Security

SECURITY.md

Security Policy

mcp-tool-card-diff is a pure-transform library and CLI: it reads two JSON Tool Card files, compares them, and emits a diff structure. No network listener, no remote fetch, no execution of user-supplied code.

Supported versions

Only the latest tagged release is supported.

Reporting a vulnerability

Please use GitHub Security Advisories for private disclosure:

Open a security advisory

Do not file public issues for security reports.

There aren't any published security advisories