Terms of Service

1. What Rialto does, and what it does not

Rialto lists APIs (ours and those published by independent sellers), helps your agent choose one, and routes each paid call to it. Payments use the x402 protocol: every purchase is a USDC transfer on the Solana blockchain from the buyer's wallet straight to the seller, plus a separate transfer of Rialto's commission.

• Rialto does not hold your money. We are not a bank, a payment institution or a custodian, and we never keep a balance on your behalf.
• Rialto is a technical intermediary. Unless an API is marked as one of Rialto's own integrations, it is provided by an independent seller, who is responsible for it.
• Nothing on Rialto is financial, investment, legal or tax advice.

2. Your account

• You must be at least 18 years old and able to enter into a contract.
• Give a real email address and keep your password secret. You are responsible for everything done with your account, your agents' keys and your wallets.
• Tell us right away if you think your account or a key has been compromised. You can revoke agent keys and sign out every device from the dashboard.
• We may suspend or close an account that breaks these terms, puts other people or the service at risk, or is required to be closed by law.

3. Agents and spending limits

An agent is an AI system (Claude Code, Codex or any MCP client) that you connect with a key from your dashboard. Your agent acts on your behalf: you are responsible for the purchases it makes, including those it makes because of instructions it read somewhere, within the limits you set.

• You set each agent's limits (per call and per session). Only you, signed in, can change them.
• Keep agent keys private. Anyone with a key can spend within that agent's limits.

4. Paying from your wallet

You can let your agents pay from a Solana wallet you control (for example Phantom or Solflare). To do so you sign, in your own wallet, an approval that allows Rialto's spender address to transfer up to an amount you choose from your USDC account. Then:

• Each purchase is sent from your USDC account directly to the seller and to Rialto's commission address, signed by our spender within your approval. The Solana token program itself prevents any transfer above what is left of it.
• You can lower or revoke the approval at any time, from the dashboard or from your wallet. Purchases already made are not undone.
• Choose a limit you are comfortable with. We recommend small limits, raised when you need them.
• You can also pay with your own signer, keeping your wallet key on your machine.

5. Prices, commission and payments

• Each API shows its price per call before you buy. The buyer pays the seller's price plus Rialto's commission (currently 5% of the seller's price, with a minimum of $0.001 per call). Rialto's own integrations are priced at what the underlying provider charges us plus a margin.
• We may change the commission and our own prices at any time. A change applies to calls made after it, never to calls already paid.
• On-chain payments are final. A Solana transaction cannot be reversed by us or by anyone else. Check addresses and limits before you sign.
• A call that fails before its result is delivered is not charged: the payment is only settled after the API answered successfully.
• Solana network fees for purchases are paid by the payment facilitator; the fee for your wallet approval is paid by Rialto.
• You are responsible for any taxes that apply to what you buy or sell.

6. Selling an API

• You may publish only APIs you have the right to offer, and you are responsible for what they do, what they return, and their compliance with the law and with any third party's terms.
• You set your price. Each successful call pays it to the payout address you registered, in USDC on Solana. Rialto cannot recover a payment sent to a wrong address, so check yours carefully.
• We call your endpoint with the request the buyer's agent sent. Credentials you give us for your API are stored encrypted and used only to call it.
• We may pause or remove an API that fails often, misleads buyers, or breaks these terms.

7. Rialto's own integrations and generated content

Some APIs are run by Rialto on top of third-party AI providers (such as fal.ai, ElevenLabs and Tripo). Results are generated automatically and may be inaccurate, unexpected or similar to existing works.

• You are responsible for how you use what you buy, and for making sure your use is lawful and respects other people's rights.
• Your requests are sent to the provider that runs the model, under that provider's own usage policies, which also apply to you.
• To the extent we have any rights in a result you paid for, we pass them to you.

8. What you may not do

• Use Rialto for anything illegal, including fraud, money laundering, sanctions evasion or financing of terrorism.
• Generate or publish content that sexualises minors, harasses or threatens people, impersonates someone, or infringes intellectual property or privacy.
• Attack, overload, probe or reverse-engineer the service, get around limits or payments, or access other people's accounts, keys or data.
• Publish APIs that are malware, phishing, or that collect data from buyers without their knowledge.

9. Blockchain and crypto risks

Using a blockchain carries risks outside our control: network outages or congestion, bugs in wallets or protocols, loss of your keys, phishing, and changes in the value or regulation of USDC. You are responsible for securing your wallet. Rialto will never ask for your seed phrase or private key.

10. Availability and changes

Rialto is offered "as is" and "as available". We work to keep it running, but we do not promise it will be uninterrupted or error-free, and we may change, add or remove features and APIs, or limit how much can be bought in a period.

11. Liability

• To the extent the law allows, Rialto is not liable for indirect or consequential losses, lost profits or data, for the acts of sellers, providers, facilitators or blockchain networks, or for purchases made by your agents within the limits and approvals you set.
• To the extent the law allows, our total liability to you is limited to the commissions Rialto received from your purchases in the three months before the claim.
• Nothing in these terms limits rights that consumer law gives you and that cannot be waived.
• You agree to compensate Rialto for claims caused by your breach of these terms or by the APIs you publish.

12. Ending the agreement

You can stop using Rialto at any time and ask us to delete your account (see the Privacy Policy). Revoke your wallet approval when you leave. Sections that by their nature should survive (payments made, liability, disputes) continue after the account is closed.

13. Changes to these terms

We may update these terms. The date at the top shows the current version; for important changes we will warn you on the site before they take effect. If you keep using Rialto after that, you accept the new version.

14. Law and disputes

These terms are governed by the laws of Brazil. Before going to court, write to us at @GalleriaRialto on X and we will try to solve the problem with you. Consumers keep the right to bring a claim in the courts of their own place of residence.