diff --git a/mcp/package-lock.json b/mcp/package-lock.json
index 3f496f6..febe2d4 100644
--- a/mcp/package-lock.json
+++ b/mcp/package-lock.json
@@ -18,7 +18,7 @@
         "express": "^5.1.0",
         "openai": "^4.104.0",
         "sqlite-vec": "0.1.7-alpha.2",
-        "zod": "^3.24.2"
+        "zod": "^3.25.76"
       },
       "bin": {
         "doc-query": "build/index.js"
@@ -2259,9 +2259,10 @@
       }
     },
     "node_modules/zod": {
-      "version": "3.24.2",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.24.2.tgz",
-      "integrity": "sha512-lY7CDW43ECgW9u1TcT3IoXHflywfVqDYze4waEz812jR/bZ8FHDsl7pFQoSZTz5N+2NqRXs8GBwnAwo3ZNxqhQ==",
+      "version": "3.25.76",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
+      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+      "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
       }
diff --git a/mcp/package.json b/mcp/package.json
index 55a8ad7..02fd7ff 100644
--- a/mcp/package.json
+++ b/mcp/package.json
@@ -33,7 +33,7 @@
     "express": "^5.1.0",
     "openai": "^4.104.0",
     "sqlite-vec": "0.1.7-alpha.2",
-    "zod": "^3.24.2"
+    "zod": "^3.25.76"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.13",