Please don't report security problems through public GitHub issues, discussions or pull requests.
Email hello@warpsearch.io with:
- the service, package or repository affected, and the version or commit;
- the steps or requests that reproduce the problem;
- what you believe the impact is.
You will get an acknowledgement within a few days, and we will keep you informed while we work on a fix. Please give us reasonable time to fix the problem before you publish it. We credit reporters in the fix announcement unless you prefer otherwise.
In scope: the WarpSearch service (warpsearch.io, api.warpsearch.io and the MCP server) and the
code in the warpsearchio repositories.
When you test the service, use only accounts and data you own. Don't access other customers' data, degrade the service for others, or run automated scans that send large volumes of traffic.