# Security policy

## Reporting a vulnerability

If you find a security issue in this repository's configuration files or in the hosted Parallel Search MCP service (`search.parallel.ai`), please report it privately to **support@parallel.ai**. Do not open a public GitHub issue for security reports.

Include what you found, how to reproduce it, and the impact you believe it has. We'll acknowledge your report and follow up as we investigate.

## Scope

- This repository contains documentation and client configuration only; the search service runs on Parallel's infrastructure.
- The MCP server's tools (`web_search`, `web_fetch`) are read-only, and this plugin is anonymous: it uses no credentials of any kind. Never share Parallel API keys or tokens in issues or reports.

## Service and data handling

Use of the hosted service is governed by the [Customer Terms](https://parallel.ai/customer-terms) and [Privacy Policy](https://parallel.ai/privacy-policy).