docs: fix locale-prefixed links in security pages

Address Copilot review feedback to use locale-prefixed paths for MCP security links (/en/mcp/security, /ko/mcp/security, etc.) to keep users in their selected language. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: add top-level Security Policy page across all languages
2026-05-22 17:38:10 +00:00 · 2026-04-02 13:13:17 -07:00 · 2026-04-02 13:12:56 -07:00
18 changed files with 337 additions and 350 deletions
--- a/docs/ar/api-reference/stop.mdx
+++ b/docs/ar/api-reference/stop.mdx
@@ -1,8 +0,0 @@
---
-title: "POST /stop/{kickoff_id}"
-description: "إيقاف تنفيذ الطاقم الجاري"
-openapi: "/enterprise-api.en.yaml POST /stop/{kickoff_id}"
-mode: "wide"
---
-
-
--- a/docs/ar/mcp/security.mdx
+++ b/docs/ar/mcp/security.mdx
@@ -139,7 +139,19 @@ mode: "wide"
 - **الالتزام بمواصفات ترخيص MCP**: إذا كنت تنفذ المصادقة والترخيص، اتبع بدقة [مواصفات ترخيص MCP](https://modelcontextprotocol.io/specification/draft/basic/authorization).
 - **تدقيقات أمنية منتظمة**: إذا كان خادم MCP يتعامل مع بيانات حساسة، فكر في إجراء تدقيقات أمنية دورية.

-## 5. قراءة إضافية
+## 5. الإبلاغ عن الثغرات الأمنية
+
+إذا اكتشفت ثغرة أمنية في CrewAI، يرجى الإبلاغ عنها بشكل مسؤول من خلال برنامج الكشف عن الثغرات (VDP) الخاص بنا على Bugcrowd:
+
+**أرسل التقارير إلى:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+**لا تكشف** عن الثغرات عبر issues العامة على GitHub أو pull requests أو وسائل التواصل الاجتماعي. لن تتم مراجعة التقارير المقدمة عبر قنوات غير Bugcrowd.
+</Warning>
+
+لمزيد من التفاصيل، راجع [سياسة الأمان](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md) الخاصة بنا.
+
+## 6. قراءة إضافية

 لمزيد من المعلومات التفصيلية حول أمان MCP، راجع التوثيق الرسمي:
 - **[أمان نقل MCP](https://modelcontextprotocol.io/docs/concepts/transports#security-considerations)**
--- a/docs/ar/security.mdx
+++ b/docs/ar/security.mdx
@@ -0,0 +1,22 @@
+---
+title: سياسة الأمان
+description: تعرف على كيفية الإبلاغ عن الثغرات الأمنية وممارسات الأمان في CrewAI.
+icon: shield
+mode: "wide"
+---
+
+## الإبلاغ عن الثغرات الأمنية
+
+إذا اكتشفت ثغرة أمنية في CrewAI، يرجى الإبلاغ عنها بشكل مسؤول من خلال برنامج الكشف عن الثغرات (VDP) الخاص بنا على Bugcrowd:
+
+**أرسل التقارير إلى:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+**لا تكشف** عن الثغرات عبر issues العامة على GitHub أو pull requests أو وسائل التواصل الاجتماعي. لن تتم مراجعة التقارير المقدمة عبر قنوات غير Bugcrowd.
+</Warning>
+
+لمزيد من التفاصيل، راجع [سياسة الأمان على GitHub](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md).
+
+## موارد الأمان
+
+- **[اعتبارات أمان MCP](/ar/mcp/security)** — أفضل الممارسات لدمج خوادم MCP بأمان مع وكلاء CrewAI، بما في ذلك أمان النقل ومخاطر حقن الأوامر ونصائح تنفيذ الخادم.
