This analysis describes what Mistral AI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The prohibition covers multiple forms of credential sharing and commercialisation, any of which can constitute a breach of the terms.
The updated terms state that Mistral AI Studio and APIs are now limited to business customers only. Previously, consumers outside the EEA could use APIs for personal needs and access Mistral AI Studio. Under the revised agreement, personal account holders retain access to Vibe and other products, but can no longer access APIs or Studio through personal accounts. Consumers who currently use these features will lose access unless they convert to a business account or transition to an alternative service.
View change record →The updated terms authorize Mistral AI to execute a broader range of actions on your behalf when you connect third-party services, including data modification, deletion, transmission, and invocation of external systems. Previously, the terms limited Mistral's authority to retrieve, process, and store data; the revised language now permits executing, modifying, deleting, invoking, and transmitting data through third-party services. Mistral's liability disclaimer has been expanded to explicitly exclude responsibility for data corruption, deletion, unauthorized disclosure, or other actions performed by third-party services on your request. You are now explicitly responsible for all actions you request Mistral AI Products to perform through third-party integrations, including how those third parties handle the data involved.
View change record →The reader must keep their account credentials and API keys exclusively under their control and may not share, distribute, resell, or lease them.
How other platforms handle this
Don't share your account credentials or give others access to your account.
If you choose, or you are provided with, a user identification code, password or any other piece of information as part of our security procedures, you must treat such information as confidential. You must not disclose it to any third party.
All users should safeguard their Account sign-in ID, password, passkey, or other authenticating information and take steps to prevent access to your Account by other persons on any shared devices.
"You may not make your account credentials (including any API keys) available to third parties, share individual login credentials or API keys between multiple users on an account, or resell or lease access to your account or API keys.Excerpt from Mistral AI's Terms of Service
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The prohibition covers multiple forms of credential sharing and commercialisation, any of which can constitute a breach of the terms.
The reader must keep their account credentials and API keys exclusively under their control and may not share, distribute, resell, or lease them.
ConductAtlas has identified this type of provision across 265 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mistral AI.