Pangea MCP Server

A Model Context Protocol (MCP) server that provides integration with Pangea APIs

Remote serverstreamable-httpGo

What is the Pangea MCP Server?

A Model Context Protocol (MCP) server that provides integration with Pangea APIs

Credentials and setup notes

  • Node.js v24.11.0 or greater. - A Pangea API token with access to all of AI Guard, Domain Intel, Embargo, IP Intel, Redact, Secure Audit Log, URL Intel, and Vault. This token needs to be stored in Pangea Vault. See [Service Tokens][] for documentation on how to create and manage Pangea API tokens. - A Pangea API token with access to Vault. This will be used to fetch the above token at runtime. -

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
prompt_guardAnalyze and redact text to avoid manipulation of the model, addition of malicious content, and other undesirable data transfers.
lookup_domain_reputationLook up reputation score(s) for one or more domains.
whoisRetrieve WHOIS (an Internet resource's registered users or assignees) for a domain.
check_ip_embargoCheck one or more IP addresses against known sanction and trade embargo lists.
check_iso_code_embargoCheck a country code against known sanction and trade embargo lists.
lookup_file_reputationRetrieve a reputation score for a set of file hashes.
lookup_ip_address_reputationLook up reputation score(s) for one or more IP addresses.
lookup_domain_from_ip_addressRetrieve the domain name associated with one or more IP addresses.
is_proxyDetermine if one or more IP addresses originate from a proxy.
is_vpnDetermine if one or more IP addresses originate from a VPN.
geolocateGeolocate, or retrieve location information associated with, one or more IP addresses.
redactRedact sensitive information from provided text.
log_entryCreate a log entry in the Secure Audit Log.
search_logSearch the Secure Audit Log.
lookup_url_reputationLook up reputation score(s) for one or more URLs.
get_vault_itemRetrieve details for a Vault key, secret, token, or folder.
list_vault_itemsRetrieve an array of Vault items matching a given filter, including secrets, keys, tokens, and folders, along with their common details.
delete_vault_itemDelete a Vault key, secret, token, or folder.
generate_keyGenerate a symmetric or asymmetric key.

How to install the Pangea MCP Server

{
  "mcpServers": {
    "pangea": {
      "command": "npx",
      "args": [
        "-y",
        "@pangeacyber/mcp-server"
      ],
      "env": {
        "PANGEA_VAULT_TOKEN": "YOUR_PANGEA_VAULT_TOKEN",
        "PANGEA_VAULT_ITEM_ID": "pvi_00000000000000000000000000000000",
        "PANGEA_AUDIT_CONFIG_ID": "pci_00000000000000000000000000000000"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

  • Node.js v24.11.0 or greater. - A Pangea API token with access to all of AI Guard, Domain Intel, Embargo, IP Intel, Redact, Secure Audit Log, URL Intel, and Vault. This token needs to be stored in Pangea Vault. See [Service Tokens][] for documentation on how to create and manage Pangea API tokens. - A Pangea API token with access to Vault. This will be used to fetch the above token at runtime. -
VariableDescriptionRequired
PANGEA_VAULT_TOKENDeclared in the maintainer’s client configuration.Check documentation
PANGEA_VAULT_ITEM_IDDeclared in the maintainer’s client configuration.Check documentation
PANGEA_AUDIT_CONFIG_IDDeclared in the maintainer’s client configuration.Check documentation

Example prompts to try

  • “Use Pangea to macOS.”
  • “Use Pangea to Windows.”
  • “Use Pangea to Embargo.”

Frequently asked questions

A Model Context Protocol (MCP) server that provides integration with Pangea APIs Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.