--- a/docs/docs.json
+++ b/docs/docs.json
@@ -369,6 +369,12 @@
                    "pages": [
                      "en/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Security",
+                    "pages": [
+                      "en/security"
+                    ]
                  }
                ]
              },
@@ -495,8 +501,7 @@
                      "en/api-reference/inputs",
                      "en/api-reference/kickoff",
                      "en/api-reference/resume",
-                      "en/api-reference/status",
-                      "en/api-reference/stop"
+                      "en/api-reference/status"
                    ]
                  }
                ]
@@ -840,6 +845,12 @@
                    "pages": [
                      "en/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Security",
+                    "pages": [
+                      "en/security"
+                    ]
                  }
                ]
              },
@@ -965,8 +976,7 @@
                      "en/api-reference/inputs",
                      "en/api-reference/kickoff",
                      "en/api-reference/resume",
-                      "en/api-reference/status",
-                      "en/api-reference/stop"
+                      "en/api-reference/status"
                    ]
                  }
                ]
@@ -1310,6 +1320,12 @@
                    "pages": [
                      "en/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Security",
+                    "pages": [
+                      "en/security"
+                    ]
                  }
                ]
              },
@@ -1435,8 +1451,7 @@
                      "en/api-reference/inputs",
                      "en/api-reference/kickoff",
                      "en/api-reference/resume",
-                      "en/api-reference/status",
-                      "en/api-reference/stop"
+                      "en/api-reference/status"
                    ]
                  }
                ]
@@ -1780,6 +1795,12 @@
                    "pages": [
                      "en/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Security",
+                    "pages": [
+                      "en/security"
+                    ]
                  }
                ]
              },
@@ -1905,8 +1926,7 @@
                      "en/api-reference/inputs",
                      "en/api-reference/kickoff",
                      "en/api-reference/resume",
-                      "en/api-reference/status",
-                      "en/api-reference/stop"
+                      "en/api-reference/status"
                    ]
                  }
                ]
@@ -2251,6 +2271,12 @@
                    "pages": [
                      "en/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Security",
+                    "pages": [
+                      "en/security"
+                    ]
                  }
                ]
              },
@@ -2376,8 +2402,7 @@
                      "en/api-reference/inputs",
                      "en/api-reference/kickoff",
                      "en/api-reference/resume",
-                      "en/api-reference/status",
-                      "en/api-reference/stop"
+                      "en/api-reference/status"
                    ]
                  }
                ]
@@ -2720,6 +2745,12 @@
                    "pages": [
                      "en/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Security",
+                    "pages": [
+                      "en/security"
+                    ]
                  }
                ]
              },
@@ -2845,8 +2876,7 @@
                      "en/api-reference/inputs",
                      "en/api-reference/kickoff",
                      "en/api-reference/resume",
-                      "en/api-reference/status",
-                      "en/api-reference/stop"
+                      "en/api-reference/status"
                    ]
                  }
                ]
@@ -3192,6 +3222,12 @@
                    "pages": [
                      "en/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Security",
+                    "pages": [
+                      "en/security"
+                    ]
                  }
                ]
              },
@@ -3317,8 +3353,7 @@
                      "en/api-reference/inputs",
                      "en/api-reference/kickoff",
                      "en/api-reference/resume",
-                      "en/api-reference/status",
-                      "en/api-reference/stop"
+                      "en/api-reference/status"
                    ]
                  }
                ]
@@ -3678,6 +3713,12 @@
                    "pages": [
                      "pt-BR/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Segurança",
+                    "pages": [
+                      "pt-BR/security"
+                    ]
                  }
                ]
              },
@@ -3803,8 +3844,7 @@
                      "pt-BR/api-reference/inputs",
                      "pt-BR/api-reference/kickoff",
                      "pt-BR/api-reference/resume",
-                      "pt-BR/api-reference/status",
-                      "pt-BR/api-reference/stop"
+                      "pt-BR/api-reference/status"
                    ]
                  }
                ]
@@ -4133,6 +4173,12 @@
                    "pages": [
                      "pt-BR/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Segurança",
+                    "pages": [
+                      "pt-BR/security"
+                    ]
                  }
                ]
              },
@@ -4258,8 +4304,7 @@
                      "pt-BR/api-reference/inputs",
                      "pt-BR/api-reference/kickoff",
                      "pt-BR/api-reference/resume",
-                      "pt-BR/api-reference/status",
-                      "pt-BR/api-reference/stop"
+                      "pt-BR/api-reference/status"
                    ]
                  }
                ]
@@ -4588,6 +4633,12 @@
                    "pages": [
                      "pt-BR/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Segurança",
+                    "pages": [
+                      "pt-BR/security"
+                    ]
                  }
                ]
              },
@@ -4713,8 +4764,7 @@
                      "pt-BR/api-reference/inputs",
                      "pt-BR/api-reference/kickoff",
                      "pt-BR/api-reference/resume",
-                      "pt-BR/api-reference/status",
-                      "pt-BR/api-reference/stop"
+                      "pt-BR/api-reference/status"
                    ]
                  }
                ]
@@ -5043,6 +5093,12 @@
                    "pages": [
