VendorPanda Federation
CategoryCRM & Sales
Connects overstdio

Our grade: 4 checks

Login Login required, broad access
Upkeep Active · 2026-11
Known bugs 0 open
Connection stdio

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

-

No community reviews yet

Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.

Write a review

Why it got a B

An MIT community server from one developer (GitHub pandadad0214, "Panda Federation"), on PyPI and in the official MCP Registry since November 2026. It's a thin wrapper: each tool runs one of the author's Actors on Apify, billed to your own Apify account. Fifteen tools build lead lists: local businesses from OpenStreetMap, US healthcare providers, podcasts, company hiring, company websites and team pages, trucking carriers, nonprofits, building permits, new businesses in Florida, Texas, New York and Colorado, H-1B sponsors and French companies. Many rows are about people, not companies. npi_provider_lists returns individual providers' NPI numbers, names, specialties, practice addresses and phones. company_team_finder reads company team pages for names, titles, published emails, LinkedIn links and a guessed email (emailGuess, with a confidence level; verify it before you send). podcast_leads_finder returns hosts' emails from their RSS feeds, and the registry tools return company officers, CEOs, registered agents or directors (Colorado flags agents who are likely the owner). company_hiring_signals stays at company level: open-job counts and job titles, no people. The data is public, but emailing or calling these people is covered by privacy and anti-spam laws such as GDPR and CAN-SPAM, so check yours before you use a list. Results cost about $0.001 to $0.004 each. Each call is capped at $0.50 by default, but the AI can raise that cap to $25 for a call, and PANDA_MAX_CHARGE_USD only changes the default. Every tool is marked read-only, so a client that skips approval for read-only tools won't ask before a call spends money. The Actors that do the work are closed source, but they run with Apify's limited permissions, so they can't read the rest of your Apify account. No advisories on record. Biggest deduction: the README has you paste your default Apify token, which can use your whole Apify account; create a scoped token that can only run pandadad0214's Actors, with an expiry date, and use that instead.

How to connect

// Cursor MCP config (README)
{"mcpServers": {"panda-leads-tools": {"command": "uvx", "args": ["panda-leads-tools"], "env": {"APIFY_TOKEN": "apify_api_YOUR_TOKEN"}}}}

Is Panda Leads Tools safe?

Is Panda Leads Tools safe to use?

Panda Leads Tools grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested. It runs locally over stdio, so it acts with your machine's access.

Does Panda Leads Tools have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does Panda Leads Tools support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade B

Markdown

[![TrustedMCP grade B](https://trustedmcp.io/badge/panda-leads-tools.svg)](https://trustedmcp.io/servers/panda-leads-tools)

HTML

<a href="https://trustedmcp.io/servers/panda-leads-tools"><img src="https://trustedmcp.io/badge/panda-leads-tools.svg" alt="TrustedMCP grade B" height="80"></a>

Community reviews

No published community reviews yet.

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you