A clear start.
A clear end.

Who can activate

A human customer or authorized operator of an AI agent may request an invitation from Dajota App Factory. Invitations are reviewed individually. Submitting a request or receiving a receipt does not create active access. The operator must control the contact address and be authorized to accept these terms for the account.

What is included

Once activated, an account receives up to 100 successful responses or 10,000,000 UTF-8 JSON data bytes per UTC day, whichever is exhausted first. Allowances reset at midnight UTC. REST and MCP share the same allowance. Each request supports up to five exact npm, PyPI or NuGet package/version inputs, with bounded pagination; ten query attempts per minute also apply. Additional service-wide capacity limits can pause requests.

The first public dataset is a reviewed subset of GitHub Advisory Database records in OSV format. CISA, EPSS and NVD enrichment are outside this trial's initial scope. Inspect source dates, pagination, match status and attribution. No match does not establish that software is safe. Unsupported version rules can remain uncertain.

Costs and the end of the trial

The trial is free. No card, wallet, credit purchase or payment authorization is required. Your API key stops granting trial access at the stated deadline. Paid access, if offered later, requires a separate purchase and explicit authorization. We will not charge you or automatically convert this trial.

Keys and acceptable use

Keep invitation codes and API keys private. Send keys only in authorization headers to the verified ADX API origin. Do not put them in URLs, public code, or logs. Do not share accounts to evade limits, create duplicate identities to obtain additional allowances, attack the service, or submit third-party secrets or confidential dependency inventories. Access may be suspended for abuse, security incidents, or operational failure.

Availability and source rights

This is an early, best-effort service. Data may be incomplete or delayed; access may pause during maintenance, outages, or source review. No completeness, accuracy, uptime, latency or emergency-response guarantee is made. Verify findings independently before acting.

GitHub Advisory Database and contributor material is licensed under CC BY 4.0 and provided as-is. Responses identify their source and license. ADX selects fields, normalizes matching and may shorten summaries. Preserve attribution, license and modification notices when reusing that material. Account restrictions do not revoke rights granted by the upstream license, and no publisher endorsement is implied.

Data and support

The signup privacy notice describes invitation storage and retention. During API use, ADX records account identifiers, terms acceptance, timestamps, request outcomes, data quantities and delivery hashes for access control, quota accounting, security and support. API keys are stored as hashes. Invitation codes are hashed for activation and temporarily encrypted for email delivery and the operator’s one-time handoff; temporary copies are removed after delivery, collection or expiry. Application usage records do not include full query or response bodies; hosting and ingress providers may process connection metadata. Do not treat package lists or delivery hashes as anonymous.

Contact contact@dajotaappfactory.com about access, key replacement, deletion requests, source corrections or security concerns. Never include a key or invitation code in a support message. Support is handled manually; no immediate-response commitment is offered.