Reporting a security problem

If you believe you have found a security problem on bormeapi.com, api.bormeapi.com or mcp.bormeapi.com, please email [email protected]. Please do not disclose it publicly, for example in an issue tracker or on social media.

For the open-source borme-mcp repository on GitHub, you can also use the "Report a vulnerability" button on its Security tab.

A useful report says what is affected, how to reproduce it and what an attacker could do with it.

What we ask

This page does not authorize security testing of production systems.

• Do not access, change or delete data that is not yours, and do not destroy or degrade any data.
• Do not test against other customers' accounts, API keys or data. If you come across someone else's data, stop, do not keep it, and tell us.
• Do not run denial-of-service tests or send traffic that degrades the service for others.
• Do not include personal data in your report.

What we do

We acknowledge the reports we receive.