Please report security issues privately by emailing security@toolrouter.world.
Do not open public GitHub issues for vulnerabilities, leaked credentials, or payment/signing issues.
Include:
- Affected endpoint or package
- Reproduction steps
- Expected impact
- Any relevant request IDs or timestamps
ToolRouter never needs your provider API keys, wallet private keys, payment headers, or Supabase service role keys in a report.