generated: '2026-09-07'
method: searched
probe: true
source: https://shelter.money/.well-known/security.txt
policy:
- https://shelter.money/security
contact:
- mailto:support@shelter.money
- mailto:security@shelter.money
disclosure:
  channel: email
  acknowledgment: best-effort within 5 business days (per https://shelter.money/security)
  bug_bounty: none
  instructions: >-
    The MCP repository's SECURITY.md directs reports to security@shelter.money with a
    description, reproduction steps, and affected version, and asks reporters not to include
    real financial data, API keys, Plaid credentials, or other secrets; the site's security.txt
    lists support@shelter.money with Policy https://shelter.money/security.
evidence:
- source: https://shelter.money/.well-known/security.txt
  kind: security.txt (live probe, HTTP 200)
- source: https://raw.githubusercontent.com/nextauralabs/shelter-mcp/main/SECURITY.md
  kind: repository security policy (HTTP 200)
- source: https://shelter.money/security
  kind: disclosure policy page (HTTP 200)