> For the complete documentation index, see [llms.txt](https://sdk.metamarket.tech/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sdk.metamarket.tech/architecture-and-trust/security.md).

# Security Policy

We take the security of MetaMarket and the games built on it seriously. If you believe you have found a security vulnerability, please report it privately so we can address it before it is disclosed publicly.

## Reporting a vulnerability

Do not open a public GitHub issue for a security matter. Instead, reach us through the contact channel at [metamarket.tech](https://metamarket.tech/#contact) and mark your message as a security report.

Please include, where you can:

* a description of the issue and its potential impact;
* the steps or a proof of concept needed to reproduce it;
* any affected endpoints, versions, or configurations.

## What to expect

We will acknowledge your report, work with you to understand and reproduce the issue, and keep you informed as we resolve it. We ask that you give us a reasonable opportunity to release a fix before any public disclosure, and that your testing does not disrupt other users, access or modify data that is not yours, or degrade the service.

## Scope

In scope: the MetaMarket platform APIs, the SDK, and this documentation. Out of scope: third-party services and infrastructure MetaMarket does not operate, social-engineering or physical attacks, and denial-of-service testing against shared environments. Good-faith research that stays within scope and respects the conditions above is welcomed, and we will coordinate disclosure timing with you.

We are grateful to researchers who report issues responsibly. A dedicated security reporting channel is being established; until it is announced, use the contact route above and mark the message as a security report.