Cliff DevLicense agreements

Shuttle API — End User License Agreement (EULA)

Last updated: September 8, 2026

This End User License Agreement ("Agreement") is a legally binding contract between you ("you", "the user") and Cliff RUBIO, sole proprietor (entrepreneur individuel) trading as "Cliff Dev" ("the Developer", "we", "us") governing your use of the Shuttle API application for macOS, iOS, and iPadOS, including all related updates, documentation, and services (together, "the App").

By downloading, installing, or using the App, you agree to be bound by this Agreement. If you do not agree, do not install or use the App.

1. What the App does — and what it does not do

Shuttle API is a developer tool for composing, sending, and inspecting network requests. It sends requests only to the addresses you enter or import, using the protocols you select (including HTTP, GraphQL, WebSocket, Socket.IO, Server-Sent Events, gRPC, MQTT, and the Model Context Protocol), and shows you what comes back. It can run JavaScript that you write before and after a request, run a folder of requests in sequence, and start a local mock server on a port you choose.

THE APP IS A TOOL. IT DOES WHAT YOU TELL IT TO DO.

You expressly acknowledge and agree that:

  • The App does not choose what you send, or to whom. Every request, every header, every credential and every payload originates from you, from a collection you imported, or from a script you wrote.
  • The App executes JavaScript that you supply, in your pre-request and post-response scripts and in any module you require. Code you paste from elsewhere runs with the same access as code you wrote yourself: it can read and write your variables and environments, including secret ones, and can alter the request that is about to be sent. Review what you paste.
  • The App can send credentials. Authentication values you enter — tokens, passwords, API keys, client certificates, signing keys — are transmitted to the host you address, exactly as any client would.
  • Options that weaken transport security exist and are yours to set. Disabling TLS certificate verification, allowing insecure redirects, or trusting a custom certificate authority removes protections that would otherwise apply, and the App will not override your choice.
  • The mock server listens on your local machine on a port you choose, and answers whatever the OpenAPI document you loaded declares. On a shared or untrusted network, other machines may be able to reach it.
  • Responses are shown as received. The App does not validate, sanitize, or vouch for the content a server returns, and displaying a response is not an endorsement of it.
  • The App is not a security scanner, a penetration-testing product, a load-testing product, or a monitoring service, and must not be relied upon as one.
  • No specific behavior, performance, protocol coverage, or compatibility with any particular server, specification version, or third-party service is promised. Known limitations are documented in the App's repository and may change between versions.

You remain solely responsible for what you send, to which systems, and with which credentials.

2. License grant

The Developer grants you a personal, limited, non-exclusive, non-transferable, revocable license to install and use the App on Apple devices that you own or control, in accordance with this Agreement and the Apple Media Services Terms and Conditions (including the Usage Rules).

You may not, except as permitted by applicable law:

  • copy, modify, adapt, translate, or create derivative works of the App;
  • reverse engineer, decompile, or disassemble the App;
  • rent, lease, lend, sell, sublicense, redistribute, or transfer the App;
  • remove or alter any proprietary notices; or
  • use the App in breach of Section 3, Section 4, or Section 11, or otherwise for any unlawful purpose.

3. Authorization — your representation and warranty

The App has no way to know which of the hosts you enter belong to you. That determination is yours alone, and this Agreement rests on it.

You represent and warrant that, for every system, host, endpoint, network, device, or service you address with the App, at the time you address it:

  • you own it; or
  • you operate it, or it is operated on your behalf; or
  • you hold the prior authorization of the person or entity that owns or operates it, sufficient in scope to cover the requests you send, and you are able to produce evidence of that authorization; or
  • it is made publicly available for the purpose for which you are using it, and your use conforms to its published terms.

You further represent and warrant that:

  • you will obtain any authorization required before you send, and will stop sending as soon as that authorization is withdrawn, expires, or would be exceeded in scope;
  • every credential you enter into the App was issued to you, or you are otherwise permitted to use it;
  • you have the right to transmit, receive, and store the data your requests carry; and
  • you are not acting on behalf of, or at the direction of, any person who lacks the authorization described above.

