Security Policy

Thank you for helping us keep the SDKs and systems they interact with secure.

Reporting Security Issues

This SDK is maintained by Anthropic as part of the Model Context Protocol project. Anthropic takes security seriously, and encourages you to report any security vulnerability promptly so that appropriate action can be taken.

Our security program is managed on HackerOne. Please report any security issues via https://hackerone.com/anthropic-vdp.

Responsible Disclosure

We appreciate the efforts of security researchers and individuals who help us maintain the security of the SDK. If you believe you have found a security vulnerability, please adhere to responsible disclosure practices by allowing us a reasonable amount of time to investigate and address the issue before making any information public.

Policy

See our vulnerability disclosure policy at HackerOne for further details.