GrowFlow API & MCP Terms of Service
Self-Serve. Version 2026-10-30.
1. Acceptance and scope
These terms supplement the GrowFlow Terms and Conditions of Use (the "Terms"), which continue to apply in full. They govern API and MCP access only and control over the Terms for that access alone. Warranties, liability, indemnity, arbitration, class action and jury waiver, confidentiality and account security are governed by the Terms and are not restated here. API and MCP access requires an active GrowFlow account.
Third-party and automated access. Section 5 of the Terms restricts authorizing third-party use of GrowFlow and prohibits bots and automated data extraction. That restriction does not apply to API and MCP access under these terms: you may connect third-party applications and AI assistants of your choosing and make automated and programmatic calls. The other restrictions in section 5 continue to apply, including the bar on reselling or commercially exploiting GrowFlow without our written consent.
Scope and term. API and MCP access is a month-to-month add-on. It sits outside any Order Form Initial or Renewal Term and its non-cancellation and auto-renewal provisions, and may be cancelled at any time. Where a signed Order Form covers the products it identifies, that Order Form controls. These terms apply to the API and MCP Connector as they develop; current capabilities are described in our documentation, not here.
You accept these terms when you choose a plan on the Platform Plan page. If your Organization was already using the API or MCP Connector before these terms took effect, continued use after the date stated in our notice to you is acceptance. The person accepting represents that they are authorized to bind the Organization.
2. Definitions
| Term | Meaning |
|---|---|
| API | The GrowFlow application programming interface, including all endpoints we publish and document. |
| MCP Connector | The GrowFlow Model Context Protocol servers that let an AI assistant read your GrowFlow data. |
| Call | A request made to the API or MCP Connector. We determine how calls are counted and may publish counting rules in our documentation. |
| Organization | Your GrowFlow account, including all users and licenses under it. |
| Tier | The Free, Pro, or Enterprise plan your Organization is on. |
| Usage Month | A calendar month. Call allowances are measured per Usage Month and reset at the start of each calendar month, UTC. |
| Billing Period | One month, running from the date paid access began. Billing is separate from the Usage Month. |
3. Access, credentials and security
You generate API keys in GrowFlow, scoped to your Organization. Keep them confidential, do not embed them in client-side code or public repositories, and do not share them outside your Organization. Revoke a compromised key and tell us promptly.
You are responsible for all activity under your keys, including activity by employees, contractors and any third-party tool you connect, and you bear the consequences and costs of a compromise originating on your side. We may rotate or revoke a key, or suspend access, where we reasonably believe there is a security risk.
4. Tiers and call allowances
| Tier | Price per Organization per month | Calls per Usage Month |
|---|---|---|
| Free | $0 | 1 to 10,000 |
| Pro | $99 | 10,001 to 50,000 |
| Enterprise | $249 | 50,001 and above |
Allowances are per Organization, not per user, location or key, and all calls from all keys count toward one allowance. Allowances are measured per Usage Month and reset at the start of each calendar month. Free tier access is provided in consideration of your existing paid GrowFlow subscription.
Reaching your allowance. We may pause calls when you reach your included calls for a Usage Month. You can upgrade immediately by adding a payment method in GrowFlow, or through Customer Success, and access resumes on upgrade. An Organization that does not upgrade regains its allowance at the start of the next Usage Month. We may notify you as you approach your allowance.
Rate limits apply on top of allowances and are published in our documentation. We give reasonable notice of a reduction affecting normal use. Our measurement of usage is the record of record for billing, absent manifest error.
5. Fees and billing
Paid tiers are billed monthly in advance to the payment method on file and renew automatically until cancelled. Fees exclude taxes and are non-refundable except where required by law. We may change prices on 30 days' notice, effective at your next Billing Period.
Upgrades take effect immediately. Moving from Free to a paid tier is charged in full from that date and starts a new Billing Period. Moving between paid tiers is prorated. An upgrade raises your allowance for the current Usage Month; calls already made still count toward it.
Downgrades between paid tiers take effect at the start of your next Billing Period. Moving from a paid tier to Free takes effect at the end of the paid period.
Cancellation. Cancel at any time in GrowFlow. Access continues through the end of the paid period, then reverts to the Free tier.
Failed payment. We retry and notify you in line with our standard dunning process. If payment is not resolved by the end of that process, paid-tier access ends and your Organization reverts to the Free tier.
