1. Agreement. These terms cover your use of the websites, software, and APIs provided by Detent Point LLC (“we”, “us”). By using them you agree to these terms.
2. The service. We provide PowerShell and SQL Server tools, hosted APIs, and related documentation. Individual products may have their own pricing and limits, shown on their product pages.
3. License. Our software products are licensed, not sold. When you purchase a plan or a license, Detent Point LLC grants you a non-exclusive, non-transferable license to install and use the software for your organization’s internal operations, within the scope you purchased: the seats, servers, usage allowances, or term stated in your plan, order, or license file. You may not resell, sublicense, or redistribute the software, remove or defeat license enforcement, or offer the software’s functionality to third parties as a service, unless your agreement with us says otherwise. Licenses that verify offline remain subject to these terms. Some products are hosted APIs rather than software you install; for those, the license is the right to call the API within your plan’s allowance, and there is nothing to install.
Some of our products, or a free edition of them, can be downloaded and used without any purchase, from public feeds such as the PowerShell Gallery and NuGet or from our own site. Free use is governed by these terms, including the acceptable-use, disclaimer, and limitation-of-liability sections. No license file is issued and no payment is taken; where a free edition has usage limits, the software itself applies them. We may change what future versions include, and software you have already installed is unaffected. Where a product ships under a published open-source license, that license governs your rights to copy and redistribute its code.
Some products offer a trial or evaluation. A trial offered by the store that sells the product is operated and enforced by that store under its own terms, not by us. An evaluation built into the product is enforced by the software, and its length and what happens when it ends are described on the product page. Evaluation use is subject to these terms.
4. Purchases through Microsoft Marketplace. Our products may be purchased directly from us or through Microsoft Marketplace. If you purchase through Microsoft Marketplace, Microsoft is the merchant of record: your purchase, billing, renewal, cancellation, and any refund are governed by your agreement with Microsoft, and Microsoft’s terms control those matters. These Terms continue to govern your use of the software itself. Where these Terms conflict with your agreement with Microsoft on a matter of purchase, billing, or refund, your agreement with Microsoft controls. On all other matters, including acceptable use and the disclaimers and limitations below, these Terms control.
5. Purchases through AWS Marketplace. If you purchase through AWS Marketplace, AWS is the merchant of record: your purchase, billing, renewal, cancellation, and any refund are governed by your agreement with AWS, and AWS’s terms control those matters. Manage or cancel the subscription from your AWS Marketplace subscriptions page. These Terms continue to govern your use of the software itself. Where these Terms conflict with your agreement with AWS on a matter of purchase, billing, or refund, your agreement with AWS controls. On all other matters, including acceptable use and the disclaimers and limitations below, these Terms control. We issue your license when AWS tells us the subscription is active, and we deliver it to you: for most products we email it to the address you gave at registration, and for others we make it available on your activation page, where you can return to collect it while signed in. If you cannot find it, write to hello@detentpoint.com and we will reissue it.
6. Purchases through the Microsoft Store. Some of our products are also sold through the Microsoft Store. A Store purchase is governed by the Microsoft Store terms of sale, which are not the same as the Microsoft Marketplace terms in section 4. Refunds and cancellations for a Store purchase go through Microsoft. These Terms continue to govern your use of the software itself. Where these Terms conflict with the Microsoft Store terms on a matter of purchase, billing, or refund, the Store terms control. On all other matters these Terms control.
7. Purchases directly from us. Licenses bought directly from Detent Point LLC are sold by us. There is no third party in between, so the terms here are ours. After payment clears we deliver what you bought, as the product’s purchase flow describes: a license file emailed to the address on the order, an API key for a hosted product, or a license available on your activation page. Licenses are for the seat, server, or usage count on your order. To change that count, write to us and we will reissue.
Sometimes we give a license away. We issue no-charge licenses and marketplace promotional codes for evaluation, review, accessibility testing, and customer-service reasons. A no-charge license is the same software under the same terms as a purchased one, except that the refund and billing sections do not apply to it, and we may decline or discontinue no-charge issuance at any time.
Agent payments. Some of our hosted APIs accept per-call payment from software agents using the x402 protocol, settled on a public blockchain. A payment of this kind buys a single call. It creates no account and no subscription, we do not learn who you are, and we cannot contact you. Because it is an on-chain transfer with no customer record behind it, the refund section below does not apply to it; tell us the transaction and we will look at it, but we cannot promise a reversal.
8. Refunds on direct purchases. If you bought directly from us and it is not right for you, write to hello@detentpoint.com within 30 days of purchase and we will refund it in full. You do not have to give a reason. Renewals are not refunded; cancel before the renewal date and the license runs to the end of the term you already paid for. For volume orders, the refund terms on your order document take precedence over this section. Purchases made through a marketplace are refunded under that marketplace’s terms, not this section, and per-call agent payments are consumed as they are spent and are not refundable (section 7).
9. Accounts and API keys. Some products issue an API key. Keep your key confidential. You are responsible for activity under your key. Tell us promptly if you believe it has been compromised.
