Report a vulnerability
Open the contact form with Security selected and include:
- the affected AgentMQ route or feature;
- the date and time with time zone;
- reproducible steps that do not include a real secret;
- the observed and expected authorization boundary;
- redacted request, response, and receipt IDs.
Do not test against another user’s application or increase the impact after you can demonstrate the issue.
Product support
For configuration, billing, or integration help, open the product support form. Include the application ID, route, status, and redacted request or invocation ID.
Legal and privacy
Use the legal and privacy form for compliance, disputes, or data-subject requests.
Never send
- Clerk session tokens or personal access tokens;
- Agent keys or invitation secrets;
- service credentials or OAuth authorization codes;
- passwords, OTPs, cookies, card data, CVVs, or wallet tokens;
- unredacted provider responses containing personal data.
Product updates are published through Grid Heap on Bluesky. AgentMQ does not publish a support phone number.