Where to ask questions, report bugs, and report vulnerabilities

[TimesAndPlaces]

Welcome to MCP Preflight Discussions.

Use Discussions for:

• setup questions
• false positives
• feature requests
• feedback on MCP rules and reports

Use Issues for:

• reproducible bugs
• broken scans
• extension problems

Use the Security tab -> Report a vulnerability for:

• real security issues in MCP Preflight itself

If you are trying the tool on a real MCP server or repo, context helps:

• what you scanned
• what you expected
• what MCP Preflight reported instead

[TimesAndPlaces]

A small maintainer note that may save a round-trip if you report a false positive or confusing result:

• include the rule id
• include the finding fingerprint
• say whether you ran the CLI workspace scan, CLI CI mode, or the VS Code command
• paste a small redacted snippet of the config or prompt file around the finding
• say what safe behavior you expected instead

That is usually enough for me to reproduce the problem without asking for the whole repo.

If the report is about a real security issue in MCP Preflight itself, please use the Security tab instead of posting it publicly.