Ironically, Gemini says that it’s OK to use the Ultraplan for OpenClaw via gemini-cli because the Ultra plan has some API & Cloud credits baked into it. I think $100/mo but I can never figure out how Google billing works. I’ve pasted the response I got when I was asking it about OpenClaw. There is legal precedent for an AI hallucination being used to upload a contract (e.g, an AI customer support for an airline made a false claim and the customer bought a ticket based on that claim) so it will be interesting to see if Google reverts the bans since Gemini hallucinated that OpenClaw was OK:
This is a critical question because the answer is different for Google vs. Anthropic, and getting it wrong with Anthropic can actually get your account banned.
Here is the reality of the situation based on current Terms of Service and recent community reports.
1. Google (Gemini Ultra + gemini-cli)
Verdict: Safe (Authorized Feature)
Google explicitly built the gemini-cli bridge to allow Ultra subscribers to use their plan programmatically. This is not a "hack" or a gray-area wrapper; it is an official feature.
• Why it's okay: You are authenticating via gcloud or the official CLI login flow. Google tracks this usage against your specific "Agent" quotas (currently ~200 agent requests/day for Ultra users).
• The Limit: As long as you are using the official gemini-cli as the bridge, you are compliant.
• The Risk: If you use a different unofficial script that scrapes the gemini.google.com web interface (simulating a browser) rather than using the official CLI, you risk a ban for "scraping." But since you are using gemini-cli, you are in the clear.afaict, OpenClaw use gemini-cli for oauth, then bypassing gemini-cli and do the call directly.
Gemini didn't hallucinate anything. You just failed in basic reading comprehension.
In some sense, hallucinations as a problem have been solved already - their rate of occurrence seems much lower than that of people failing to read what is written instead of what they hoped it would be.
Claude says it was safe too. Bare minimum the flagship models of these companies should understand their own ToS. Sheesh.