Pinecone MCP Server
@pinecone-database/mcp
npm
v0.2.1
Official
Published by Pinecone — an official vendor package. A brand name in a package name proves nothing; this one is verified by npm scope ownership or publish provenance.
Lets AI assistants interact with Pinecone vector database indexes and documentation.
Started at 100 and nothing was deducted: the deterministic scan raised no scored threat in the published surface it inspected. Capability observations and advisory notes are recorded but never lower the score.
Findings 0
What this scan could not see
- No tools were enumerated, so prompt-injection, capability and toxic-flow analysis had no tool surface to inspect. To grade a package’s real runtime tools, scan the running server: --command "npx -y <package>".
Versions
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.2.1 latest |
A 100/100 | 0 | 1.5.0 | 2026-07-22 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @pinecone-database/mcp --onlineMore in Databases
Security scan results for the 1c Rest MCP server.
Security scan results for the A5sql MCP server.
Security scan results for the Adb Mysql MCP server.
Security scan results for the Agentskit MCP server.
Security scan results for the Aifordatabase MCP server.
Security scan results for the Ainative Postgres MCP server.