The community website is a resource directory and setup guide. It does not collect API keys, operate the NewsAPI.ai service, or execute users’ news queries.

Never submit API keys, session tokens, private news data, or environment files in issues or pull requests. If you accidentally publish a credential, revoke it with its provider immediately; deleting the visible text alone does not revoke access.

For a vulnerability in this repository, use GitHub private vulnerability reporting if the repository’s Security tab offers it. If that option is unavailable, open a minimal issue requesting a private contact channel without exploit details or credentials. There is no guaranteed response time.

For vulnerabilities or account problems in NewsAPI.ai, the official MCP package, n8n, or another dependency, use that project’s own reporting channel. The inherited Pleiades backend code is experimental and is not part of the deployed community website.