Pangea

You run this MCP server to integrate Pangea APIs with your applications, enabling secure access to AI Guard, Domain Intel, Embargo, IP Intel, Redact, Secure Audit Log, URL Intel, and Vault. It supports running as a local stdio server or as an HTTP server for stream-based communication with clients.

How to use

Start by running the MCP server in the environment you use most. You can operate it as a local stdio server or expose it over HTTP so clients connect via a transport layer. The server authenticates to Pangea Vault and Secure Audit Log configurations to provide trusted data sources and audit capabilities to your workflows.

How to install

Prerequisites must be installed before you start the MCP server. Ensure you have a supported Node.js runtime and access to Pangea services.

# Install Node.js from https://nodejs.org (ensure v24.11.0 or greater is installed)
# Install the MCP server package if you are setting up via a package manager that exposes it
# Example installation (adjust to your environment as needed)

# If you are using npm to install locally, you might run something like:
# npm install -g @pangeacyber/mcp-server

Additional content

Pangea MCP Server uses environment variables to securely access Vault, store tokens, and configure audit logging. The following configuration allows you to start the server via the provided examples and ensures that required tokens are wired to the MCP process.

{
  "mcpServers": {
    "pangea": {
      "command": "npx",
      "args": ["-y", "@pangeacyber/mcp-server"],
      "env": {
        "PANGEA_VAULT_TOKEN": "pts_00000000000000000000000000000000",
        "PANGEA_VAULT_ITEM_ID": "pvi_00000000000000000000000000000000",
        "PANGEA_AUDIT_CONFIG_ID": "pci_00000000000000000000000000000000"
      }
    }
  }
}

Security and configuration notes

To enable additional authentication for HTTP transport, you can configure Pangea AuthN. When using the streamable HTTP transport, you may add authentication by providing the issuer, client ID, and client secret as environment variables.

Tools

The MCP server exposes a range of tools that interact with Pangea APIs to provide data intelligence, redaction, auditing, and vault access.

Available tools

prompt_guard

Analyze and redact text to avoid manipulation of the model, addition of malicious content, and other undesirable data transfers.

lookup_domain_reputation

Look up reputation scores for one or more domains.

whois

Retrieve WHOIS information for a domain.

check_ip_embargo

Check IPs against known sanction and embargo lists.

check_iso_code_embargo

Check a country code against embargo lists.

lookup_file_reputation

Retrieve a reputation score for file hashes.

lookup_ip_address_reputation

Look up reputation scores for IP addresses.

lookup_domain_from_ip_address

Find domains associated with one or more IP addresses.

is_proxy

Determine if IPs originate from a proxy.

is_vpn

Determine if IPs originate from a VPN.

geolocate

Geolocate IP addresses.

redact

Redact sensitive information from text.

log_entry

Create a log entry in the Secure Audit Log.

search_log

Search the Secure Audit Log.

lookup_url_reputation

Look up reputation scores for URLs.

get_vault_item

Retrieve details for a Vault item.

list_vault_items

List Vault items matching a filter.

delete_vault_item

Delete a Vault item.

generate_key

Generate a cryptographic key.