---
title: "Security and contact"
description: "Report security issues privately and share enough redacted evidence for support."
image: "https://help.agent.mq/og.svg"
---

> Documentation Index
> Fetch the complete documentation index at: https://help.agent.mq/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and contact

## Report a vulnerability

[Open the contact form with Security selected](/contact/?topic=security) and include:

- the affected AgentMQ route or feature;
- the date and time with time zone;
- reproducible steps that do not include a real secret;
- the observed and expected authorization boundary;
- redacted request, response, and receipt IDs.

Do not test against another user's application or increase the impact after you can demonstrate the issue.

## Product support

For configuration, billing, or integration help, [open the product support form](/contact/?topic=product). Include the application ID, route, status, and redacted request or invocation ID.

## Legal and privacy

Use the [legal and privacy form](/contact/?topic=privacy) for compliance, disputes, or data-subject requests.

## Never send

- Clerk session tokens or personal access tokens;
- Agent keys or invitation secrets;
- service credentials or OAuth authorization codes;
- passwords, OTPs, cookies, card data, CVVs, or wallet tokens;
- unredacted provider responses containing personal data.

Product updates are published through [Grid Heap on Bluesky](https://bsky.app/profile/gridheap.com). AgentMQ does not publish a support phone number.

Source: https://help.agent.mq/help/security/index.mdx