diff --git a/package-lock.json b/package-lock.json
index 93edc6b..c62a897 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1204,9 +1204,9 @@
       "license": "ISC"
     },
     "node_modules/zod": {
-      "version": "4.4.3",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz",
-      "integrity": "sha512-ytENFjIJFl2UwYglde2jchW2Hwm4GJFLDiSXWdTrJQBIN9Fcyp7n4DhxJEiWNAJMV1/BqWfW/kkg71UDcHJyTQ==",
+      "version": "4.6.6",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.6.tgz",
+      "integrity": "sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
@@ -1258,7 +1258,7 @@
       "dependencies": {
         "@agent-wallclock/core": "*",
         "@modelcontextprotocol/sdk": "^1.12.1",
-        "zod": "^4.4.3"
+        "zod": "^4.6.6"
       },
       "bin": {
         "agent-wallclock-mcp": "dist/server.js"
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
index d164910..b274af6 100644
--- a/packages/mcp/package.json
+++ b/packages/mcp/package.json
@@ -19,7 +19,7 @@
   "dependencies": {
     "@agent-wallclock/core": "*",
     "@modelcontextprotocol/sdk": "^1.12.1",
-    "zod": "^4.4.3"
+    "zod": "^4.6.6"
   },
   "engines": {
     "node": ">=20"