Thank you for helping keep the Model Context Protocol and its ecosystem secure.

If you discover a security vulnerability in this repository, please report it through the GitHub Security Advisory process for this repository.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Open a public issue, or send a pull request, for:

• Crashes or hangs of a client caused by the server it connected to
• Spec-compliance gaps, missing validation, and hardening suggestions without a concrete attack
• Resource exhaustion that requires non-default configuration
• Static-analysis or other tool findings without a demonstrated impact

To help us triage and respond quickly, please include:

• A description of the vulnerability
• Steps to reproduce the issue
• The potential impact
• Any suggested fixes (optional)