Report vulnerabilities privately to developers@getminds.ai.
Do not open a public issue for credentials, authentication bypasses, or data exposure. Minds integrations must never log API keys, OAuth tokens, Panel answers, or private customer content.