1. Who these terms are with
“Bandito”, “we” and “us” mean Bandito, operated by its founder. There is no company or registered address behind these terms yet; you can reach us at hello@bandito.dev. “You” means the person using Bandito. By downloading, installing or using the Bandito Mac app, the Bandito daemon or bandito.dev, you agree to these terms. If you do not agree, do not use them.
2. The software and its license
The Bandito daemon and apps are source-available under the Functional Source License, version 1.1 (FSL-1.1). Each release becomes available under the Apache License 2.0 two years after it is published. The license text in the repository (github.com/banditohq/bandito) is the one that applies to the code; where these terms and that license differ about the code, the license wins.
The Bandito name, logo and brand files are not covered by the code license. You may say that you use Bandito; please do not suggest that we endorse a product we have not reviewed.
3. Free, and provided “as is”
Bandito is free to download and use today. Pricing is not final; we will announce it before anything becomes paid, and what you already have keeps working under the license above.
Bandito is provided “as is” and “as available”, without warranties of any kind, express or implied, including fitness for a particular purpose, reliability, or that it is free of errors. It is early software. To the extent the law allows, we are not liable for any loss or damage that comes from using it, including lost data, lost income, downtime, costs of model usage, or damage caused by an agent’s actions. Nothing here limits liability that cannot be limited by law.
4. Your servers, keys and agents
You are responsible for the servers you connect, the keys, passwords and accounts you put on them, the subscriptions you sign in with, and everything your agents do. Agents work with the rights of the user they run as, and they can change or delete data and spend money through the tools you give them.
Approvals, rules and protected actions are a safety net, not a guarantee and not a sandbox. They read command lines and cannot see inside a program an agent writes and runs. Keep backups, keep agents’ rights small, and run work you do not trust in a container or on a separate server.
5. Model providers and other services
Bandito runs official command-line tools such as Claude Code, Codex and Grok, which you sign in to yourself. We do not provide models, resell access to them, or hold your subscriptions. You must follow the terms and usage policies of each provider (for example Anthropic, OpenAI and xAI) and of every service you connect through the Marketplace. How a plan may be used is decided by its provider, not by us.
Services, bots and skills in the Marketplace, and anything shared by other people, are third-party content. Read what you install: it can run with your agents’ abilities. We scan shares for secrets and hide reported ones, but we do not guarantee them.
6. Acceptable use
Do not use Bandito to break the law, to attack or harass others, to access systems you do not have permission to use, to get around the limits of a provider’s terms, or to publish content that is harmful or that you have no right to share. We may hide a share or end an account that does.
7. Accounts, data and telemetry
An account is optional. It only syncs your server list, shortcuts and prompts between devices, and you can sign out or delete your data in the app or by writing to privacy@bandito.dev. The app sends anonymous usage statistics that you can turn off; the website counts visits without cookies. Details are on the privacy page, which is part of these terms.
8. Changes and ending
We may change these terms and the product, including stopping parts of the website, accounts or sync; we will update the date above and, where practical, say so in the release notes. If you keep using Bandito after a change, you accept it. You can stop using Bandito at any time by deleting the app and the daemon.
If a part of these terms cannot be enforced, the rest still applies.
9. Contact
Questions and requests: hello@bandito.dev. Privacy: privacy@bandito.dev. Security problems: security@bandito.dev. Bugs and ideas: github.com/banditohq/bandito/issues.
プライバシー: bandito.dev/privacy
Last updated: October 12, 2026.