diff --git a/_INDEX.md b/_INDEX.md
index 83148be..45b8af3 100644
--- a/_INDEX.md
+++ b/_INDEX.md
@@ -27,6 +27,7 @@
 | [Audit sécurité mcp-nas — RCE root anonyme, P0 fermés + durcissement (reste: rotation)](common/mcp-nas-security-audit.md) | 2026-07-09 | securite, mcp-nas, rce, rotation |
 | [Permissions credentials/clés — piège 777](common/permissions-credentials-cles-chmod.md) | 2026-07-05 | securite, credentials, chmod |
 | [Décommission wg-easy (remplacé par Tailscale)](common/wg-easy-decommission-tailscale.md) | 2026-07-08 | wireguard, tailscale, vpn |
+| [Pattern IP sessions Claude-User (mcp-vps/mcp-nas) + incident exposition tokens Gitea](common/mcp-sessions-pattern.md) | 2026-07-12 | securite, mcp, faux-positif, tokens |
 
 ## common — Stack & fiabilité