AGPL doesn't prohibit commercial usage. The vendor just need to provide the sources for the service.