Terms of service

These terms apply to your use of the Australian public data Model Context Protocol (MCP) service at https://mcp.funnyhaha.ai/mcp and its OAuth sign-in service at https://oauth.funnyhaha.ai, operated by Funny Haha Technologies in Melbourne, Victoria, Australia.

1. Service and pass duration

• Signing in issues an OAuth 2.1 access token (“pass”) with the public:read scope that is valid for 14 days.
• When your pass expires, you can sign in again to obtain a new 14-day pass at no cost.
• Each pass pins the dataset releases that were current at the time of sign-in so queries remain consistent across your session.

2. Acceptable use and rate limits

• The service provides read-only access to public datasets through MCP tool calls (list_datasets, list_tables, describe_table, search_columns, query and multipass.status).
• To keep the service responsive for everyone, requests are subject to per-IP and per-pass rate limits and per-query execution and row limits. Automated scraping, denial-of-service traffic or attempts to bypass rate limits or sandbox controls may result in your pass or IP address being blocked.
• You must comply with the upstream dataset licences and attribution requirements set out in Licensing and attribution, including the Open G-NAF mail-sending restriction for au/gnaf.

3. No warranty and no professional advice

• The service and all datasets are provided free of charge, “as is” and “as available”, without warranty of any kind.
• While Funny Haha Technologies validates and cleans each dataset release against documented schema rules, upstream government publications can contain errors, omissions, reporting lags or suppression rules.
• Outputs from the service are general information only and do not constitute legal, financial, tax or accounting advice.
• Neither the Commonwealth of Australia nor any State or Territory agency endorses Funny Haha Technologies or this service.

4. Privacy and sign-in records

• Browser cookie (__Host-keysmith) When you sign in at https://oauth.funnyhaha.ai, the authorization server sets an HTTP-only, Secure, SameSite=Lax cookie containing a random pseudonymous identifier so returning sign-ins from the same browser keep the same subject identifier.
• Sign-in log When you approve a sign-in, we record the pseudonymous subject identifier, the MCP client’s client_id, the protected resource URI, the timestamp, your IP address, your browser’s User-Agent, and any email address you choose to enter.
• Email address (optional) Entering an email address on the sign-in page is optional. We do not send verification emails during sign-in; if you provide an email address, we use it only to understand who uses the service or to contact you if you ask to hear from us.