                      "pt-BR/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Segurança",
+                    "pages": [
+                      "pt-BR/security"
+                    ]
                  }
                ]
              },
@@ -5168,8 +5224,7 @@
                      "pt-BR/api-reference/inputs",
                      "pt-BR/api-reference/kickoff",
                      "pt-BR/api-reference/resume",
-                      "pt-BR/api-reference/status",
-                      "pt-BR/api-reference/stop"
+                      "pt-BR/api-reference/status"
                    ]
                  }
                ]
@@ -5497,6 +5552,12 @@
                    "pages": [
                      "pt-BR/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Segurança",
+                    "pages": [
+                      "pt-BR/security"
+                    ]
                  }
                ]
              },
@@ -5622,8 +5683,7 @@
                      "pt-BR/api-reference/inputs",
                      "pt-BR/api-reference/kickoff",
                      "pt-BR/api-reference/resume",
-                      "pt-BR/api-reference/status",
-                      "pt-BR/api-reference/stop"
+                      "pt-BR/api-reference/status"
                    ]
                  }
                ]
@@ -5951,6 +6011,12 @@
                    "pages": [
                      "pt-BR/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Segurança",
+                    "pages": [
+                      "pt-BR/security"
+                    ]
                  }
                ]
              },
@@ -6076,8 +6142,7 @@
                      "pt-BR/api-reference/inputs",
                      "pt-BR/api-reference/kickoff",
                      "pt-BR/api-reference/resume",
-                      "pt-BR/api-reference/status",
-                      "pt-BR/api-reference/stop"
+                      "pt-BR/api-reference/status"
                    ]
                  }
                ]
@@ -6406,6 +6471,12 @@
                    "pages": [
                      "pt-BR/telemetry"
                    ]
+                  },
+                  {
+                    "group": "Segurança",
+                    "pages": [
+                      "pt-BR/security"
+                    ]
                  }
                ]
              },
@@ -6531,8 +6602,7 @@
                      "pt-BR/api-reference/inputs",
                      "pt-BR/api-reference/kickoff",
                      "pt-BR/api-reference/resume",
-                      "pt-BR/api-reference/status",
-                      "pt-BR/api-reference/stop"
+                      "pt-BR/api-reference/status"
                    ]
                  }
                ]
@@ -6904,6 +6974,12 @@
                    "pages": [
                      "ko/telemetry"
                    ]
+                  },
+                  {
+                    "group": "보안",
+                    "pages": [
+                      "ko/security"
+                    ]
                  }
                ]
              },
@@ -7029,8 +7105,7 @@
                      "ko/api-reference/inputs",
                      "ko/api-reference/kickoff",
                      "ko/api-reference/resume",
-                      "ko/api-reference/status",
-                      "ko/api-reference/stop"
+                      "ko/api-reference/status"
                    ]
                  }
                ]
@@ -7371,6 +7446,12 @@
                    "pages": [
                      "ko/telemetry"
                    ]
+                  },
+                  {
+                    "group": "보안",
+                    "pages": [
+                      "ko/security"
+                    ]
                  }
                ]
              },
@@ -7496,8 +7577,7 @@
                      "ko/api-reference/inputs",
                      "ko/api-reference/kickoff",
                      "ko/api-reference/resume",
-                      "ko/api-reference/status",
-                      "ko/api-reference/stop"
+                      "ko/api-reference/status"
                    ]
                  }
                ]
@@ -7838,6 +7918,12 @@
                    "pages": [
                      "ko/telemetry"
                    ]
+                  },
+                  {
+                    "group": "보안",
+                    "pages": [
+                      "ko/security"
+                    ]
                  }
                ]
              },
@@ -7963,8 +8049,7 @@
                      "ko/api-reference/inputs",
                      "ko/api-reference/kickoff",
                      "ko/api-reference/resume",
-                      "ko/api-reference/status",
-                      "ko/api-reference/stop"
+                      "ko/api-reference/status"
                    ]
                  }
                ]
@@ -8305,6 +8390,12 @@
                    "pages": [
                      "ko/telemetry"
                    ]
+                  },
+                  {
+                    "group": "보안",
+                    "pages": [
+                      "ko/security"
+                    ]
                  }
                ]
              },
@@ -8430,8 +8521,7 @@
                      "ko/api-reference/inputs",
                      "ko/api-reference/kickoff",
                      "ko/api-reference/resume",
-                      "ko/api-reference/status",
-                      "ko/api-reference/stop"
+                      "ko/api-reference/status"
                    ]
                  }
                ]
@@ -8771,6 +8861,12 @@
                    "pages": [
                      "ko/telemetry"
                    ]
+                  },
+                  {
+                    "group": "보안",
+                    "pages": [
+                      "ko/security"
+                    ]
                  }
                ]
              },
@@ -8896,8 +8992,7 @@
                      "ko/api-reference/inputs",
                      "ko/api-reference/kickoff",
                      "ko/api-reference/resume",
-                      "ko/api-reference/status",
-                      "ko/api-reference/stop"
+                      "ko/api-reference/status"
                    ]
                  }
                ]
@@ -9237,6 +9332,12 @@
                    "pages": [
                      "ko/telemetry"
                    ]
+                  },
+                  {
+                    "group": "보안",
+                    "pages": [
+                      "ko/security"
+                    ]
                  }
                ]
              },
@@ -9362,8 +9463,7 @@
                      "ko/api-reference/inputs",
                      "ko/api-reference/kickoff",
