# Security Policy

## Reporting a Vulnerability

Please report security vulnerabilities responsibly.

**Do NOT open a public GitHub issue for security vulnerabilities.**

### How to Report

1. **GitHub Security Advisories**: [Report privately](https://github.com/GLips/Figma-Context-MCP/security/advisories/new)
2. **Email**: Contact the maintainers directly

### Response Timeline

- Acknowledgment: 48 hours
- Assessment: 1 week
- Fix: Based on severity

## Supported Versions

| Version | Supported |
|---------|:---------:|
| Latest  | ✅        |

## MCP Security Best Practices

1. Review server permissions before connecting
2. Use environment variables for secrets
3. Limit server access to required tools only
4. Keep dependencies updated