These representations are made afresh each time you send a request. They are a condition of the license granted in Section 2. Addressing a system without the authorization you represent to hold is a material breach of this Agreement and terminates that license immediately under Section 13.

4. Acceptable use

You will not use the App, and will not permit the App to be used, for any of the following. This list illustrates the conduct this Agreement prohibits; it does not limit your general obligation to use the App lawfully and with authorization.

  • Unauthorized access. Reaching, or attempting to reach, any system, account, or data you are not authorized to access — whether or not the attempt succeeds, and whether or not any protection is defeated.
  • Circumventing controls. Defeating, evading, or probing for weaknesses in authentication, authorization, rate limiting, quotas, licensing, paywalls, geographic restrictions, or any other access control on a system you do not own or are not authorized to test.
  • Credential attacks. Brute-forcing, spraying, stuffing, enumerating, or otherwise guessing credentials, tokens, session identifiers, keys, account identifiers, or endpoints; or using any credential that was not issued to you or that you know or suspect to have been obtained unlawfully.
  • Denial of service and volumetric abuse. Using the collection runner, scripts, concurrency, or any other feature to send traffic at a volume, rate, or pattern intended or likely to degrade, disrupt, exhaust, or deny a service to others, or to evade a rate limit. The App is not a load-testing tool.
  • Unlawful data handling. Transmitting, receiving, storing, or exfiltrating data you have no right to, including personal data processed without a lawful basis, stolen credentials or records, and material whose possession or distribution is unlawful.
  • Malicious code. Using the App to deliver, stage, host, or command malware, ransomware, or botnets, or any code intended to damage a system or gain unauthorized control of one; or using the App's script engine or mock server as an intermediary for such activity.
  • Concealment. Falsifying your identity or origin, or using the App's proxy, header, or scripting features to disguise the source of traffic, in order to evade attribution, blocking, or a lawful restriction.
  • Interfering with others. Intercepting, altering, or replaying traffic that is not yours, or running the mock server on a network where it may capture, misdirect, or answer for traffic intended for another party.
  • Breaching third-party terms. Using the App in a manner that breaches the terms of service, acceptable use policy, or machine-readable access directives of any service you address.
  • Anything prohibited by law. Any use prohibited by applicable law, including the law of computer crime, data protection, secrecy of communications, intellectual property, and export control.

Security testing you are authorized to perform is a legitimate use of the App. What this Section prohibits is testing you are not authorized to perform.

The Developer does not monitor your use, cannot see what you send, and has no technical means of preventing any of the above. This Section states what you are permitted to do. Nothing in this Agreement is a representation that the Developer supervises, screens, or enforces your compliance with it, and no such duty is undertaken.

5. Your responsibilities and lawful use

You are solely responsible for:

  • Authorization. Holding, and being able to evidence, the authorization you represent in Section 3 for every system you address. Sending requests to a server you do not own or are not authorized to test may violate that service's terms, and in many jurisdictions constitutes unauthorized access to a computer system, which is a criminal offense. The App applies no such check and cannot.
  • Rate and volume. The collection runner sends requests in sequence, with iterations and an optional delay that you configure. Configuring it to send a large volume of requests at a third party, or using it in any way that degrades a service, is your decision and your responsibility. The App is not a load-testing tool and must not be used as one against systems you do not control.
  • Credentials. Keeping your tokens, keys, certificates and passwords secure, choosing which ones to store in the App, and revoking any that are exposed. Exporting, sharing, or screenshotting a collection, an environment, a wire transcript, or a run report may reveal information you did not intend to share, even where the App strips or masks secrets by default.
  • The data you handle. Any personal data contained in the requests you send or the responses you receive is yours to handle lawfully. Where such data is subject to data-protection law, you are the controller of it; the Developer receives no copy and acts as no processor.
  • Scripts and imported collections. Reviewing any script, collection, or OpenAPI document you import or paste, from whatever source, before running it.
  • Your own backups. Your collections, environments, and history are stored on your devices and, if you enable it, in your own iCloud account. Deleting the App, erasing its data from Settings, signing out of iCloud, or losing access to your Apple ID may result in permanent loss of that data. The Developer keeps no copy and cannot recover, restore, or reproduce it.