                      "ko/api-reference/resume",
-                      "ko/api-reference/status",
-                      "ko/api-reference/stop"
+                      "ko/api-reference/status"
                    ]
                  }
                ]
@@ -9704,6 +9804,12 @@
                    "pages": [
                      "ko/telemetry"
                    ]
+                  },
+                  {
+                    "group": "보안",
+                    "pages": [
+                      "ko/security"
+                    ]
                  }
                ]
              },
@@ -9829,8 +9935,7 @@
                      "ko/api-reference/inputs",
                      "ko/api-reference/kickoff",
                      "ko/api-reference/resume",
-                      "ko/api-reference/status",
-                      "ko/api-reference/stop"
+                      "ko/api-reference/status"
                    ]
                  }
                ]
@@ -10202,6 +10307,12 @@
                    "pages": [
                      "ar/telemetry"
                    ]
+                  },
+                  {
+                    "group": "الأمان",
+                    "pages": [
+                      "ar/security"
+                    ]
                  }
                ]
              },
@@ -10327,8 +10438,7 @@
                      "ar/api-reference/inputs",
                      "ar/api-reference/kickoff",
                      "ar/api-reference/resume",
-                      "ar/api-reference/status",
-                      "ar/api-reference/stop"
+                      "ar/api-reference/status"
                    ]
                  }
                ]
@@ -10669,6 +10779,12 @@
                    "pages": [
                      "ar/telemetry"
                    ]
+                  },
+                  {
+                    "group": "الأمان",
+                    "pages": [
+                      "ar/security"
+                    ]
                  }
                ]
              },
@@ -10794,8 +10910,7 @@
                      "ar/api-reference/inputs",
                      "ar/api-reference/kickoff",
                      "ar/api-reference/resume",
-                      "ar/api-reference/status",
-                      "ar/api-reference/stop"
+                      "ar/api-reference/status"
                    ]
                  }
                ]
@@ -11136,6 +11251,12 @@
                    "pages": [
                      "ar/telemetry"
                    ]
+                  },
+                  {
+                    "group": "الأمان",
+                    "pages": [
+                      "ar/security"
+                    ]
                  }
                ]
              },
@@ -11261,8 +11382,7 @@
                      "ar/api-reference/inputs",
                      "ar/api-reference/kickoff",
                      "ar/api-reference/resume",
-                      "ar/api-reference/status",
-                      "ar/api-reference/stop"
+                      "ar/api-reference/status"
                    ]
                  }
                ]
@@ -11603,6 +11723,12 @@
                    "pages": [
                      "ar/telemetry"
                    ]
+                  },
+                  {
+                    "group": "الأمان",
+                    "pages": [
+                      "ar/security"
+                    ]
                  }
                ]
              },
@@ -11728,8 +11854,7 @@
                      "ar/api-reference/inputs",
                      "ar/api-reference/kickoff",
                      "ar/api-reference/resume",
-                      "ar/api-reference/status",
-                      "ar/api-reference/stop"
+                      "ar/api-reference/status"
                    ]
                  }
                ]
@@ -12069,6 +12194,12 @@
                    "pages": [
                      "ar/telemetry"
                    ]
+                  },
+                  {
+                    "group": "الأمان",
+                    "pages": [
+                      "ar/security"
+                    ]
                  }
                ]
              },
@@ -12194,8 +12325,7 @@
                      "ar/api-reference/inputs",
                      "ar/api-reference/kickoff",
                      "ar/api-reference/resume",
-                      "ar/api-reference/status",
-                      "ar/api-reference/stop"
+                      "ar/api-reference/status"
                    ]
                  }
                ]
@@ -12535,6 +12665,12 @@
                    "pages": [
                      "ar/telemetry"
                    ]
+                  },
+                  {
+                    "group": "الأمان",
+                    "pages": [
+                      "ar/security"
+                    ]
                  }
                ]
              },
@@ -12660,8 +12796,7 @@
                      "ar/api-reference/inputs",
                      "ar/api-reference/kickoff",
                      "ar/api-reference/resume",
-                      "ar/api-reference/status",
-                      "ar/api-reference/stop"
+                      "ar/api-reference/status"
                    ]
                  }
                ]
@@ -13002,6 +13137,12 @@
                    "pages": [
                      "ar/telemetry"
                    ]
+                  },
+                  {
+                    "group": "الأمان",
+                    "pages": [
+                      "ar/security"
+                    ]
                  }
                ]
              },
@@ -13127,8 +13268,7 @@
                      "ar/api-reference/inputs",
                      "ar/api-reference/kickoff",
                      "ar/api-reference/resume",
-                      "ar/api-reference/status",
-                      "ar/api-reference/stop"
+                      "ar/api-reference/status"
                    ]
                  }
                ]
@@ -13319,4 +13459,4 @@
      "reddit": "https://www.reddit.com/r/crewAIInc/"
    }
  }
-}
+}
--- a/docs/en/api-reference/stop.mdx
+++ b/docs/en/api-reference/stop.mdx
@@ -1,8 +0,0 @@
---
-title: "POST /stop/{kickoff_id}"
-description: "Stop a running crew execution"
-openapi: "/enterprise-api.en.yaml POST /stop/{kickoff_id}"
-mode: "wide"
---
-
-
--- a/docs/en/enterprise/guides/kickoff-crew.mdx
+++ b/docs/en/enterprise/guides/kickoff-crew.mdx
@@ -146,36 +146,6 @@ curl -X GET \
  https://your-crew-url.crewai.com/status/abcd1234-5678-90ef-ghij-klmnopqrstuv
 ```

-## Stopping a Running Execution
-
-You can stop or cancel a running crew or flow execution at any time using the stop endpoint. This is useful when you need to abort a long-running execution or cancel one that is no longer needed.
