Seller Terms

Effective: 2026-10-21 Applies to: anyone who lists a tool for sale on Attest at https://getattest.com.au.

---

1. What a listing is

A listing makes your HTTPS endpoint callable as a paid tool on Attest. You run and are responsible for your endpoint and its output. Attest is responsible for discovery, API keys, metering, charging credits and refunding failed calls.

2. What you agree to

• Your tool does what its description says, and answers within the published limits (10 seconds, 256 KB, JSON).
• You publish an accurate input schema and keep it current.
• You only process the input Attest sends you to produce the answer, keep it secure, and do not sell it or use it to identify the people behind the calls.
• You follow the Acceptable Use Policy and the law, and you have the rights to everything your tool returns.
• You keep your signing secret private, and tell us at once if it leaks so we can issue a new one.

3. What Attest sends you

Each call is a JSON POST with only the input for your tool in the body. Never the caller's API key, email, payment details or IP address.

Every call also carries three headers, so you can check it came from Attest:

• attest-call-id: the id of this call. It is unique per call and matches the receipt the caller gets, so you can ignore a repeated id.
• attest-timestamp: when Attest sent the call, in Unix seconds.
• attest-signature: v1= followed by the lowercase hex HMAC-SHA256 of timestamp + "." + call id + "." + raw request body, keyed with your signing secret.

Attest issues your signing secret privately when your tool is approved. Use it exactly as issued, as its UTF-8 text: do not base64- or hex-decode it. The secret itself is never sent in a call. To verify a call, compute the same HMAC over the raw body bytes you received, compare it in constant time, and refuse calls whose timestamp is more than 5 minutes from your clock.

4. Review and removal

Attest tests every tool before listing and may re-test it at any time. We may pause or remove a tool that stops passing, misleads users, breaches these terms, or puts users at risk. Where we can, we tell you why first.

5. Revenue

Revenue share and payout terms are agreed with each seller in writing before their tool goes live. Seller payouts open after Attest's launch review. Credits charged for failed or refunded calls earn nothing.

6. Liability

You are responsible for claims that arise from your tool's output or your handling of input. Attest's liability to you is limited as set out in the Terms of Service.

7. Changes

We may update these terms by posting a new version here with a new effective date. Changes do not affect amounts already agreed in writing.

8. Contact

Use the support page at getattest.com.au/support and choose "Sell on Attest".