6. Your data

The App stores your collections, requests, environments, history, and settings locally on your device, and — if you enable iCloud — in your private iCloud container under your Apple ID. Secret values are stored in the device Keychain rather than in those files. The Developer operates no server, receives no copy of your requests, responses, credentials, or collections, and has no access to them. Storage, sync, and availability of iCloud data are governed by your agreement with Apple. See the Privacy Policy for details.

7. Third-party services

The App communicates with whatever servers you direct it at. Those services are operated by third parties, are governed by their own terms, and are entirely outside the Developer's control. The App also depends on services operated by Apple Inc. (iCloud) and on your network providers. The Developer does not control these services, does not warrant their availability, accuracy, or timeliness, and is not responsible for any failure, delay, suspension, or discontinuation of them, or for changes to Apple's operating systems, to any protocol specification, or to any third-party API that affect the App.

The App reads and writes file formats defined by other projects (including Postman, Insomnia, Bruno, Thunder Client, HAR, and OpenAPI). Those names are the trademarks of their respective owners, are used here only to identify the formats concerned, and imply no affiliation with or endorsement by those projects.

8. No warranty

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE APP IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, AND NON-INFRINGEMENT. THE DEVELOPER DOES NOT WARRANT THAT THE APP WILL BE UNINTERRUPTED OR ERROR-FREE, THAT ANY REQUEST WILL BE SENT, DELIVERED, OR ANSWERED, THAT ANY RESPONSE WILL BE DISPLAYED CORRECTLY OR COMPLETELY, OR THAT THE APP WILL INTEROPERATE WITH ANY PARTICULAR SERVER, SPECIFICATION, OR THIRD-PARTY TOOL.

Some jurisdictions do not allow the exclusion of implied warranties, so some of the above may not apply to you. Nothing in this Agreement excludes or limits your mandatory statutory rights as a consumer, including, in the European Union, the legal guarantee of conformity.

9. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE DEVELOPER SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR RELATING TO YOUR USE OF OR INABILITY TO USE THE APP, WHETHER BASED ON WARRANTY, CONTRACT, TORT, OR ANY OTHER LEGAL THEORY, AND WHETHER OR NOT THE DEVELOPER HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

WITHOUT LIMITING THE FOREGOING, THE DEVELOPER SHALL NOT BE LIABLE FOR:

  • ANY REQUEST SENT BY YOU OR BY A SCRIPT YOU RAN, INCLUDING ITS EFFECT ON ANY SYSTEM IT REACHED;
  • ANY DATA CREATED, MODIFIED, OR DELETED ON A SERVER AS A RESULT OF A REQUEST SENT FROM THE APP;
  • ANY DISCLOSURE, LEAK, OR MISUSE OF A CREDENTIAL YOU ENTERED, EXPORTED, PASTED, OR SHARED;
  • ANY LOSS OF COLLECTIONS, ENVIRONMENTS, OR HISTORY;
  • ANY CONSEQUENCE OF DISABLING TLS VERIFICATION OR TRUSTING A CERTIFICATE;
  • ANY CLAIM BROUGHT AGAINST YOU BY THE OPERATOR OF A SYSTEM YOU ADDRESSED.

THE DEVELOPER'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE APP SHALL NOT EXCEED THE AMOUNT YOU ACTUALLY PAID FOR THE APP IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR TEN EUROS (€10) IF THE APP WAS OBTAINED FREE OF CHARGE.

Nothing in this Agreement excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be excluded or limited under applicable law.

Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so some of the above may not apply to you.

10. Indemnification

You agree to defend, indemnify, and hold harmless the Developer from and against any claim, demand, complaint, investigation, proceeding, loss, liability, fine, penalty, or expense (including reasonable legal fees) arising out of or relating to:

  • your breach of any representation or warranty given in Section 3 or Section 11;
  • your use of the App in breach of Section 4, of any other provision of this Agreement, or of applicable law;
  • any claim, complaint, or notice made by, or on behalf of, the operator or owner of a system you addressed with the App, or by a person whose data your requests carried; and
  • any request sent from your installation of the App, whether sent by you, by a script you ran, or by a person to whom you gave access to your device.