-
-### Stop an Execution
-
-Send a POST request with the `kickoff_id` of the execution you want to stop:
-
-```bash
-curl -X POST \
-  -H "Authorization: Bearer YOUR_CREW_TOKEN" \
-  https://your-crew-url.crewai.com/stop/abcd1234-5678-90ef-ghij-klmnopqrstuv
-```
-
-**Success Response:**
-
-```json
-{"status": "stopped", "kickoffId": "abcd1234-5678-90ef-ghij-klmnopqrstuv"}
-```
-
-**Error Response** (when the execution has already finished):
-
-```json
-{"detail": "Cannot stop execution. Current state: SUCCESS"}
-```
-
-<Note>
-  You cannot stop executions that have already completed (`SUCCESS`), failed (`FAILURE`), or been revoked (`REVOKED`). The API returns a `400` status code in those cases.
-</Note>
-
 ## Handling Executions

 ### Long-Running Executions
--- a/docs/en/mcp/security.mdx
+++ b/docs/en/mcp/security.mdx
@@ -156,7 +156,19 @@ If you are developing an MCP server that CrewAI agents might connect to, conside
 - **Adherence to MCP Authorization Spec**: If implementing authentication and authorization, strictly follow the [MCP Authorization specification](https://modelcontextprotocol.io/specification/draft/basic/authorization) and relevant [OAuth 2.0 security best practices](https://datatracker.ietf.org/doc/html/rfc9700).
 - **Regular Security Audits**: If your MCP server handles sensitive data, performs critical operations, or is publicly exposed, consider periodic security audits by qualified professionals.

-## 5. Further Reading
+## 5. Reporting Security Vulnerabilities
+
+If you discover a security vulnerability in CrewAI, please report it responsibly through our Bugcrowd Vulnerability Disclosure Program (VDP):
+
+**Submit reports to:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+**Do not** disclose vulnerabilities via public GitHub issues, pull requests, or social media. Reports submitted via channels other than Bugcrowd will not be reviewed.
+</Warning>
+
+For full details, see our [Security Policy](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md).
+
+## 6. Further Reading

 For more detailed information on MCP security, refer to the official documentation:
 - **[MCP Transport Security](https://modelcontextprotocol.io/docs/concepts/transports#security-considerations)**
--- a/docs/en/security.mdx
+++ b/docs/en/security.mdx
@@ -0,0 +1,22 @@
+---
+title: Security Policy
+description: Learn how to report security vulnerabilities and about CrewAI's security practices.
+icon: shield
+mode: "wide"
+---
+
+## Reporting Security Vulnerabilities
+
+If you discover a security vulnerability in CrewAI, please report it responsibly through our Bugcrowd Vulnerability Disclosure Program (VDP):
+
+**Submit reports to:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+**Do not** disclose vulnerabilities via public GitHub issues, pull requests, or social media. Reports submitted via channels other than Bugcrowd will not be reviewed.
+</Warning>
+
+For full details, see our [Security Policy on GitHub](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md).
+
+## Security Resources
+
+- **[MCP Security Considerations](/en/mcp/security)** — Best practices for securely integrating MCP servers with your CrewAI agents, including transport security, prompt injection risks, and server implementation advice.
--- a/docs/enterprise-api.base.yaml
+++ b/docs/enterprise-api.base.yaml
@@ -36,7 +36,6 @@ info:
    1. **Discover inputs** using `GET /inputs`
    2. **Start execution** using `POST /kickoff`
    3. **Monitor progress** using `GET /{kickoff_id}/status`
-    4. **Stop execution** (if needed) using `POST /stop/{kickoff_id}`
  version: 1.0.0
  contact:
    name: CrewAI Support
@@ -285,56 +284,6 @@ paths:
        "500":
          $ref: "#/components/responses/ServerError"

-  /stop/{kickoff_id}:
-    post:
-      summary: Stop Crew Execution
-      description: |
-        **📋 Reference Example Only** - *This shows the request format. To test with your actual crew, copy the cURL example and replace the URL + token with your real values.*
-
-        Stops or cancels a running crew or flow execution. The execution must be in an active state
-        (not SUCCESS, FAILURE, or REVOKED).
