Security

Report a vulnerability

Email team@nestcash.co with “Security report” in the subject line. We review every report.

Please include:

• the address or part of the service affected;
• the steps to reproduce the problem;
• what you think an attacker could do with it.

Please do not disclose the problem publicly, including in forums, social media, or public issue trackers, until we have had a reasonable chance to look into it and fix it. Do not include other people’s personal information in your report.

What is in scope

• This website, www.nestcashintel.co.
• The NestCash Intel service at mcp.nestcashintel.co.

Problems in Claude or other Anthropic products should be reported to Anthropic. Problems in our providers’ own platforms should be reported to them.

If you test our service

• Use only your own account.
• Do not try to access, change, or delete other people’s information.
• Do not run tests that could slow or disrupt the service, such as denial-of-service or high-volume automated scanning.
• Do not use social engineering against our team or our providers.
• Stop and tell us as soon as you find a problem.

How the service is protected

• Sign-in and token checks. Every request must carry a valid access token. The service validates the token and checks that it was issued by our sign-in provider and intended for our service.
• Authorization. The service checks that an account is authorized before it answers a request.
• Encrypted connections. The website and the service are served over HTTPS.
• Limits on requests. The service applies usage limits, restricts the size of requests, and accepts only inputs that match a strict format for each tool.
• Read-only tools. The service has seven tools, and all of them only look up and return data. None can write to or change your AI assistant account.
• Little to protect. The service does not store your conversations, the contents of your requests, or our answers. Our Privacy Policy lists what it does keep.

No online service can guarantee perfect security.

If you think your account is at risk

You sign in with a code sent to your email, so the security of your mailbox protects your NestCash Intel account. If you think someone else has access, secure your email account first, then email us at team@nestcash.co.