# RFC 9116 security contact for mcp.rubik.co.jp
#
# This is a real, shipped standard, unlike the MCP discovery paths alongside
# it. Fill in Contact and Expires before serving, and keep Expires in the
# future -- an expired security.txt is treated as absent by scanners.

Contact: mailto:support@rubik.co.jp
Expires: 2027-11-09T00:00:00.000Z
Preferred-Languages: ja, en
Canonical: https://mcp.rubik.co.jp/.well-known/security.txt

# Scope note for anyone reporting: this endpoint is public, unauthenticated
# and read-only by design. There are no accounts, no tokens and no write
# operations, so "no authentication required" is the intended behaviour and
# not a finding. Reports about the data itself -- a listing published without
# consent, or attribution missing from results -- are in scope and welcome.