Do not open a public issue for security bugs.
Email: alexar76@rambler.ru
We acknowledge within 48 hours and share a fix timeline.
- The MCP tool surface and the gateway routing/parse logic (
gateway_core.py). - AIMarket v2 invoke calls, payment-channel headers, and bearer-token handling.
- No custody. The gateway holds no keys and no funds; payment settles on-chain via the
AIMarket escrow (the gateway only forwards an
X-Payment-Channelid if you provide one). - Fails closed. With neither
AIMARKET_HUB_URLnorAIMARKET_ORACLE_URLset, every tool raises with a clear message — it never fabricates or simulates an oracle result. - Verify, don't trust. Randomness carries an Ed25519 signature and a proof; VDF output carries
a Wesolowski proof — verify them (
verify_random/verify_vdf) rather than trusting the value.
- Third-party dependencies (report upstream).
- The oracle implementations themselves (reported via the oracle subprojects).
- Social engineering; issues requiring physical access to user hardware.
| Version | Supported |
|---|---|
| latest main | yes |
| older tags | best effort |