{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-13T23:52:59.204Z",
  "record_id": "VXI-EXT-TOOL-TRUST-PINECONE-01-v1",
  "record_kind": "external_reference",
  "title": "Pinecone Developer MCP: Documentation access versus index changes",
  "system": "Pinecone Developer MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Can I give an agent Pinecone documentation access without exposing project data or index writes?",
  "near_questions": [
    "Can Pinecone Developer MCP work without an API key?",
    "Does Pinecone MCP documentation search expose project data?",
    "Can Pinecone Developer MCP create an index?",
    "Can a Pinecone MCP upsert change existing records?",
    "Does Pinecone Developer MCP support every index type?",
    "How does Developer MCP differ from Pinecone Assistant MCP?",
    "Which namespace will the Pinecone agent query?",
    "What should I verify before granting Pinecone project access?",
    "Where do records submitted through Pinecone MCP go?",
    "Can a successful Pinecone search prove source truth?",
    "When should a Pinecone MCP key be withheld?",
    "What belongs in a saved Pinecone integration review?"
  ],
  "supported_claims": [
    {
      "claim": "Pinecone Developer MCP can search documentation without a project API key. A configured key enables project interactions including supported index creation, upserts and searches. The reviewed server supports integrated-inference indexes; it should not be represented as universal access to every Pinecone product.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "Pinecone Developer MCP can search documentation without a project API key. A configured key enables project interactions including supported index creation, upserts and searches. The reviewed server supports integrated-inference indexes; it should not be represented as universal access to every Pinecone product.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-MONGODB-01-v1",
    "VXI-EXT-TOOL-TRUST-SNOWFLAKE-01-v1",
    "VXI-EXT-TOOL-TRUST-QDRANT-01-v1",
    "VXI-EXT-TOOL-TRUST-CLICKHOUSE-01-v1",
    "VXI-EXT-TOOL-TRUST-REDIS-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Pinecone Developer MCP project scope",
    "source_url": "https://github.com/pinecone-io/pinecone-mcp",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-PINECONE-01-v1",
    "candidate_record_sha256": "06b0209be8a644c10c1f3cffd865f0bc57290abfb3be10c5d1a729bb242ba423",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Pinecone Developer MCP can search documentation without a project API key. A configured key enables project interactions including supported index creation, upserts and searches. The reviewed server supports integrated-inference indexes; it should not be represented as universal access to every Pinecone product.",
    "required_buyer_context": "Developer versus Assistant MCP, project key scope, target index and namespace, integrated-inference support.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Pinecone Developer MCP",
      "variant": "Pinecone Developer MCP; separate from Pinecone Assistant MCP"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Pinecone publishes the Developer MCP server.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "It connects coding assistants to Pinecone documentation and supported project indexes.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Tools can inspect indexes and search records; documentation search does not require a project key.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Tools include index creation and record upserts.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Project access requires a Pinecone API key.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "The reviewed capability scope is integrated-inference indexes, not every Pinecone data or Assistant interface.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Data queries and upserts cross the Pinecone service boundary and return results to the coding assistant.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "A documentation-only expectation can become data access once a key is supplied; an unsupported index type may fail.",
        "source_ids": [
          "pinecone-main"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Actual project grants, namespace selection, client retention and input-data rights are unverified.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Keep documentation-only tasks without project authority; verify target and approved data use before index operations.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "pinecone-main",
        "url": "https://github.com/pinecone-io/pinecone-mcp",
        "final_url": "https://github.com/pinecone-io/pinecone-mcp",
        "title": "Pinecone Developer MCP project scope",
        "checked_on": "2026-10-14",
        "sha256": "ba23babb81ad1cc61d3fe7baab72dcff9052af61374cbfcd2c7a69ede6dbcf6a",
        "bytes": 332304
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Retain the reason a project credential was or was not needed for a developer workflow.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Recheck server variant, supported index types, key scope and namespace."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#pinecone-developer-mcp-index-trust",
  "machine_readable_record": "/varexis-index/records/pinecone-developer-mcp-index-trust.json"
}