pangea-mcp-server

The server implements strong security practices by integrating Pangea's AI Guard for both pre-tool input and post-tool output validation and redaction, significantly reducing risks like prompt injection or data leakage. Sensitive Pangea API tokens are securely fetched from Pangea Vault at runtime, rather than being hardcoded or directly exposed as environment variables. OAuth client secrets for authentication are also stored in Vault. No 'eval' or similar dangerous code execution patterns were found. Network risks are managed through explicit HTTP transport with optional Pangea AuthN for access control. The hardcoded Pangea domain is a configuration, not a vulnerability. Overall, a well-secured application.