-      operationId: stopCrewExecution
-      parameters:
-        - name: kickoff_id
-          in: path
-          required: true
-          description: The kickoff ID of the execution to stop
-          schema:
-            type: string
-            format: uuid
-            example: "abcd1234-5678-90ef-ghij-klmnopqrstuv"
-      responses:
-        "200":
-          description: Successfully stopped the execution
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/StopExecutionResponse"
-              example:
-                status: "stopped"
-                kickoffId: "abcd1234-5678-90ef-ghij-klmnopqrstuv"
-        "400":
-          description: Execution is already in a terminal state (SUCCESS, FAILURE, or REVOKED)
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/Error"
-              example:
-                detail: "Cannot stop execution. Current state: SUCCESS"
-        "401":
-          $ref: "#/components/responses/UnauthorizedError"
-        "404":
-          description: Kickoff ID not found
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/Error"
-              example:
-                error: "Execution not found"
-                message: "No execution found with ID: abcd1234-5678-90ef-ghij-klmnopqrstuv"
-        "500":
-          $ref: "#/components/responses/ServerError"
-
  /resume:
    post:
      summary: Resume Crew Execution with Human Feedback
@@ -559,19 +508,6 @@ components:
          description: Time taken to execute this task in seconds
          example: 45.2

-    StopExecutionResponse:
-      type: object
-      properties:
-        status:
-          type: string
-          enum: ["stopped"]
-          description: Indicates the execution was successfully stopped
-          example: "stopped"
-        kickoffId:
-          type: string
-          description: The kickoff ID of the stopped execution
-          example: "abcd1234-5678-90ef-ghij-klmnopqrstuv"
-
    Error:
      type: object
      properties:
--- a/docs/enterprise-api.en.yaml
+++ b/docs/enterprise-api.en.yaml
@@ -36,7 +36,6 @@ info:
    1. **Discover inputs** using `GET /inputs`
    2. **Start execution** using `POST /kickoff`
    3. **Monitor progress** using `GET /{kickoff_id}/status`
-    4. **Stop execution** (if needed) using `POST /stop/{kickoff_id}`
  version: 1.0.0
  contact:
    name: CrewAI Support
@@ -285,56 +284,6 @@ paths:
        "500":
          $ref: "#/components/responses/ServerError"

-  /stop/{kickoff_id}:
-    post:
-      summary: Stop Crew Execution
-      description: |
-        **📋 Reference Example Only** - *This shows the request format. To test with your actual crew, copy the cURL example and replace the URL + token with your real values.*
-
-        Stops or cancels a running crew or flow execution. The execution must be in an active state
-        (not SUCCESS, FAILURE, or REVOKED).
-      operationId: stopCrewExecution
-      parameters:
-        - name: kickoff_id
-          in: path
-          required: true
-          description: The kickoff ID of the execution to stop
-          schema:
-            type: string
-            format: uuid
-            example: "abcd1234-5678-90ef-ghij-klmnopqrstuv"
-      responses:
-        "200":
-          description: Successfully stopped the execution
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/StopExecutionResponse"
-              example:
-                status: "stopped"
-                kickoffId: "abcd1234-5678-90ef-ghij-klmnopqrstuv"
-        "400":
-          description: Execution is already in a terminal state (SUCCESS, FAILURE, or REVOKED)
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/Error"
-              example:
-                detail: "Cannot stop execution. Current state: SUCCESS"
-        "401":
-          $ref: "#/components/responses/UnauthorizedError"
-        "404":
-          description: Kickoff ID not found
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/Error"
-              example:
-                error: "Execution not found"
-                message: "No execution found with ID: abcd1234-5678-90ef-ghij-klmnopqrstuv"
-        "500":
-          $ref: "#/components/responses/ServerError"
-
  /resume:
    post:
      summary: Resume Crew Execution with Human Feedback
@@ -559,19 +508,6 @@ components:
          description: Time taken to execute this task in seconds
          example: 45.2

-    StopExecutionResponse:
-      type: object
-      properties:
-        status:
-          type: string
-          enum: ["stopped"]
-          description: Indicates the execution was successfully stopped
-          example: "stopped"
-        kickoffId:
-          type: string
-          description: The kickoff ID of the stopped execution
-          example: "abcd1234-5678-90ef-ghij-klmnopqrstuv"
-
    Error:
      type: object
      properties:
--- a/docs/enterprise-api.ko.yaml
+++ b/docs/enterprise-api.ko.yaml
@@ -120,46 +120,6 @@ paths:
        '500':
          $ref: '#/components/responses/ServerError'

-  /stop/{kickoff_id}:
-    post:
-      summary: 실행 중지
-      description: |
-        **📋 참조 예제만 제공** - *요청 형식을 보여줍니다. 실제 호출은 cURL 예제를 복사해 URL과 토큰을 교체하세요.*
-
-        실행 중인 crew 또는 flow 실행을 중지하거나 취소합니다. 실행이 활성 상태여야 합니다
-        (SUCCESS, FAILURE, REVOKED 상태가 아닌 경우).
