Security
The operator of this site has not published who it is or how to contact it yet.
Found a security problem on Mindket? Send it to the contact address at the end of this page with what you found, the steps to reproduce it, the page's address and what an attacker could do with it.
Testing
Test only against your own account and your own data. Don't read, change or delete anyone else's data, don't run tests that slow the site down for others, and leave real personal data out of your report.
What is in scope
Mindket's pages, the downloads its listings offer, and the account page it opens for signing in, buying and selling. Other websites are out of scope, including the projects a listing links to, and so are denial-of-service attacks, spam and tricking our staff or users.
A flaw in a listed project itself, such as a GitHub repository or an MCP server, belongs to its maker: report it to them. Tell us too if you think the listing should come down in the meantime.
What we do with a report
We aim to acknowledge a report within 3 working days and to tell you what we plan to do. We confirm the problem, fix it and, with your permission, credit you when the fix is out.
How the pages are built
Pages are drawn on our server and run one script of our own. Their content security policy lets them load only our files and the outside services the privacy page names. Every word a seller writes is escaped before it is shown.
Who runs Mindket
- Publisher and operator
- Not published yet
- Contact
- Not published yet
- Security reports
- Not published yet