Thank you for helping us keep our MCP servers secure.
The reference servers in this repo are maintained by Anthropic as part of the Model Context Protocol project.
The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities.
Our Vulnerability Program guidelines are defined on our HackerOne program page. We ask that any validated vulnerability in this functionality be reported through the submission form.
If you discover a security issue, please report it responsibly:
- Do NOT open a public issue
- Email the maintainer or open a private security advisory on GitHub
- Include steps to reproduce the vulnerability
- Allow reasonable time for a fix before disclosure