Security

• OAuth tokens are encrypted at rest.
• API keys are hashed at rest.
• Write tools require confirmed=true and an idempotency key.
• Provider write calls are not automatically retried after platform-side partial failure.
• Production traffic uses HTTPS.

Report security concerns to support@storeadops.ai.