Please do not open a public issue. Report it privately through GitHub security advisories. You will get an answer within 7 days.

The API has no authentication: it is meant to run on a private network or behind an authenticating proxy. Do not expose it to the internet as is.

• Uploaded files are stored under server-generated names inside UPLOADS_DIR, with a size limit enforced while streaming.
• Error responses never include exception text, provider responses or file paths; details go to the server log.
• API keys are read from the environment and never logged.
• Dependencies are pinned in uv.lock and updated weekly by Dependabot.