Security fixes are applied to the latest release of @runapi.ai/mcp. Update to the latest published version before reporting an issue that may already be resolved.

Use GitHub's private vulnerability reporting for this repository:

https://github.com/runapi-ai/mcp/security/advisories/new

Include the affected version, reproduction steps, expected impact, and any suggested mitigation. Do not open a public issue for an undisclosed vulnerability or include credentials, customer data, or other sensitive material in the report.

RunAPI will acknowledge a complete report, investigate it, and coordinate any fix and disclosure through the private advisory.