Skip to content

Security: lory69060/cn-intel-mcp-dsh

Security

SECURITY.md

Security

Token handling

  • The plugin reads the MCP token from the CN_INTEL_MCP_TOKEN environment variable.
  • Never commit a real token into this repository or any patch file.
  • The shared trial token in README is rate-limited (200 req/day) and can be rotated at any time; if you rely on it in production, request a dedicated token instead.

Data

  • The cn-intel MCP endpoint serves read-only structured data (signals, earnings tracker, articles).
  • No user data leaves the DSH session; the MCP server is stateless.

There aren't any published security advisories