← Back to search

@pinecone-database/mcp

GitHub Actions Scanned 9d ago

Model Context Protocol server for Pinecone - enables AI assistants to interact with Pinecone indexes and documentation

npm ↗
A
92 / 100

Versions

0.2.1latest
Feb 5, 2026
0.2.0-dev.20260205225305
Feb 5, 2026
0.2.0
Jan 27, 2026
0.1.17-dev.20260126215951
Jan 26, 2026
0.1.17-dev.20260123161004
Jan 23, 2026
+ show 14 moreshow less
0.1.17
Sep 25, 2025
0.1.16
Sep 15, 2025
0.1.15
Jun 24, 2025
0.1.14
Apr 22, 2025
0.1.13
Apr 22, 2025
0.1.12
Apr 22, 2025
0.1.11
Apr 19, 2025
0.1.10
Apr 18, 2025
0.1.9
Apr 18, 2025
0.1.8
Apr 12, 2025
0.1.7
Apr 12, 2025
0.1.4
Apr 10, 2025
0.1.3
Apr 10, 2025
0.1.2
Apr 10, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

search-docs
annotations: verified low

readOnlyHint true

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 14

info
Tool 'search-docs' annotations are consistent annotation_checker · 80%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.3 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
High-entropy string (6.00 bits/char) in pinecone-io-pinecone-mcp-a15d4b9/src/error.ts:3 entropy_analyzer · 54%
medium
High-entropy string (5.75 bits/char) in pinecone-io-pinecone-mcp-a15d4b9/src/error.ts:4 entropy_analyzer · 51%
info
package.json metadata manifest_parser · 100%
info
Tool: search-docs manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 266 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%