Back MCP Services Schedule
Last Modified: October 14, 2026
This MCP services schedule (this “Schedule”) describes the additional terms and conditions applicable to Customers who use the MCP Service and is incorporated into and forms part of the Tipalti Services Agreement, or the Tipalti Software Services Agreement (“TSSA”) as applicable, for such Customers, which together with any other applicable agreements located at www.tipalti.com/legal forms the Agreement. If in conflict with any other part of the Agreement, this Schedule will prevail as it relates to the MCP Service except that the Data Processing Addendum will prevail with respect to the Processing of Personal Data. Capitalized terms not defined herein have the meaning ascribed to them in the Tipalti Services Agreement or the TSSA, as applicable.
- Scope of Service.
1.1 MCP Service. The MCP Service enables Customer to query and retrieve Customer Data within the Services through Customer’s chosen AI Platform using the Model Context Protocol. The MCP Service is read-only. It does not enable Customer or the AI Platform to initiate, approve, modify or cancel any payment, or to create, modify or delete data in the Services. Tipalti provides the MCP Server, which makes defined tool endpoints and data access capabilities available. Customer is solely responsible for selecting, configuring, and connecting its AI Platform to the MCP Server. Tipalti may apply rate limits to the MCP Service. Each request through the MCP Service is subject to the user, entity and data-access permissions configured for that user in the Services.
1.2 Customer’s AI Platform. Customer instructs Tipalti to transmit Customer Data to the AI Platform in response to each query submitted via the MCP Service, and Tipalti has no responsibility for Customer Data after it is transmitted. Customer acknowledges that (1) the AI Platform is a Non-Tipalti Product or Service as described in Section 2.3 of the Tipalti Services Agreement; (2) Tipalti does not control, operate, or have any responsibility for the AI Platform or its provider, including any outputs generated by the AI Platform or unintended disclosure of Customer Data through the AI Platform; and (3) any data transmitted to the AI Platform through the MCP Service is governed by Customer’s agreement with the AI Platform provider.
1.3 Availability and Changes. The MCP Service depends on Customer’s AI Platform and its implementation of the Model Context Protocol. Tipalti does not guarantee compatibility with all AI Platforms. Tipalti may modify, add or remove tools, endpoints or other functionality at any time. Tipalti may discontinue the MCP Service on at least thirty days’ prior written notice provided that Tipalti may discontinue the MCP Service on shorter notice where reasonably necessary to address a security risk or comply with Applicable Law.
1.4 Masking. Tipalti may mask or withhold sensitive financial information and other data from responses returned by the MCP Server, and may change what is masked at any time. Masking does not expand a user’s access permissions under the Services. - Tool-Call Data.
2.1 Classification. Tool-Call Content may include Customer Data, other MCP Response Data and Personal Data. The treatment of that data under the Tipalti Services Agreement or TSSA and the Data Processing Addendum depends on the data concerned; this Schedule does not change the ownership or classification of any such data. Tool-Call Metadata is Usage Data to the extent it consists of technical information automatically collected about use of the MCP Service.
2.2 Collection of Tool-Call Data. Without limiting Section 7.5 of the Tipalti Services Agreement, Tipalti will collect and store Tool-Call Data at the MCP Server layer to provide and secure the MCP Service, monitor its accuracy and reliability, diagnose and resolve errors, improve the MCP Service in accordance with the Agreement, and comply with Applicable Law. Tipalti will handle Personal Data in Tool-Call Data in accordance with the Data Processing Addendum. - Customer Responsibilities.
3.1 AI Platform Compliance. Customer shall ensure that its use of the MCP Service, including the transmission of Customer Data to its AI Platform, complies with Applicable Law, including applicable data protection laws, and its obligations to third parties.
3.2 Acceptable Use. In addition to Section 2.2 of the Tipalti Services Agreement, Customer shall not: (1) access or disclose through the MCP Service any data that Customer or the applicable user is not authorized to access; (2) exceed or circumvent any rate limits, security measures or access controls within the Services; (3) use the MCP Service to extract Customer Data other than for Customer’s internal business purposes; (4) use the MCP Service or data obtained through it to develop a competing product or service; or (5) engage in any activity that violates Applicable Law or the Agreement, including the Compliance and Acceptable Use Policy.
3.3 Credentials and Access. Customer is solely responsible for securing the authentication credentials, tokens and permissions used to connect its AI Platform to the MCP Server. All activity through the MCP Service using Customer’s credentials is Customer’s responsibility as provided in Section 3.1 of the Tipalti Services Agreement. Customer shall promptly notify Tipalti of any actual or suspected unauthorized access to or use of the MCP Service. - Miscellaneous.
4.1 This Schedule applies to Customer for as long as Customer has access to the MCP Service. Termination of the Tipalti Services Agreement or the TSSA will also terminate this Schedule.
4.2 Tipalti may immediately suspend Customer’s access to the MCP Service if Tipalti reasonably believes that credentials or tokens have been compromised, that there has been unauthorized access or misuse, or that continued access creates a material legal compliance or security risk. Tipalti will give Customer notice where reasonably practicable and restore access once Tipalti reasonably determines that the reason for suspension has been resolved.
4.3 Tipalti may revise this Schedule at any time in accordance with the amendment provisions of the Agreement.
4.4 For Customers under the TSSA, references to Sections 2.2, 2.3, 3.1 and 7.5 of the Tipalti Services Agreement in this Schedule mean Sections 1.3, 1.4, 2.1 and 4.5 of the TSSA, respectively. - Definitions.
“AI Platform” means the third-party artificial intelligence application, model, or platform selected and operated by Customer to interact with the MCP Server.
“MCP Response Data” means information returned by the MCP Server in response to Customer’s queries, including Customer Data and other information made available to Customer through the Services which may include Tipalti Content and Tipalti’s Confidential Information.
“MCP Server” means the Tipalti-hosted server component that exposes Tipalti tool definitions and data access endpoints using the Model Context Protocol.
“MCP Service” means the read-only connectivity service provided by Tipalti that enables Customer to query and retrieve Customer Data through an AI Platform using the Model Context Protocol, as described in Section 1.
“Model Context Protocol” or “MCP” means the open protocol used to connect AI Platforms to external data sources and tools.
“Tool-Call Content” means the inputs submitted to the MCP Server and MCP Response Data, in connection with Customer’s use of the MCP Service, including queries, parameters, and response data.
“Tool-Call Data” means Tool-Call Content and Tool-Call Metadata.
“Tool-Call Metadata” means technical information automatically collected about calls to the MCP Server, including timestamps, tool names, error codes and latency. It does not include the queries, parameters or response data that form part of Tool-Call Content.