Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got a B
An MIT community server from one developer (GitHub pandadad0214, "Panda Federation"), on PyPI and in the official MCP Registry since November 2026. It's a thin wrapper: each tool runs one of the author's Actors on Apify, billed to your own Apify account. Fifteen tools build lead lists: local businesses from OpenStreetMap, US healthcare providers, podcasts, company hiring, company websites and team pages, trucking carriers, nonprofits, building permits, new businesses in Florida, Texas, New York and Colorado, H-1B sponsors and French companies. Many rows are about people, not companies. npi_provider_lists returns individual providers' NPI numbers, names, specialties, practice addresses and phones. company_team_finder reads company team pages for names, titles, published emails, LinkedIn links and a guessed email (emailGuess, with a confidence level; verify it before you send). podcast_leads_finder returns hosts' emails from their RSS feeds, and the registry tools return company officers, CEOs, registered agents or directors (Colorado flags agents who are likely the owner). company_hiring_signals stays at company level: open-job counts and job titles, no people. The data is public, but emailing or calling these people is covered by privacy and anti-spam laws such as GDPR and CAN-SPAM, so check yours before you use a list. Results cost about $0.001 to $0.004 each. Each call is capped at $0.50 by default, but the AI can raise that cap to $25 for a call, and PANDA_MAX_CHARGE_USD only changes the default. Every tool is marked read-only, so a client that skips approval for read-only tools won't ask before a call spends money. The Actors that do the work are closed source, but they run with Apify's limited permissions, so they can't read the rest of your Apify account. No advisories on record. Biggest deduction: the README has you paste your default Apify token, which can use your whole Apify account; create a scoped token that can only run pandadad0214's Actors, with an expiry date, and use that instead.
How to connect
// Cursor MCP config (README)
{"mcpServers": {"panda-leads-tools": {"command": "uvx", "args": ["panda-leads-tools"], "env": {"APIFY_TOKEN": "apify_api_YOUR_TOKEN"}}}}
Is Panda Leads Tools safe?
Is Panda Leads Tools safe to use?
Panda Leads Tools grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested. It runs locally over stdio, so it acts with your machine's access.
Does Panda Leads Tools have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Panda Leads Tools support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in CRM & Sales
- A HubSpot MCP ServerOfficial hosted HubSpot server for contacts, companies, deals, tickets, and engagements, with OAuth sign-in.
- A Patto MCP ServerHosted server for PR, link-building and sales outreach that keeps contacts and campaigns, drafts and sends email from your brand's mailbox, and tracks replies and follow-ups.
- A ToolsPad MCP ServerHosted server that connects an assistant to one approved ToolsPad workspace for CRM contacts, opportunities, notes, tasks and forms, with separate read and write OAuth scopes.
- B Attio MCPOfficial hosted Attio server for records, lists, notes, tasks, and activities, with OAuth sign-in.
- B Clay MCP ServerOfficial hosted Clay server to find and enrich people and companies, check credits and run your workspace's Functions from Claude, ChatGPT and other AI tools.
Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.