Mirrors the policy used in modelcontextprotocol/ext-tasks: defers to the main MCP security policy and directs reports to GitHub Security Advisories. Claude-Session: https://claude.ai/code/session_01Sure6Sknngow87Q6TkzTfL Co-authored-by: Claude <noreply@anthropic.com>
14 lines
795 B
Markdown
14 lines
795 B
Markdown
# Security Policy
|
|
|
|
This repository follows the same security policy as the main Model Context Protocol project.
|
|
|
|
Please see the [MCP Security Policy](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/SECURITY.md) for full details on reporting security issues, the trust model, and what is considered in scope.
|
|
|
|
## Reporting Security Issues
|
|
|
|
If you discover a security vulnerability in this repository, please report it through
|
|
the [GitHub Security Advisory process](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability)
|
|
for this repository.
|
|
|
|
Please **do not** report security vulnerabilities through public GitHub issues, discussions,
|
|
or pull requests.
|