Acceptable Use Policy

Purpose

This policy keeps the Crius API fast and fair for everyone and is part of the Terms of Service. If you aren't sure whether something is allowed, ask at support@crius.sh first.

Not allowed

Breaking the law, or helping others to, including sanctions, fraud, market manipulation and money laundering.
Attacking the service: denial of service, flooding, scanning for vulnerabilities without permission, or trying to reach other accounts, our infrastructure or data that isn't yours.
Getting around limits: rotating many free accounts or keys, spreading one workload across accounts, or hiding your traffic's origin to avoid rate limits or quotas.
Reselling or redistributing raw API access or bulk data as your own feed or API without a written agreement with us.
Using the data to harass, dox or target people.
Misrepresenting your relationship with Crius, or using our name or logo to suggest an endorsement we haven't given.

Fair use of the API

Stay within your plan's rate limits and credits, and back off when you get a 429 (respect the retry-after header).
Prefer WebSocket streams to tight polling loops, and batch endpoints to many single calls.
Cache responses that don't need to be live, and identify your app with a descriptive User-Agent where you can.

Keys and accounts

Keys are for you or your organisation. Don't publish them, sell them or share them outside your team.
Use origin or IP restrictions for keys used in browsers or shared environments, and rotate keys you suspect are exposed.
One free account per person or organisation.

Using the data

You can use the data in your own apps, dashboards, research and bots, and show it to your users. Attribution ("Data: Crius") is appreciated where it fits. Building a competing data API or bulk dataset from our responses needs our written agreement; see platform integrations.

Security research

If you find a vulnerability, please report it privately to support@crius.sh with the details, and give us reasonable time to fix it before disclosing it. Don't access data that isn't yours, degrade the service or run automated scans against it. We won't act against good-faith research that follows these rules.

Enforcement

Depending on what happened, we may throttle traffic, revoke keys, suspend or close accounts, and keep records needed to deal with abuse. Where we can, we'll contact you first and give you a chance to fix the problem.

Reporting abuse

Report abuse or misuse of the service to support@crius.sh.