Legal · MCP API Terms

MCP API Terms of Service v1.0

For developers, AI hosts (ChatGPT, Claude, Cursor, Perplexity, etc.), and B2B Compliance-as-a-Service customers consuming the TurnkeyDoor MCP API at https://mcp.turnkeydoor.com.

Effective: May 6, 2026 · NJ choice of law · Bergen County forum

Architecture summary

TurnkeyDoor is a stateless pass-through publisher of cited public-record compliance facts. We publish data. AI hosts interpret it. End users (landlords, tenants, sellers, buyers, attorneys) make decisions. We never produce approve/deny housing decisions.

1. Definitions

"MCP API" means the Model Context Protocol server at mcp.turnkeydoor.com and all tools registered there.
"You" means the developer, AI host, or B2B customer consuming the MCP API.
"End User" means the human (landlord, tenant, seller, buyer, attorney) interacting with you, downstream of the MCP API.
"TurnkeyDoor" or "we" means the legal entity operating turnkeydoor.com.

2. Three-actor architecture

You acknowledge and agree that:

TurnkeyDoor is the publisher. We publish cited compliance facts and listing data sourced from primary statutes, regulations, case law, and owner-uploaded inputs.
You (the AI host or developer) are the interpreter. You convert MCP responses into prose, recommendations, or workflow steps for End Users.
The End User is the decider. They make the housing, lease, application, or transaction decision. You and we never make that decision for them.

This is the publisher-not-deployer framing. It is intentional architecture, not a marketing claim. You agree not to represent TurnkeyDoor as a decision-making system or to materially modify our cited responses in a way that obscures their factual nature.

3. Per-state expansion gate

Each U.S. state we support is gated on a per-state Unauthorized Practice of Law posture review documented at references/research/_staging/2026-XX-XX-upl-posture-{state}.md. Tools may return HTTP 403 (OutOfServiceArea) for states we have not cleared, and HTTP 412 (CounselPendingError) for compliance anchors awaiting attorney verification. You agree to surface these states to End Users gracefully — do not synthesize answers when our tool returned a 412.

4. Citation discipline

Every compliance assertion in our MCP carries a registered citation anchor pointing to N.J.S.A., N.J.A.C., case law, or federal statute/regulation. Our CI pipeline blocks deployments with fabricated case names or wrong statute pincites. You agree not to misrepresent our cited responses as your own analysis or to remove the citation when surfacing the response to End Users.

5. OAuth-gated write tools

Tier 3 (submitApplication, scheduleShowing, getAttorneyReviewSlots) and Tier 4 (generateLease, getMortgagePreApproval) tools require OAuth 2.1 + PKCE authentication and per-call End User confirmation in your AI host UI. You agree:

Not to invoke a Tier 3 or Tier 4 tool without an explicit End User confirmation gesture (button click, voice confirmation, or equivalent).
Not to bypass the confirmation gate via automation or batched calls without per-call confirmation.
To pass through any HTTP 412 CounselPendingError to the End User without rewriting it as a synthesized answer.

6. Rate limits + SLA

Anonymous Tier 1+2 calls: 10 requests / minute / IP. OAuth-authenticated Tier 3+4 calls: per-tier rate-limits documented in our developer portal. Compliance-as-a-Service customers receive contracted rate limits per their plan tier. SLA: 99.9% uptime / p95 < 800ms for paid tiers; reasonable-effort for anonymous tier.

7. Data retention

We hash inputs at ingest (SHA-256 + per-row salt). Six-tier retention by data class: anonymous calls 30 days, OAuth-authenticated 1 year, application data 2 years, fair-housing audit data 3 years, lender-related data 5 years, payment-instrument data 7 years. Per GDPR Recital 26, our pseudonymized data is out-of-scope for personal-information classification at the publisher boundary. The Deployer Risk Assessment Pack at /admt-pack documents this in detail.

8. Section 230 posture

We treat Section 230 as defense-in-reserve. Our V-CONDUIT-1 lock requires that we remain a conduit and do not materially contribute to allegedly unlawful content. You agree not to use the MCP API in ways that would push us outside the conduit posture (e.g., requesting custom content generation, tasking us to draft legal documents from scratch, or representing our tool outputs as your own first-party analysis).

9. CCPA ADMT

We are a publisher, not a deployer of automated decision-making technology under CPPA ADMT regulations effective Jan 1, 2027. Where a deployer (you, the AI host, or the End User) is making a housing-related "significant decision," your obligations under CCPA §1798.185(a)(16) and the CPPA ADMT regulations apply to you, not us. The Deployer Risk Assessment Pack at /admt-pack provides facts available necessary for your risk assessment.

10. Prohibited uses

You agree not to:

Use the MCP API for purposes that violate fair housing law, NAR settlement obligations, or any state UPL statute.
Misrepresent the source of MCP responses to End Users.
Bypass per-state expansion gates or counsel-pending 412 responses by synthesizing answers.
Use the API for steering, redlining, or any practice that disparately impacts protected classes.
Use the API in jurisdictions other than the U.S. without express written agreement.

11. Disclaimers

The MCP API is provided "as is." We make no warranty that the API is fit for any particular purpose. Cited compliance facts are accurate to the most current information available at the time of publication and refreshed per our citation-verifier pipeline. We are not your attorney, broker, financial advisor, or fiduciary. Information surfaced via the MCP API is not legal, financial, or transactional advice.

12. Indemnification + liability cap

Each party indemnifies the other for breaches of these Terms. Our aggregate liability is capped at the greater of (i) $500 or (ii) the fees paid by you to TurnkeyDoor in the 12 months preceding the claim.

13. Choice of law + forum

These Terms are governed by the laws of New Jersey. Disputes are subject to mandatory arbitration under the Federal Arbitration Act, with venue in Bergen County, NJ. Class action waiver applies (see Pace v. Hamilton Cove, 258 N.J. 82 (2024)).

14. Changes

We may update these Terms. Material changes will be announced 30 days in advance via the MCP API /.well-known/oauth-protected-resource metadata + email to registered developer contacts.

15. Contact

hello@turnkeydoor.com for general inquiries. partnerships@turnkeydoor.com for B2B and Compliance-as-a-Service. Status page at status.turnkeydoor.com.

v1.0 · Last updated May 6, 2026 · This is not legal advice. By consuming the MCP API, you accept these Terms.