the prepaid credits terms: no expiry while the service is offered; refunds of unused paid credits go only to the paying wallet; bonus credits have no cash value. Once integration support has started, a business pack refund is the USDC paid, minus the value of credits used, minus 25 USDC for the support provided, and never less than zero.
• Credit key. You receive the key once, when the top-up completes. Keep it secret: anyone who holds it can spend the balance. We store only a cryptographic hash of the key, so we cannot show it again. You can rotate the key or revoke it at any time. Each key has a daily spending limit of 2 USDC of credits; the paying wallet can change it with a signed request.
• Lost key. We store only a hash of your credit key, so we cannot show it again. If you lose it, the paying wallet can rotate it: sign a rotate request (POST /api/credits/action) and you receive a new key; the old key stops working and your balance is kept. If the key may have been exposed, revoke it the same way. Rotation, revocation, the daily limit and refunds all need a fresh signature from the paying wallet; we never need its private key.
• Deduction. Each check is deducted once. Send an idempotency key with each request; a retry with the same key is not deducted again. If the balance is too low, the request is refused and nothing is deducted.
• No expiry. Credits do not expire while the service is offered.
• Refunds. You may ask for a refund at any time. The refund is the USDC you paid for top-ups minus the value of the credits you have used (0.001 USDC per credit), and never less than zero. Bonus credits have no cash value: any unused bonus credits are cancelled when a refund is made. The refund is sent only to the wallet that paid for the top-ups, in USDC on Base, after you sign a new request with that wallet (EIP-712) that names the amount. After a refund, the key's remaining balance is closed. We never ask for private keys or recovery phrases.
• If the service ends. If we stop offering the checks, we will refund on the same terms.
• Same rules as paid checks. Results bought with credits are the same reports, with the same limits, and are not financial advice. The sections on acceptable use, sanctions and liability apply in the same way.

Payment and recovery

You control whether to authorize a payment. Before signing, keep the report ID and the report recovery key. The report recovery key is a random code we give you with a paid report. With the report ID it lets you restore that report for 30 days without paying again. It is not a wallet key: it cannot sign transactions or move funds, and we will never ask for your wallet's private key or seed phrase. Keep it private, because anyone who has it with the report ID can view the report. A pending response is not a request to pay again. For a duplicate, interrupted or unresolved settlement, stop and contact support with the report ID and transaction hash.

Sanctions and prohibited activity

We do not provide services to any person or entity listed on the sanctions lists of the United States (OFAC), the United Nations, the European Union or the United Kingdom, or to anyone acting for them. We may decline or end a service where a match is found. Payments from sanctioned sources are refused or returned where the law allows. The services may not be used for fraud, bribery, theft, market manipulation (including wash trading and volume bots), gambling or lotteries that are not licensed by a competent authority, unlicensed financial services, mixers, darknet markets, ransomware, or any other unlawful activity. We do not serve parties whose main business is alcohol or drugs, parties named in an official warning by a financial regulator, or uses that our payment providers prohibit (the Coinbase Prohibited Use Policy and the Circle Acceptable Use Policy), such as adult content and services, pyramid schemes and investment offers that promise high returns.

Support

Support questions sent to admin@kushbitx.com are answered by email.

Responsible use

Do not abuse the service, bypass limits, interfere with availability or submit secrets that an endpoint does not require. KushBitx may reject malformed, unauthorized or excessive requests.

Advisory results only

All results, including reports, verdicts, scores and SpendGuard decisions, are informational and advisory only. They are not financial, investment, legal or tax advice, and not a recommendation to buy, sell, sign, approve or pay. Automated screening is not a contract audit or a guarantee of safety, performance or availability. Onchain data and third-party evidence can be incomplete, delayed or wrong. You remain solely responsible for your decisions and for reviewing each transaction, wallet prompt and report before acting.

No warranty

The website, API, MCP server and all results are provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, accuracy, completeness and non-infringement, to the fullest extent permitted by the laws of the Sultanate of Oman.

Limitation of liability

To the fullest extent permitted by law, KushBitx E-Commerce is not liable for any indirect, incidental, special or consequential loss, including loss of funds, tokens, profits, data or opportunity, arising from the services or from decisions made using them. KushBitx's total liability for any claim relating to the services is limited to the total fees you paid to KushBitx in the three (3) months before the event giving rise to the claim. Nothing in these terms limits liability that cannot be limited under applicable law.

Governing law

These terms are governed by the laws of the Sultanate of Oman. Disputes are subject to the competent courts of the Sultanate of Oman.

Changes and support

Supported networks, prices and these terms may change prospectively; a payment already authorized is not affected. Current terms are published here. Questions about a service, report or payment can be sent to admin@kushbitx.com.