-      operationId: stopCrewExecution
-      parameters:
-        - name: kickoff_id
-          in: path
-          required: true
-          schema:
-            type: string
-            format: uuid
-      responses:
-        '200':
-          description: 실행을 성공적으로 중지
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/StopExecutionResponse'
-        '400':
-          description: 실행이 이미 종료 상태 (SUCCESS, FAILURE, REVOKED)
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/Error'
-        '401':
-          $ref: '#/components/responses/UnauthorizedError'
-        '404':
-          description: Kickoff ID를 찾을 수 없음
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/Error'
-        '500':
-          $ref: '#/components/responses/ServerError'
-
  /resume:
    post:
      summary: Resume Crew Execution with Human Feedback
@@ -354,15 +314,6 @@ components:
        execution_time:
          type: number

-    StopExecutionResponse:
-      type: object
-      properties:
-        status:
-          type: string
-          enum: ["stopped"]
-        kickoffId:
-          type: string
-
    Error:
      type: object
      properties:
--- a/docs/enterprise-api.pt-BR.yaml
+++ b/docs/enterprise-api.pt-BR.yaml
@@ -36,7 +36,6 @@ info:
    1. **Descubra os inputs** usando `GET /inputs`
    2. **Inicie a execução** usando `POST /kickoff`
    3. **Monitore o progresso** usando `GET /{kickoff_id}/status`
-    4. **Pare a execução** (se necessário) usando `POST /stop/{kickoff_id}`
  version: 1.0.0
  contact:
    name: CrewAI Suporte
@@ -157,46 +156,6 @@ paths:
        "500":
          $ref: "#/components/responses/ServerError"

-  /stop/{kickoff_id}:
-    post:
-      summary: Parar Execução da Crew
-      description: |
-        **📋 Exemplo de Referência** - *Mostra o formato da requisição. Para testar com sua crew real, copie o cURL e substitua URL + token.*
-
-        Para ou cancela uma execução de crew ou flow em andamento. A execução deve estar em um estado ativo
-        (não SUCCESS, FAILURE ou REVOKED).
-      operationId: stopCrewExecution
-      parameters:
-        - name: kickoff_id
-          in: path
-          required: true
-          schema:
-            type: string
-            format: uuid
-      responses:
-        "200":
-          description: Execução parada com sucesso
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/StopExecutionResponse"
-        "400":
-          description: Execução já em estado terminal (SUCCESS, FAILURE ou REVOKED)
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/Error"
-        "401":
-          $ref: "#/components/responses/UnauthorizedError"
-        "404":
-          description: Kickoff ID não encontrado
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/Error"
-        "500":
-          $ref: "#/components/responses/ServerError"
-
  /resume:
    post:
      summary: Resume Crew Execution with Human Feedback
@@ -392,15 +351,6 @@ components:
        execution_time:
          type: number

-    StopExecutionResponse:
-      type: object
-      properties:
-        status:
-          type: string
-          enum: ["stopped"]
-        kickoffId:
-          type: string
-
    Error:
      type: object
      properties:
--- a/docs/ko/api-reference/stop.mdx
+++ b/docs/ko/api-reference/stop.mdx
@@ -1,8 +0,0 @@
---
-title: "POST /stop/{kickoff_id}"
-description: "실행 중인 크루 실행 중지"
-openapi: "/enterprise-api.ko.yaml POST /stop/{kickoff_id}"
-mode: "wide"
---
-
-
--- a/docs/ko/mcp/security.mdx
+++ b/docs/ko/mcp/security.mdx
@@ -156,7 +156,19 @@ CrewAI 에이전트가 연결할 수 있는 MCP 서버를 개발하고 있다면
 - **MCP 인증 사양 준수**: 인증 및 권한 부여를 구현할 경우, [MCP Authorization specification](https://modelcontextprotocol.io/specification/draft/basic/authorization) 및 관련 [OAuth 2.0 security best practices](https://datatracker.ietf.org/doc/html/rfc9700)를 엄격히 준수하세요.
 - **정기적인 보안 감사**: MCP 서버가 민감한 데이터를 처리하거나, 중요한 작업을 수행하거나, 대외적으로 노출된 경우 자격을 갖춘 전문가의 정기적인 보안 감사를 고려하세요.

-## 5. 추가 참고 자료
+## 5. 보안 취약점 보고
+
+CrewAI에서 보안 취약점을 발견하셨다면, Bugcrowd 취약점 공개 프로그램(VDP)을 통해 책임감 있게 보고해 주세요:
+
+**보고서 제출:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+공개 GitHub 이슈, 풀 리퀘스트 또는 소셜 미디어를 통해 취약점을 공개하지 **마세요**. Bugcrowd 이외의 채널로 제출된 보고서는 검토되지 않습니다.
+</Warning>
+
+자세한 내용은 [보안 정책](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md)을 참조하세요.
