gatectl can operate physical access equipment. Please report vulnerabilities privately through GitHub's security-advisory feature rather than opening a public issue with exploit details, credentials, tokens, serial numbers, or site topology.

Never include account passwords, MFA codes, OAuth tokens, raw authorization callbacks, cookies, or unredacted observations in a report.

This project uses an unofficial API and cannot provide safety, availability, or security guarantees for the MyQ service or connected hardware.