10. Acceptable use. Don’t abuse the service: no attempts to break, overload, or reverse-engineer the hosted APIs; no reselling access beyond your plan; and no unlawful use. We may suspend access that threatens the service or other users.
11. Billing. Paid plans bought directly from us are billed through Stripe where checkout is offered, or by invoice against your order where it is not. Purchases made through a marketplace are billed by that marketplace on the cycle established at purchase. Per-call agent payments (section 7) settle at the time of the call. Usage-metered plans are billed against the limits on the product page. Promotional pricing applies only for the stated period; standard pricing applies afterward.
12. Cancellation. You may cancel at any time. If you purchased through a marketplace, cancel through that marketplace; if you purchased directly, contact us. You will not be billed for periods after your cancellation takes effect. What happens to the software next depends on the kind of product, and the product page says which kind you have. Products you install verify their licenses offline and do not contact our servers, so cancellation does not disable them immediately: some licenses remain valid until they expire on their own, typically about a month after cancellation plus a short grace period, while others, stated plainly on their product page, keep working indefinitely on the version range they cover, so you keep the release you are on and only lose access to later versions. Hosted APIs are the opposite: access is checked on our servers each time you call them, so when a subscription is cancelled the key stops working at the next call. Offline verification is deliberate; it lets the installed products run on isolated networks without internet access.
13. What SqlCertForge does. SqlCertForge provisions TLS certificates and configures SQL Server and SQL Server Reporting Services to use them. It runs inside your own environment. Your certificates, servers, and configuration are not transmitted anywhere. An issuing certificate authority is optional; without one, the request stage produces a signing request and stops.
The two paths differ, and the difference matters operationally.
For the database engine, it requests or imports the certificate, grants the SQL Server service account read access to the private key, and writes the certificate thumbprint to the instance’s registry configuration. The change takes effect when SQL Server next restarts, and restarting it is your decision and your action. Verification reads the configured thumbprint from the registry; it reports what will be served after a restart, not what is being served now. Force Encryption, which makes the instance reject unencrypted client connections, is available and is off unless you turn it on.
For Reporting Services and Power BI Report Server, it installs the certificate, creates the URL reservation, restarts the Reporting Services service, and then performs a real HTTPS request against the endpoint and compares the served certificate to the one it intended. The restart can be skipped if you would rather choose the moment.
On the multi-node path it binds the certificate on each replica of an Always On availability group individually. That path has been verified across a manual failover on a two-node synchronous-commit group.
Failover Cluster Instances are a separate case. The implementation handles the virtual network name and the per-node distinction, and that path has not yet been verified end to end in a multi-node cluster lab. Treat it as capable rather than proven, and test it on a cluster you can afford to disrupt before you rely on it.
It can also install a scheduled renewal job that later repeats this work unattended on the schedule you set.
14. Plan allowances. SqlCertForge plans are measured in servers in active use. Starter covers 2 servers in active use and includes certificate binding for the SQL Server database engine and for Reporting Services. Professional covers 25 servers in active use and adds the full Reporting Services HTTPS install: it reserves the URL, binds the certificate, restarts Reporting Services, and verifies the endpoint actually serves the certificate. Enterprise has the same commands as Professional, with the server cap removed. Running against a server you already manage never uses a second place, and a server you stop using drops off the count on its own. There is nothing to request and no support ticket. The read-only audit commands are free and need no license.
15. What we do not promise about SqlCertForge. SqlCertForge changes certificate configuration on production database and reporting servers. The specific things that can go wrong are worth stating plainly.
A database engine change does not take effect until you restart SQL Server. Until you do, the instance keeps serving what it served before, whatever the tool reported.
Granting the service account access to a private key is a permission change. If the service account is wrong, SQL Server may fail to start on its next restart.
On Reporting Services, a certificate binding belongs to an address and port, not to an application. Replacing a binding replaces it for everything sharing that address and port, which on a default installation includes both the web service and the web portal. Removing a URL reservation can take an endpoint offline.
Across multiple nodes or replicas, a run that succeeds on some and fails on others leaves them serving different certificates, which may not surface until a failover.
We do not promise that a binding will succeed, that a service will come back after a restart, or that an application will reconnect on its own. Nothing here undoes a change that went badly. Run it where an interruption is acceptable and know how you would put the server back.
The read-only audit commands do not change configuration. One of them makes a live HTTPS request to an endpoint you name, so it produces network traffic; it changes nothing.
16. Honest documentation, no warranty. We work hard to document our tools against the real code and to label gaps rather than invent answers. Even so, the software and APIs are provided “as is,” without warranties of any kind. You are responsible for testing before using them against production systems.
17. Limitation of liability. To the extent permitted by law, Detent Point LLC is not liable for indirect or consequential damages, and our total liability is limited to the greater of the amount you paid for the product in the prior twelve months, whether paid to us or to a marketplace acting as merchant of record, or one hundred United States dollars.
18. Changes. We may update these terms; we’ll update the date above and notify paid customers of material changes by email. Changes take effect for you at the start of your next billing term, not during a term you have already paid for.
19. Governing law. These terms are governed by the laws of the State of Washington, USA.
20. Contact. Questions about these terms: hello@detentpoint.com.