Please report vulnerabilities privately via GitHub's "Report a vulnerability" form on this repository.

Please do not open public issues for security reports.

This repository tracks @extentos/mcp-server (npm) and its interaction with the Extentos backend and SDKs. Reports about any part of that surface are welcome here.

See the security overview for how Extentos handles credentials, data, and telemetry.