Do not include database passwords, Mem0 API keys, model API keys, connection strings, or ~/.polardbx-zero-mcp/instances.json in public issues. Report security-sensitive findings privately to the PolarDB-X maintainers through the repository's security advisory channel.

• Zero credentials are disposable but still secrets.
• The MCP server stores instance connection information locally in ~/.polardbx-zero-mcp/instances.json.
• get_instance_status returns the database password in its tool result.
• Model functions may send SQL input to external model providers.
• Zero and Mem0 trial data is temporary and must not contain production or regulated data.