If you find a security issue in this repository, in the skills it publishes, or
in the hosted Parallel Search MCP service (search.parallel.ai), report it
privately to support@parallel.ai. Do not open a public GitHub issue for
security reports.
Include what you found, how to reproduce it, and the impact you believe it has. We will acknowledge your report and follow up as we investigate.
- This repository contains skills, documentation, and client configuration. The search service and the Task API run on Parallel's infrastructure.
- The bundled MCP server (
parallel-search) is anonymous: it carries no credentials of any kind, and its tools (web_search,web_fetch) are read-only. - The CLI-backed skills run
parallel-clilocally and use the credentials you have already configured for it. They never transmit those credentials anywhere except to Parallel's API. - Never share Parallel API keys or tokens in issues, pull requests, or reports.
Use of the hosted service is governed by the Customer Terms and Privacy Policy.