Skip to content

Security: carboneio/carbone-mcp

Security

SECURITY.md

Security Policy

Reporting a vulnerability

Please report security vulnerabilities in Carbone MCP privately by email to support@carbone.io. Do not open a public GitHub issue.

Report even if you are not certain it is a security issue. You will typically receive an answer within a day.

Encrypt your report with our PGP key: https://carbone.io/pgp-key.html

Full policy: Carbone Security Policy.

For how to run the server safely (URL inputs, shared server keys, browser origins), see Security in the README.

There aren't any published security advisories