starred/servers-modelcontextprotocol
1
0
Fork 0
mirror of https://github.com/modelcontextprotocol/servers.git synced 2026-04-17 23:53:24 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update SECURITY.md

Browse Source
This commit is contained in:
David Soria Parra
2024-11-19 16:49:57 +00:00
committed by GitHub
parent 4d5d9662eb
commit e1cd447dbc
1 changed files with 6 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
SECURITY.md
View File

@@ -1,22 +1,14 @@
# Security Policy # Security Policy
Thank you for helping us keep the SDKs, servers and systems they interact with secure. Thank you for helping us keep our MCP servers secure.
## Reporting Security Issues ## Reporting Security Issues
These servers are is maintained by [Anthropic](https://www.anthropic.com/) and the community as part of the Model Context Protocol project. These servers are maintained by [Anthropic](https://www.anthropic.com/) as part of the Model Context Protocol project.
Anthropic takes security seriously, and encourages you to report any security vulnerability promptly so that
appropriate action can be taken.
Our security program is managed on HackerOne. Please report any security issues via https://hackerone.com/anthropic-vdp. The security of our systems and user data is Anthropic’s top priority. We appreciate the work of security researchers acting in good faith in identifying and reporting potential vulnerabilities.
## Responsible Disclosure Our security program is managed on HackerOne and we ask that any validated vulnerability in this functionality be reported through their [submission form](https://hackerone.com/anthropic-vdp/reports/new?type=team&report_type=vulnerability).
We appreciate the efforts of security researchers and individuals who help us maintain the security of ## Vulnerability Disclosure Program
our software. If you believe you have found a security vulnerability, please adhere to responsible
disclosure practices by allowing us a reasonable amount of time to investigate and address the issue
before making any information public.
## Policy Our Vulnerability Program Guidelines are defined on our [HackerOne program page](https://hackerone.com/anthropic-vdp).
See our vulnerability disclosure policy at [HackerOne](https://hackerone.com/anthropic-vdp) for further
details.