Pangolin MCP Server
Pangolin Integration API access for AI assistants built in Rust.
Data last scanned today · Reviewed today
Overview
Pangolin MCP Server provides a bridge between your local AI workflows and the Pangolin Integration API. By utilizing the Model Context Protocol, it allows compatible AI assistants to interface with Pangolin-based tools directly. The server is written in Rust, leveraging the language's performance and safety characteristics. It is designed to handle interactions within the MCP ecosystem, allowing developers to extend their assistant's capabilities to include Pangolin-specific functions and data.
Our verdict
This server carries a high risk level with a security score of 24/100, primarily due to the lack of an editorially reviewed authentication method and unverified read-only modes. As a community-maintained project with a single contributor and no official vendor backing, it is recommended only for experimental or non-critical environments where security audits are not a primary requirement.
- Implemented in Rust for memory safety and performance
- Zero direct dependencies reduces the supply chain attack surface
- Includes clear, documented setup instructions in the README
- Open-source software licensed under MIT
- High security risk due to unreviewed authentication methods
- Single contributor presents a notable bus-factor risk
- Lacks editorial review of core security implementation
- No official vendor maintenance or support
Tools
| Tool | Description | Risk |
|---|---|---|
| orgs | List all organizations | low |
| org_by_orgId | Get an organization by ID | low |
| create_org | Create a new organization | medium |
| update_org_by_orgId | Update an organization | medium |
| delete_org_by_orgId | Delete an organization | high |
| org_by_orgId_sites | List all sites in an organization | low |
| site_by_siteId | Get a site by ID | low |
| create_org_by_orgId_site | Create a new site | medium |
| update_site_by_siteId | Update a site | medium |
| delete_site_by_siteId | Delete a site | high |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What are the core requirements to run this server?
You need a stable Rust installation, access to a Pangolin instance, and a valid Pangolin API key.
›How can I prevent the MCP server from modifying my infrastructure?
You can enable read-only mode by passing the --read-only flag or by setting the PANGOLIN_READ_ONLY environment variable to true.
›What information must be provided for the OpenAPI specification?
You must provide the specification either as a file path via the PANGOLIN_OPENAPI_FILE variable or as raw JSON via the PANGOLIN_OPENAPI_JSON variable.
›How does the server authenticate with the Pangolin API?
The server uses Bearer token authentication, which requires you to provide a valid API key via the PANGOLIN_API_KEY environment variable.
Badge
Maintain this server? Add the live badge to your README.