Use the service without harming others.

Use credentials responsibly

Do not publish credentials, share them between unrelated organisations, evade expiry or revocation, or place a credential in browser JavaScript or a public repository.

Do not misuse the service

Do not interfere with availability, bypass rate or account limits, send abusive automated traffic, access another account, enumerate users, introduce malicious content, scrape or reconstruct the proprietary catalogue, or use output to support unlawful, deceptive or harmful activity.

Do not represent CodeCrafted output as an accessibility, security, legal or regulatory certification. Do not submit secrets, special-category personal information, criminal-offence data or personal information that is unnecessary for the design task.

External sources

Only submit Storybook or registry URLs you are authorised to access. Sources must be public HTTPS resources and must not be used to make the service contact private networks, local devices or credential-bearing URLs.

Fair-use controls

The normal MCP limit is 120 requests per minute per authenticated account. We may also control unusually large, repetitive or resource-intensive traffic. Limits may be reduced temporarily during abuse or service incidents and increased for an agreed load test.

Security research

Do not test production security controls, other accounts or availability without prior written authorisation. Report a suspected vulnerability to security@codecrafted.co.uk with its impact and reproducible steps. Do not publish sensitive details before a reasonable remediation period.

Enforcement and appeal

We may rate-limit, block a credential, preserve relevant security records, suspend an account or terminate access. Where the risk is not urgent, we will normally identify the concern and allow a reasonable opportunity to correct it. Urgent action may be taken first to protect users or the service. Appeal an action by emailing support@codecrafted.co.uk.