How is this different from connecting Pinecone MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Pinecone MCP API changes?

We track the Pinecone MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Pinecone tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Pinecone?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Pinecone MCP server myself?

No. TrustGate connects to the Pinecone MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Pinecone directly.

Connect Pinecone MCP to your AI agents, securely.

Q: Is Pinecone MCP secure?

The server itself exposes 9 tools, and some of them can write to your Pinecone account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Pinecone.

One secured endpoint for every Pinecone call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Pinecone MCP now

What your agents can ask once Pinecone MCP is connected.

Select the tools your AI agents can call

9 tools from the Pinecone MCP schema.

Showing 9 tools

list-indexesreadLists all Pinecone indexes available to the project.
describe-indexreadDescribes the configuration of an index, including its dimension, metric and embedding model.
describe-index-statsreadProvides statistics about the data in an index, including the number of records and available namespaces.
create-index-for-modelwriteCreates a new index that uses an integrated inference model to embed text as vectors.
upsert-recordswriteInserts or updates records in an index with integrated inference.
search-recordsreadSearches for records in an index based on a text query, using integrated inference for embedding, with optional metadata filtering and reranking.
cascading-searchreadSearches for records across multiple indexes, deduplicating and reranking the results.
rerank-documentsreadReranks a collection of records or text documents using a specialized reranking model.
search-docsreadSearches the official Pinecone documentation.

What Pinecone MCP exposes

Pinecone MCP groups its 9 tools into 3 categories, each with a suggested starting policy.

All 9 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Indexes	Index listing, configuration details and record statistics	Read / Write	Limit to the indexes the workflow needs
Records	Upserting records with integrated inference, semantic search and cascading search across indexes	Read / Write	Approve upserts; they change what agents retrieve later
Documentation	Search across the official Pinecone documentation	Read	Allow documentation searches

Connect Pinecone MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Pinecone
Find Pinecone in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Pinecone MCP or block it. You allow the exact tools each agent can call, one by one.

Pinecone MCP	9 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 9 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Pinecone MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Pinecone MCP9 documented tools.
Coding assistants	Connection & credentialsper user	Indexes4 tools
Internal copilots	Tool access policiesdeny by default	Records4 tools
Workflow automations	Request & response inspectioninline	Documentation1 tool
Compatible MCP clients	Activity monitoringalerts and logs