The Developer will notify you of any such claim of which it becomes aware, and may at its option conduct its own defense, in which case you will reimburse its reasonable cost.

Nothing in this Section requires you to indemnify the Developer to any extent prohibited by law, including where mandatory consumer protection rules applicable to you preclude it.

11. Export control and sanctions

The App, and the cryptographic functionality it contains, may be subject to export control and economic sanctions laws, including those of the European Union, France, and the United States.

You represent and warrant that:

  • you are not located in, ordinarily resident in, or organized under the laws of, any country or territory subject to a comprehensive embargo under those laws;
  • you are not listed on, and are not owned or controlled by a person listed on, any restricted-party list maintained by the European Union, the French authorities, the United Nations, the United Kingdom, or the United States (including the Specially Designated Nationals, Entity, and Denied Persons lists);
  • you will not export, re-export, transfer, or otherwise make the App available to any such country, territory, or person; and
  • you will not use the App for any end use prohibited by those laws.

This Section applies in addition to the representations you make for Apple's benefit under Section 14.

12. Updates and availability

The Developer may, but is not obliged to, provide updates, improvements, or new versions of the App. Updates may add, change, or remove features, and may change or drop support for a protocol version, a file format, or an operating-system version. The Developer may discontinue the App at any time. Continued use of an updated version constitutes acceptance of the terms accompanying it.

13. Termination

This Agreement takes effect when you first install or use the App and continues until terminated. It terminates automatically, without notice, if you breach it, including any breach of Section 3, Section 4, or Section 11. You may terminate it at any time by uninstalling the App and deleting all copies. On termination you must stop using the App and delete all copies of it. Sections 3 to 11 and 15 survive termination.

14. Apple-specific terms

This Agreement is between you and the Developer only — not with Apple Inc. ("Apple"). You acknowledge and agree that:

  • Apple is not responsible for the App or its content, and has no obligation to furnish any maintenance or support for the App.
  • In the event of any failure of the App to conform to an applicable warranty, you may notify Apple, and Apple will refund the purchase price (if any) to you. To the maximum extent permitted by law, Apple has no other warranty obligation with respect to the App.
  • Apple is not responsible for addressing any claims by you or a third party relating to the App, including product liability claims, claims that the App fails to conform to legal or regulatory requirements, and claims under consumer protection or similar legislation.
  • In the event of a third-party claim that the App infringes intellectual property rights, the Developer, not Apple, is responsible for the defense of such claim to the extent required by this Agreement.
  • You represent that you are not located in a country subject to a U.S. Government embargo or designated as a "terrorist supporting" country, and that you are not on any U.S. Government list of prohibited or restricted parties.
  • Apple and Apple's subsidiaries are third-party beneficiaries of this Agreement and may enforce it against you.

You must also comply with any applicable third-party terms (for example, your wireless data agreement) when using the App.

15. Governing law and disputes

This Agreement is governed by the laws of France, excluding its conflict-of-law rules. Any dispute arising out of or relating to this Agreement shall be submitted to the competent French courts, without prejudice to any mandatory consumer protection rules that grant you the right to bring proceedings in your country of residence.

16. General

If any provision of this Agreement is held invalid or unenforceable, it will be enforced to the maximum extent permissible and the remaining provisions will remain in full force. The Developer's failure to enforce any right is not a waiver of that right. This Agreement constitutes the entire agreement between you and the Developer regarding the App and supersedes all prior agreements on that subject. The Developer may issue a revised Agreement with new versions or updates of the App; revised terms apply only to the versions they accompany, from the time you install that version or otherwise expressly accept them. If you do not agree with revised terms, do not install the update and stop using the App.

This Agreement is provided in English and in French. If you are a consumer residing in France, the French version prevails; in all other cases, the English version prevails.

17. Contact

Questions about this Agreement: cliffrubio.dev@gmail.com