modelcontextprotocol/.github
Watch
1
0
Fork
You've already forked .github
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #687 from modelcontextprotocol/localden/sec-doc-update

Browse source 
Update SECURITY.md to use GitHub Security Advisories
This commit is contained in:
Ola Hungerford 2026-02-18 19:59:07 -07:00 • committed by GitHub
commit ef870b740b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 13 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

19
SECURITY.md
View file

@ -1,14 +1,21 @@
# Security Policy # Security Policy
Thank you for helping us keep Model Context Protocol and any systems it interacts with secure.
Thank you for helping keep the Model Context Protocol and its ecosystem secure.
## Reporting Security Issues ## Reporting Security Issues
The Model Context Protocol project is maintained by [Anthropic](https://www.anthropic.com/). If you discover a security vulnerability in this repository, please report it through
the [GitHub Security Advisory process](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability)
for this repository.
The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities. Please **do not** report security vulnerabilities through public GitHub issues, discussions,
or pull requests.
Our security program is managed on HackerOne and we ask that any validated vulnerability in this functionality be reported through their [submission form](https://hackerone.com/anthropic-vdp/reports/new?type=team&report_type=vulnerability). ## What to Include
## Vulnerability Disclosure Program To help us triage and respond quickly, please include:
Our Vulnerability Program Guidelines are defined on our [HackerOne program page](https://hackerone.com/anthropic-vdp). - A description of the vulnerability
- Steps to reproduce the issue
- The potential impact
- Any suggested fixes (optional)