# Security policy

Please use GitHub's
[private vulnerability reporting](https://github.com/mcplookupdev/mcplookup-mcp/security/advisories/new)
or email [hello@mcplookup.com](mailto:hello@mcplookup.com). Do not open a public issue
containing credentials, exploit details, personal data, or an unpatched vulnerability.

Include the affected package version, reproduction steps, impact, and any suggested
mitigation. We will acknowledge a report as soon as practical and coordinate disclosure
after a fix is available.

This package contains only a stdio-to-HTTPS transport adapter. Trust data and tool behavior
are served by the canonical endpoint at `https://mcplookup.com/mcp`.