← Scan another
Clean
github · 15 files analyzed

sirmews/mcp-pinecone

No risky behavior detected.

View source ↗

Check your own MCP server

Free · no signup · instant shareable report.

Outbound network 1
Environment variables (config / keys) 1

AI review

This is a standard Pinecone MCP server that reads/writes to a Pinecone vector index. It requires environment variables for authentication (PINECONE_API_KEY, PINECONE_INDEX_NAME) but only uses them locally to connect to the Pinecone service. There are no hidden instructions, prompt injection vectors, data exfiltration mechanisms, or deceptive tool descriptions. The code matches its documented purpose of providing semantic search and document management over a Pinecone index.

Model: deepseek-chat

Static findings

Environment variables (config / keys) · Reads environment variables (config / API keys)

low src/mcp_pinecone/constants.py:24 index_name = args.index_name or os.getenv("PINECONE_INDEX_NAME")

Outbound network · Makes outbound network requests

low src/mcp_pinecone/pinecone.py:257 return self.index.fetch(ids=ids, namespace=namespace)

Scanning every extension your team installs?

Pro & Team add monitoring, private scans, and a CI gate for unsafe extensions.

MCPVet is a heuristic aid, not a security guarantee. A clean grade does not prove an extension is safe; always review code and instructions you don't trust.