If you find a security issue in partiful-mcp — including anything related to how credentials (PARTIFUL_REFRESH_TOKEN, PARTIFUL_USER_ID) are handled — please report it privately via GitHub Security Advisories rather than opening a public issue.

Please do not include real credentials or tokens in a report.

Only the latest published version on npm is supported. There is no long-term support branch; fixes ship as new releases.