---
title: "Security and contact"
description: "Report security issues privately and share enough redacted evidence for support."
---

> Documentation Index
> Fetch the complete documentation index at: https://help.tooluse.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and contact

<h2 id="report-a-vulnerability">Report a vulnerability</h2>
<p><a href="/contact/?topic=security">Open the contact form with Security selected</a> and include:</p>
<ul>
<li>the affected Tooluse.net route or feature;</li>
<li>the date and time with time zone;</li>
<li>reproducible steps that do not include a real secret;</li>
<li>the observed and expected authorization boundary;</li>
<li>redacted request, response, and receipt IDs.</li>
</ul>
<p>Do not test against another user’s application or increase the impact after you can demonstrate the issue.</p>
<h2 id="product-support">Product support</h2>
<p>For configuration, billing, or integration help, <a href="/contact/?topic=product">open the product support form</a>. Include the application ID, route, status, and redacted request or invocation ID.</p>
<h2 id="legal-and-privacy">Legal and privacy</h2>
<p>Use the <a href="/contact/?topic=privacy">legal and privacy form</a> for compliance, disputes, or data-subject requests.</p>
<h2 id="never-send">Never send</h2>
<ul>
<li>Clerk session tokens or personal access tokens;</li>
<li>Agent keys or invitation secrets;</li>
<li>service credentials or OAuth authorization codes;</li>
<li>passwords, OTPs, cookies, card data, CVVs, or wallet tokens;</li>
<li>unredacted provider responses containing personal data.</li>
</ul>
<p>Product updates are published through <a href="https://bsky.app/profile/gridheap.com">Grid Heap on Bluesky</a>. Tooluse.net does not publish a support phone number.</p>

Source: https://help.tooluse.net/help/security/index.mdx