Contact: mailto:security@mpbxchange.com Expires: 2027-05-15T00:00:00.000Z Preferred-Languages: en, th Canonical: https://mpbxchange.com/.well-known/security.txt Policy: https://mpbxchange.com/responsible-disclosure Acknowledgments: https://mpbxchange.com/security/hall-of-fame # Scope: *.mpbxchange.com production ยท marketplace + Counsel + admin APIs # Out of scope: rate-limit alerts, missing security headers without exploit, SPF/DKIM nits # Bounty: gratitude + public acknowledgment for valid reports. Cash bounty deferred to Series A.