Skip to content

Security

We take security seriously. Here is how we protect your data and our infrastructure.

Reporting a Vulnerability

If you have discovered a security vulnerability in Velkin or our MCP server, please report it to us directly at security@velkinui.com.

MCP Endpoint Security

Our public MCP endpoint (mcp.velkinui.com/mcp) is rate-limited (anonymous request budgets per ingress identity) and serves read-only component schemas and documentation for AI agents. It does not expose user accounts, licenses, or payment data. Report abuse or vulnerabilities to security@velkinui.com. Disclosure policy: /.well-known/security.txt.