+
+## 6. 추가 참고 자료

 MCP 보안에 대한 자세한 내용은 공식 문서를 참고하세요:
 - **[MCP 전송 보안](https://modelcontextprotocol.io/docs/concepts/transports#security-considerations)**
--- a/docs/ko/security.mdx
+++ b/docs/ko/security.mdx
@@ -0,0 +1,22 @@
+---
+title: 보안 정책
+description: CrewAI의 보안 취약점 보고 방법과 보안 관행에 대해 알아보세요.
+icon: shield
+mode: "wide"
+---
+
+## 보안 취약점 보고
+
+CrewAI에서 보안 취약점을 발견하셨다면, Bugcrowd 취약점 공개 프로그램(VDP)을 통해 책임감 있게 보고해 주세요:
+
+**보고서 제출:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+공개 GitHub 이슈, 풀 리퀘스트 또는 소셜 미디어를 통해 취약점을 공개하지 **마세요**. Bugcrowd 이외의 채널로 제출된 보고서는 검토되지 않습니다.
+</Warning>
+
+자세한 내용은 [GitHub 보안 정책](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md)을 참조하세요.
+
+## 보안 리소스
+
+- **[MCP 보안 고려사항](/ko/mcp/security)** — MCP 서버를 CrewAI 에이전트와 안전하게 통합하기 위한 모범 사례로, 전송 보안, 프롬프트 인젝션 위험 및 서버 구현 권장 사항을 포함합니다.
--- a/docs/pt-BR/api-reference/stop.mdx
+++ b/docs/pt-BR/api-reference/stop.mdx
@@ -1,8 +0,0 @@
---
-title: "POST /stop/{kickoff_id}"
-description: "Parar uma execução de crew em andamento"
-openapi: "/enterprise-api.pt-BR.yaml POST /stop/{kickoff_id}"
-mode: "wide"
---
-
-
--- a/docs/pt-BR/mcp/security.mdx
+++ b/docs/pt-BR/mcp/security.mdx
@@ -156,7 +156,19 @@ Se você está desenvolvendo um servidor MCP ao qual agentes CrewAI possam se co
 - **Aderência à Especificação de Autorização MCP**: Caso implemente autenticação e autorização, siga estritamente a [especificação de autorização MCP](https://modelcontextprotocol.io/specification/draft/basic/authorization) e as [melhores práticas de segurança OAuth 2.0](https://datatracker.ietf.org/doc/html/rfc9700) relevantes.
 - **Auditorias de Segurança Regulares**: Caso seu servidor MCP manipule dados sensíveis, realize operações críticas ou seja exposto publicamente, considere auditorias de segurança periódicas conduzidas por profissionais qualificados.

-## 5. Leituras Adicionais
+## 5. Reportando Vulnerabilidades de Segurança
+
+Se você descobrir uma vulnerabilidade de segurança no CrewAI, por favor reporte de forma responsável através do nosso Programa de Divulgação de Vulnerabilidades (VDP) no Bugcrowd:
+
+**Envie relatórios para:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+**Não** divulgue vulnerabilidades por meio de issues públicas no GitHub, pull requests ou redes sociais. Relatórios enviados por outros canais que não o Bugcrowd não serão analisados.
+</Warning>
+
+Para mais detalhes, consulte nossa [Política de Segurança](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md).
+
+## 6. Leituras Adicionais

 Para informações mais detalhadas sobre segurança MCP, consulte a documentação oficial:
 - **[Segurança de Transporte MCP](https://modelcontextprotocol.io/docs/concepts/transports#security-considerations)**
--- a/docs/pt-BR/security.mdx
+++ b/docs/pt-BR/security.mdx
@@ -0,0 +1,22 @@
+---
+title: Política de Segurança
+description: Saiba como reportar vulnerabilidades de segurança e sobre as práticas de segurança do CrewAI.
+icon: shield
+mode: "wide"
+---
+
+## Reportando Vulnerabilidades de Segurança
+
+Se você descobrir uma vulnerabilidade de segurança no CrewAI, por favor reporte de forma responsável através do nosso Programa de Divulgação de Vulnerabilidades (VDP) no Bugcrowd:
+
+**Envie relatórios para:** [crewai-vdp-ess@submit.bugcrowd.com](mailto:crewai-vdp-ess@submit.bugcrowd.com)
+
+<Warning>
+**Não** divulgue vulnerabilidades por meio de issues públicas no GitHub, pull requests ou redes sociais. Relatórios enviados por outros canais que não o Bugcrowd não serão analisados.
+</Warning>
+
+Para mais detalhes, consulte nossa [Política de Segurança no GitHub](https://github.com/crewAIInc/crewAI/blob/main/.github/security.md).
+
+## Recursos de Segurança
+
+- **[Considerações de Segurança MCP](/pt-BR/mcp/security)** — Melhores práticas para integrar servidores MCP com segurança aos seus agentes CrewAI, incluindo segurança de transporte, riscos de injeção de prompt e conselhos de implementação de servidor.