Pinecone MCP Server
for AI Agents
Connect your AI agent to StackOne's Pinecone MCP server and give it 35 MCP tools out of the box. Auth, tool execution, and security all managed.
StackOne 
Coverage
35 Agent Actions
Create, read, update, and delete across Pinecone — and extend your agent's capabilities with custom actions.
Authentication
Agent Tool Authentication
Per-user OAuth in one call. Your Pinecone MCP server gets session-scoped tokens with zero credentials stored on your infra.
Agent Auth →
Security
Agent Protection
Every Pinecone tool response scanned for prompt injection in milliseconds — 88.7% accuracy, all running on CPU.
Prompt Injection Defense →
Performance
Max Agent Context. Min Cost.
Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Pinecone call.
Tools Discovery →What is the Pinecone MCP Server?
A Pinecone MCP server lets AI agents read and write Pinecone data through the Model Context Protocol — Anthropic's open standard for connecting LLMs to external tools. StackOne's Pinecone MCP server ships with 35 pre-built actions, fully extensible via the Connector Builder — plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.
All Pinecone MCP Tools
Every action from Pinecone's API, ready for your agent. Create, read, update, and delete — scoped to exactly what you need.
An API Keys
- Create An API Key
Issue a new API key for a project and return its secret value, which Pinecone shows only in this response.
- Update An API Key
Rename an API key or replace the set of roles it carries.
- Delete An API Key
Permanently revoke an API key so it can no longer authenticate requests.
An Organizations
- Update An Organization
Change the display name of an organization. The plan, payment status and support tier are set by Pinecone and cannot be changed here.
- Delete An Organization
Permanently delete an organization and every project inside it.
A Projects
- Update A Project
Rename a project or change its pod ceiling and CMEK enforcement.
- Delete A Project
Permanently delete a project together with the indexes and API keys it contains.
A Role Bindings
- Create A Role Binding
Grant a role to a user, service account, API key or invite at organization or project scope.
- Delete A Role Binding
Revoke a role binding, removing the access it granted to its principal.
A Service Accounts
- Create A Service Account
Create a service account for machine-to-machine access and return its OAuth client secret, shown only in this response.
- Update A Service Account
Change the display name of a service account. Its OAuth client ID and role bindings are unaffected.
- Delete A Service Account
Permanently delete a service account so its client credentials stop working.
Other (23)
- Create A Cost Usage Export
Start an export of the organization's cost and usage data covering a range of UTC calendar days.
- Create A New Project
Create a project in the organization to hold indexes, API keys and project-scoped role bindings.
- List API Keys
Return the API keys that belong to a project, with the roles each key carries. Secret values are never returned.
- Get API Key Details
Retrieve one API key by id, with its name, project and roles. The secret value is not returned.
- List Cost Usage Exports
Return the organization's cost usage export jobs, newest first, optionally filtered by status. Download links are omitted from this list.
- Get Cost Usage Export Details
Retrieve one cost usage export by id, including its status and, once complete, a time-limited download link.
- List Invites
Return the organization's invites with their status, expiry and processing time.
- Get Invite Details
Retrieve one invite by id, with its status, expiry and the time it was processed.
- List Organizations
Return the organizations the calling service account can administer, with each plan and payment status.
- Get Organization Details
Retrieve one organization by id, including its plan, payment status and support tier.
- List Projects
Return every project in the organization the service account belongs to, with each project's pod ceiling and CMEK setting.
- Get Project Details
Retrieve one project by id, including its pod ceiling, CMEK setting and owning organization.
- List Role Bindings
Return the role bindings in the organization, filtered by principal, resource scope or role, to audit who holds which access.
- Get Role Binding Details
Retrieve one role binding by id, showing the principal, the scope and the role it grants.
- List Service Accounts
Return the organization's service accounts with their OAuth client IDs. Client secrets are never returned.
- Get Service Account Details
Retrieve one service account by id, with its name, OAuth client ID and timestamps.
- List Users In The Organization
Return the users who are members of the organization, optionally filtered by email address.
- Get User Details
Retrieve one organization member by id, with their name and email address.
- Delete An Invite
Revoke a pending invite so the emailed link no longer grants access.
- Remove A User From The Organization
Remove a user from the organization, revoking the access their role bindings granted.
- Invite A User To The Organization
Invite a person to join the organization by email and set the roles they receive on acceptance.
- Resend An Invite Email
Send the invitation email again for a pending invite and extend how long it stays valid.
- Rotate A Service Account's OAuth Client Secret
Issue a new OAuth client secret for a service account and invalidate the previous one immediately.
Set Up Your Pinecone MCP Server in Minutes
One endpoint. Any framework. Your agent is talking to Pinecone in under 10 lines of code.
Agent Frameworks
JSON{
"mcpServers": {
"stackone": {
"command": "npx",
"args": [
"-y",
"mcp-remote@latest",
"https://api.stackone.com/mcp?x-account-id=<account_id>",
"--header",
"Authorization: Basic <YOUR_BASE64_TOKEN>"
]
}
}
}Check More AI & ML MCP Servers
182+ actions
126+ actions
121+ actions
62+ actions
57+ actions
37+ actions
35+ actions
Platform Resources
MCP Code Mode: Keeping Tool Responses Out of Agent Context
Anthropic's code_execution processes data already in context. Custom MCP code mode keeps raw tool responses in a sandbox. 14K tokens vs 500.
11 min
Comparing BM25, TF-IDF, and Hybrid Search for MCP Tool Discovery
Benchmarking BM25, TF-IDF, and hybrid search for MCP tool discovery across 916 tools. The 80/20 TF-IDF/BM25 hybrid hits 21% Top-1 accuracy in under 1ms.
10 min
Indirect Prompt Injection Defense for MCP Tools: A Technical Guide
MCP tools that read emails, CRM records, and tickets are indirect prompt injection vectors. Here's how we built a two-tier defense that scans tool results in ~11ms.
12 min
MCP vs A2A: Architecture, Security, and When to Use Each
MCP vs A2A: what each protocol standardizes, how they differ, their shared security risks including indirect prompt injection, and when to use one, both, or a hybrid architecture.
12 min
MCP vs API: What Hundreds of Connector Builds Taught Us
MCP wraps APIs, it doesn't replace them. After building hundreds of connectors that serve both, here's when each approach wins.
14 min read
Pinecone MCP Server FAQ
Does StackOne have a Pinecone MCP server?
Pinecone MCP server vs direct API integration — what's the difference?
How does Pinecone authentication work for AI agents?
origin_owner_id.Are Pinecone MCP tools vulnerable to prompt injection?
What is the context bloat of a Pinecone agent and how do I avoid it?
Can I limit which actions my Pinecone agent can access?
Can I create custom agent actions for my Pinecone MCP server?
When should I NOT use a Pinecone MCP server?
What AI frameworks and AI clients does the StackOne Pinecone MCP server support?
Put your AI agents to work
All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.