Security
How this website is built, and how to report a problem.
This website
The marketing site runs as its own container on its own network segment, with no access to the product database, the vector store or the agent runtime. If it were compromised, the blast radius stops at a brochure.
It holds no secrets. Every value it is configured with is public by nature: a domain, an origin, a published agent identifier.
Form handling
The waitlist endpoint is rate-limited per client, size-capped, validated server-side, and includes a honeypot field. Email addresses are masked in logs.
The agent tool surface
Every tool exposed over WebMCP and the MCP endpoint is read-only except the waitlist submission, which is explicitly annotated as side-effecting so a well-behaved agent asks its user first. Side-effecting tools are not runnable from the on-page console.
The MCP endpoint caps request bodies, does not maintain sessions, and exposes no resources or prompts.
Reporting something
If you find a problem with this site, use the waitlist form with a note describing it and we will respond. Please do not run automated scanning that degrades the service for other visitors.