From 5c8534ac56498b44fb02654322b39c6270564d37 Mon Sep 17 00:00:00 2001 From: Peter Alexander Date: Fri, 4 Sep 2026 09:58:26 +0000 Subject: [PATCH] Add SECURITY.md Mirrors the policy used in modelcontextprotocol/ext-tasks: defers to the main MCP security policy and directs reports to GitHub Security Advisories. Co-Authored-By: Claude Claude-Session: https://claude.ai/code/session_01Sure6Sknngow87Q6TkzTfL --- SECURITY.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..6eaed0a --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Policy + +This repository follows the same security policy as the main Model Context Protocol project. + +Please see the [MCP Security Policy](https://github.com/modelcontextprotocol/modelcontextprotocol/blob/main/SECURITY.md) for full details on reporting security issues, the trust model, and what is considered in scope. + +## Reporting Security Issues + +If you discover a security vulnerability in this repository, please report it through +the [GitHub Security Advisory process](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability) +for this repository. + +Please **do not** report security vulnerabilities through public GitHub issues, discussions, +or pull requests.