Skip to content

Repository navigation

Security: wandb/wandb-mcp-server

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported versions

Security fixes are applied to the latest released version of the W&B MCP server and to the main branch. Users should upgrade to the latest release before reporting an issue that may already be resolved.

Reporting a vulnerability

Please report suspected vulnerabilities privately to security@wandb.com. Do not open a public GitHub issue for an undisclosed vulnerability.

Include the following when possible:

  • The affected version, transport, and deployment configuration.
  • A minimal reproduction and the security impact.
  • Relevant logs or requests with API keys, tokens, customer data, and resource identifiers removed.
  • Any suggested mitigation or remediation.

W&B will coordinate validation, remediation, and disclosure with the reporter. See the W&B security page for additional information.

There aren't any published security advisories