Pangea MCP Server
About
An MCP server for integrating with Pangea's security APIs, including Secure Audit Log.
Details
- Author
- pangeacyber
- Downloads
- 186
- Categories
- Cloud Service, Infrastructure, Other
Jump to
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Pangea MCP ServerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
{
"mcpServers": {
"pangea": {
"command": "npx",
"args": [
"-y",
"@pangeacyber/mcp-server"
],
"env": {
"PANGEA_VAULT_TOKEN": "pts_00000000000000000000000000000000",
"PANGEA_VAULT_ITEM_ID": "pvi_00000000000000000000000000000000",
"PANGEA_AUDIT_CONFIG_ID": "pci_00000000000000000000000000000000"
}
}
}
}
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"pangea mcp server": {
"pangea": {
"command": "npx",
"args": [
"-y",
"@pangeacyber/mcp-server"
],
"env": {
"PANGEA_VAULT_TOKEN": "pts_00000000000000000000000000000000",
"PANGEA_VAULT_ITEM_ID": "pvi_00000000000000000000000000000000",
"PANGEA_AUDIT_CONFIG_ID": "pci_00000000000000000000000000000000"
}
}
}
}
}McpServers
{
"pangea": {
"command": "npx",
"args": [
"-y",
"@pangeacyber/mcp-server"
],
"env": {
"PANGEA_VAULT_TOKEN": "pts_00000000000000000000000000000000",
"PANGEA_VAULT_ITEM_ID": "pvi_00000000000000000000000000000000",
"PANGEA_AUDIT_CONFIG_ID": "pci_00000000000000000000000000000000"
}
}
}An MCP server for integrating with Pangea's security APIs, including Secure Audit Log.
AModel Context Protocol (MCP)server that provides integration with Pangea APIs.
- Node.js v24.11.0 or greater.
- A Pangea API token with access to all of AI Guard, Domain Intel, Embargo, IP Intel, Redact, Secure Audit Log, URL Intel, and Vault. This token needs to be stored in Pangea Vault. SeeService Tokensfor documentation on how to create and manage Pangea API tokens.
- A Pangea API token with access to Vault. This will be used to fetch the above token at runtime.
- A Pangea Secure Audit Log configuration with the "Standard Audit Log Config"schema. SeeMultiple Service Configurationsfor documentation on how to create a new Secure Audit Log configuration. Note down the configuration ID for later.
Edit the following configuration file (create it if it does not exist):
- macOS:~/Library/Application Support/Claude/claude_desktop_config.json
- Windows:%APPDATA%\Claude\claude_desktop_config.json
Replace (or merge) the file contents with the following:
{ "mcpServers": { "pangea": { "command": "npx", "args": ["-y", "@pangeacyber/mcp-server"], "env": { "PANGEA_VAULT_TOKEN": "pts_00000000000000000000000000000000", "PANGEA_VAULT_ITEM_ID": "pvi_00000000000000000000000000000000", "PANGEA_AUDIT_CONFIG_ID": "pci_00000000000000000000000000000000" } } } }
- Update thePANGEA_VAULT_TOKENvalue to the Pangea Vault API token.
- Update thePANGEA_VAULT_ITEM_IDvalue to the Vault item ID that contains the API token that will be used to call all other Pangea services.
- Update thePANGEA_AUDIT_CONFIG_IDvalue to the Secure Audit Log configuration ID.
- Restart Claude Desktop.
npx @pangeacyber/mcp-server --transport httpStream --port 8080
When running the server with the streamable HTTP transport, it is possible to optionally add authentication to the server via Pangea AuthN. To enable this feature, set the--authnflag and set the following environment variables:
- PANGEA_AUTHN_ISSUER— Pangea AuthN issuer URL.
- PANGEA_AUTHN_CLIENT_ID— Pangea AuthN client ID.
- PANGEA_AUTHN_CLIENT_SECRET— Pangea AuthN client secret.
- Navigate to the Pangea AuthN dashboard.
- In the left hand panel, click onOAuth Server.
- Click on the+ OAuth Clientbutton on the right to begin creating a new OAuth client.
- Name:Assign a recognizable name to your client as it will appear in the list of clients in the OAuth Server settings. This name may be updated at any time.
- Grant Type:must beAuthorization Code.
- Response Types:onlyCodeis required.
- Allowed Redirect URIs:enterhttp://localhost:8000/pangea/callback. Note that for a production MCP server, this should use the remote address of the server (e.g.https://mcp.example.org/pangea/callback) instead of alocalhostaddress.
- Allowed Scopes & Default Scopes:openid.
- prompt_guard— Analyze and redact text to avoid manipulation of the model, addition of malicious content, and other undesirable data transfers.
- lookup_domain_reputation— Look up reputation score(s) for one or more domains.
- whois— Retrieve WHOIS (an Internet resource's registered users or assignees) for a domain.
- check_ip_embargo— Check one or more IP addresses against known sanction and trade embargo lists.
- check_iso_code_embargo— Check a country code against known sanction and trade embargo lists.
- lookup_file_reputation— Retrieve a reputation score for a set of file hashes.
- lookup_ip_address_reputation— Look up reputation score(s) for one or more IP addresses.
- lookup_domain_from_ip_address— Retrieve the domain name associated with one or more IP addresses.
- is_proxy— Determine if one or more IP addresses originate from a proxy.
- is_vpn— Determine if one or more IP addresses originate from a VPN.
- geolocate— Geolocate, or retrieve location information associated with, one or more IP addresses.
- redact— Redact sensitive information from provided text.
- log_entry— Create a log entry in the Secure Audit Log.
- search_log— Search the Secure Audit Log.
- lookup_url_reputation— Look up reputation score(s) for one or more URLs.
- get_vault_item— Retrieve details for a Vault key, secret, token, or folder.
- list_vault_items— Retrieve an array of Vault items matching a given filter, including secrets, keys, tokens, and folders, along with their common details.
- delete_vault_item— Delete a Vault key, secret, token, or folder.
- generate_key— Generate a symmetric or asymmetric key.
Navigate your Aiven projects and interact with the PostgreSQL®, Apache Kafka®, ClickHouse® and OpenSearch® services
Yunxiao MCP Server provides AI assistants with the ability to interact with the Yunxiao platform.
Get prescriptive CDK advice, explain CDK Nag rules, check suppressions, generate Bedrock Agent schemas, and discover AWS Solutions Constructs patterns.
This AWS Labs Model Context Protocol (MCP) server for CloudTrail enables your AI agents to query AWS account activity for security investigations, compliance auditing, and operational troubleshooting.
Core AWS MCP server providing prompt understanding and server management capabilities.
Analyze CDK projects to identify AWS services used and get pricing information from AWS pricing webpages and API.
Query and analyze your Axiom logs, traces, and all other event data in natural language
Manage and interact with Microsoft Azure services.
Bastion: External Attack Surface Monitoring
Ask your AI assistant about your attack surface: run scans, catch expiring certificates and domains, triage findings, and generate reports.
Agent-ready global image CDN that AI agents can install and operate through MCP.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
