Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got a B
Pinecone's own local server (Apache-2.0, npm @pinecone-database/mcp, stdio,
Node 22 or later), the one Pinecone's Claude plugin
(pinecone-io/pinecone-claude-code-plugin) starts with npx -y and no version
pin. It is for coding assistants and is not the separate Pinecone Assistant
MCP, which is not graded here. Tools search the Pinecone docs, list and
describe indexes, and search, rerank, create and upsert; there is no delete
tool. Without an API key it only searches the docs. Biggest deduction: auth
is a single PINECONE_API_KEY environment variable with no OAuth, and on
Pinecone's Starter and Builder plans a key can only have all permissions, so
the create and upsert tools can change data in that project (upsert replaces
records with the same ID); use a key with a limited role where your plan
allows it, keep tool approval on, and pin the package version.
How to connect
npx -y @pinecone-database/mcpIs Pinecone Developer MCP Server safe?
Is Pinecone Developer MCP Server safe to use?
Pinecone Developer MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. It runs locally over stdio, so it acts with your machine's access.
Does Pinecone Developer MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Pinecone Developer MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A Airtable MCP ServerAirtable's own hosted server. List your workspaces and bases, read and search records, and create or update them, using the permissions you already have in Airtable.
- A ClickHouse MCP ServerClickHouse's official hosted MCP server for ClickHouse Cloud - read-only SELECT queries, schema browsing, and service, backup, ClickPipes and billing tools, with OAuth or a scoped API key.
- A Databricks Managed MCP ServersDatabricks-hosted MCP servers in each workspace for Genie, SQL, Unity Catalog functions and vector search, signed in with OAuth and limited by Unity Catalog.
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
- A Neon MCP ServerOfficial hosted Neon server to manage Postgres projects and branches, run SQL, and inspect schema.
Embed this badge
[](https://trustedmcp.io/servers/pinecone-mcp)<a href="https://trustedmcp.io/servers/pinecone-mcp"><img src="https://trustedmcp.io/badge/pinecone-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.