← Back to heyidentity.dev

Terms of Use

Last updated: 23 October 2026

By accessing heyidentity.dev or the hosted service at app.heyidentity.dev, manage.heyidentity.dev and api.heyidentity.dev, or using the software, you agree to these Terms. If you do not agree, do not access or use the site, the hosted service, or the software.

1. About heyidentity.dev

heyidentity.dev provides a proprietary OIDC / OAuth 2.0 identity provider product intended for development and automated testing. It is not designed, hardened, or intended for production use or for protecting real user credentials.

2. Proprietary and commercial use

The software is proprietary and not open source. No rights are granted except as explicitly provided in a separate written commercial agreement or license from heyidentity.dev. You may not copy, modify, distribute, sublicense, reverse engineer, or create derivative works except to the extent expressly permitted by applicable law or by written agreement.

3. No production use

Do not use heyidentity.dev in production systems or to protect real user data. The software may relax security controls for local development convenience. Any production use is at your own risk.

4. The hosted beta service (app.heyidentity.dev, manage.heyidentity.dev, api.heyidentity.dev)

The hosted service at app.heyidentity.dev, manage.heyidentity.dev and api.heyidentity.dev is currently offered as an open beta. In addition to the rest of these Terms, the following apply specifically to the hosted service:

• No uptime or SLA guarantee. The beta is provided without any commitment to availability, uptime, or response time.
• Data may be reset. Tenant and configuration data may be reset, migrated, or deleted during the beta without advance notice, including if the beta ends.
• The service may change or end. Features, per-source rate limits, and the service itself may change or be discontinued at any time during the beta. Usage limits may change too, but a change does not lower an existing tenant’s per-tenant Free tier limits (configurations, clients, users, document size and token issuance) below those published in the pricing section of heyidentity.dev, nor a tenant’s Pro tier limits while its Pro plan is active, nor a tenant’s Enterprise tier limits while the Enterprise grant it got is active. Enterprise values published on heyidentity.dev are starting values for new grants. Per-source rate limits may still change.
• No real or production data. Do not submit real end-user PII, production credentials, or any data you cannot afford to lose into a hosted tenant.
• Acceptable use. You will not attempt to bypass the service's rate limits or usage limits, use the service to attack or test systems you do not own or have permission to test, or use it in a way that degrades the service for other tenants.
• Tenant deletion. If your tenant is deleted - by you on your management page, by us for a Terms violation, or because the beta has ended - its configuration data is permanently removed and is not recoverable.

5. Early-adopter offer

During the beta, the Pro plan is offered free of charge to early adopters:

• Pro is granted free of charge from activation until 31 January 2028 (one year counted from the activation deadline), to a tenant whose owner’s email address is verified, once per tenant, for activations before 31 January 2027. The owner activates it on the tenant’s management page.
• No payment details are collected. The grant does not renew and does not convert into a paid plan automatically.
• When free Pro ends, the tenant returns to Free. Everything created keeps working, but items cannot be added above the Free limits until the tenant is below them.
• If HeyIdentity later grants the tenant another plan, such as Enterprise, at the owner’s request, that grant replaces free Pro, and free Pro does not resume when it ends.
• Session pinning is a Pro feature.
• If the service ends before 31 January 2028, free Pro ends with it. Nothing is refunded because nothing was paid.

6. Tenants created by AI agents

An AI agent or other automated client can create a test tenant through the hosted service's Agent API or its MCP server. In that case:

• The operator accepts these Terms. When an agent creates a tenant, it accepts these Terms on behalf of the person or organisation operating the agent (the “operator”). The operator is bound by these Terms as if they had accepted them directly.
• Fictional test people only. The operator is responsible for making sure the agent uses only fictional test people in tenant users and claims, with email-shaped values on reserved test domains such as example.com, and never real people's names, email addresses or other identifiers - also when modelling a real organisation.
• Agent tokens are the operator's secret. The agent token returned when a tenant is created gives full control of that tenant's configuration through the Agent API. The operator must keep it secret, must not commit it to source control or put it in URLs, and is responsible for anything done with it.
• Unclaimed tenants are deleted after 7 days. A tenant created by an agent is unverified and expires 7 days after creation unless a person claims it by verifying their own email address on its claim page. An unclaimed tenant is then permanently deleted with its configuration and agent tokens. There is no way to recover it, including when its agent token or claim link was lost.
• Claiming. The person who claims a tenant accepts these Terms themselves and becomes its owner. The owner can see and revoke the tenant's agent tokens and issue new ones.

7. Disclaimer of warranties

To the maximum extent permitted by law, the site, the hosted service, and the software are provided "as is" and "as available" without warranties of any kind, express, implied, statutory, or otherwise, including any implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, availability, security, or error-free operation.

8. Limitation of liability

To the maximum extent permitted by law, heyidentity.dev and its owners, officers, employees, contractors, and affiliates are not liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or any loss of data, profits, revenue, goodwill, or business interruption, arising out of or related to your use of the site, the hosted service, or the software.

To the maximum extent permitted by law, the total aggregate liability of heyidentity.dev for all claims arising out of or related to the site, the hosted service, or the software is limited to the amount you paid to heyidentity.dev in the 12 months before the event giving rise to liability. If you paid nothing, the maximum aggregate liability is 0 USD.

9. Indemnification

You agree to defend, indemnify, and hold harmless heyidentity.dev and its owners, officers, employees, contractors, and affiliates from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising from or related to your misuse of the site, the hosted service, or the software, your breach of these Terms, or your violation of applicable law.

10. Acceptable use of heyidentity.dev

When using this website or the hosted service you agree not to:

• Attempt to disrupt, overload, or gain unauthorised access to heyidentity.dev, app.heyidentity.dev, manage.heyidentity.dev, api.heyidentity.dev, or their hosting infrastructure.
• Use automated tools to scrape or mirror this site in a way that burdens the service.
• Misrepresent the origin or authorship of heyidentity.dev.

11. Changes to these terms

We may update these terms from time to time. The “last updated” date at the top of this page reflects the most recent revision. Continued use of the site or hosted service after changes constitutes acceptance of the updated terms.

12. Governing law and venue

These Terms are governed by the laws of the jurisdiction where heyidentity.dev is established, excluding conflict-of-law rules. You agree that courts located in that jurisdiction have exclusive jurisdiction over disputes arising from or related to these Terms, except where applicable law requires otherwise.

13. Contact

Questions about these terms can be raised via support@heyidentity.dev.