Security & trust
The product is under development. This page is not a claim of certification or a completed audit.
Planned controls
Server-side authorisation, tenant isolation, administrator MFA, Stripe webhook verification, SSRF protections, secret management, logging and incident response require implementation and independent testing before commercial launch.
Customer deployments
Generated MCP packages are intended for customer-managed hosting. Production access and tool permissions must be configured and reviewed.