6. Acceptable use
You may use the API and MCP Connector to access your own Organization's data, build internal tools, and connect third-party services you have chosen. We may investigate suspected breaches of this section and suspend access while we do. You may not:
- Access another Organization's data, or attempt to.
- Resell or sublicense API access as a service. This does not prevent you from engaging an integrator or service provider to access the API on your behalf, within your own entitlements and subject to these terms. You remain responsible for their use.
- Circumvent rate limits or allowances, including by splitting traffic across Organizations or keys.
- Build or train a competing product, or benchmark GrowFlow for a competitor.
- Bulk-extract data to build a dataset for resale.
- Degrade platform performance for other customers.
- Use the API unlawfully or in violation of applicable state cannabis regulations.
7. Intellectual property and your data
We grant you a limited, non-exclusive, non-transferable, revocable licence to use the API and MCP Connector during your subscription, for your own internal business purposes. We retain all right, title and interest in the API, the MCP Connector, our documentation, schemas, specifications and endpoint designs. You may not reverse engineer the API or use our schemas to build a competing interface. You may state factually that your product integrates with GrowFlow; any other use of our marks needs written permission. If you give us feedback, we may use it without restriction.
You own what you build and the data you retrieve. API and MCP access does not change ownership of anything in your GrowFlow account, and data use remains governed by the Terms and our Privacy Policy.
Calls execute within the permissions granted to the key or user making them, and cannot reach data outside those permissions. We log API and MCP activity, including caller, time and operation. We do not use your data to train AI or machine learning models.
8. Third-party AI assistants
The MCP Connector lets you connect GrowFlow to an AI assistant such as Claude or ChatGPT. Those assistants are operated by third parties. Connecting one sends your GrowFlow data to that provider, and what they do with it is governed by your agreement with them, not this one. You choose which assistant to connect and are responsible for that choice.
We are not responsible for the accuracy of an AI assistant's answers. Assistants misread data, miscalculate and state wrong answers confidently. Verify before acting, particularly on compliance, inventory, financial or regulatory decisions. We may add, change or remove supported assistants and MCP capabilities at any time.
9. Write operations, compliance and indemnity
Write operations are available through the API. The operations available differ between GrowFlow Wholesale and GrowFlow Retail, and we may add, change or remove them. The MCP Connector is read only at present; if we enable write operations through it, this section applies on the same basis.
You are responsible for every change made through the API or MCP Connector, including changes initiated by an application you built, a third-party tool you connected, or an AI assistant acting on your instruction. You remain solely responsible for compliance with state cannabis regulations and for the accuracy of your records in any state traceability system. We do not verify that a write is compliant, accurate or appropriate; the API executes what you send. Access operates against your live production data and there is no separate test environment, so you are responsible for validating an integration before putting it into regular use.
The indemnity in section 19 of the Terms applies to API and MCP access and extends to write operations initiated through your keys and to your failure to comply with state cannabis regulations or traceability requirements. It survives termination. To the extent permitted by law, we are not liable for regulatory penalties, licence consequences, product loss or business interruption arising from writes you initiate.
10. Availability, changes and termination
Free tier access is provided as-is with no uptime commitment and no support obligation beyond our standard product support. Beta or preview capabilities are provided as-is, may change without notice, and may be withdrawn. We may perform maintenance that interrupts access, with advance notice where practical.
We may modify, add or remove endpoints and capabilities. For a change that breaks existing integrations we will give at least 90 days' notice and, where practical, maintain the prior version during that window.
We may suspend or terminate API and MCP access if you breach these terms, if your subscription lapses, if payment fails, or if your usage threatens platform stability or security. Where practical we will give notice and an opportunity to cure; for security or stability threats we may act immediately. You may stop at any time by revoking your keys and cancelling any paid tier.
On termination, keys stop working. Your GrowFlow data is unaffected and remains governed by the Terms. We may update these terms and will give 30 days' notice of material changes.
11. General
Intellectual property, your data, write operations and compliance, and the indemnity survive termination. We may give notice by email to your account contact or by posting in the GrowFlow application; you give notice to GrowFlow at 7800 East Dorado Place, Suite 180, Greenwood Village, CO 80111. These terms, the Terms, and any applicable Order Form are the entire agreement on API and MCP access.