Please do not report security vulnerabilities in a public GitHub issue.

Email mcp@wealthbox.com with a description of the issue, reproduction steps, and any relevant logs with customer data removed. The Wealthbox team will acknowledge the report and coordinate next steps privately.

The plugin stores no Wealthbox credentials in this repository. Authentication is handled by the Wealthbox-hosted OAuth flow.