NewAgent Observability is live.
Back to directory
BigPanda logo

BigPanda MCP server: your action plans become the tools

Why this connector's inventory is different in every organization, what one shared input schema means for an agent, and how BigPanda consumes your servers in the other direction.

Connector
Official, hosted at `api.biggy.io/mcp`
Coverage
Whatever your enabled action plans cover
Tools
No fixed count. One per enabled action plan
Biggest risk for an agent
Every tool takes free text, not parameters

Last verified 1 September 2026 · from The BigPanda public API spec, its docs and the live endpoint

This page is one of 90 in a directory of monitoring and developer tools. Each page checks what an AI coding agent can get out of the tool through its MCP server, the connector that lets the agent query the tool directly.

Summary

The BigPanda MCP server is published at https://api.biggy.io/mcp. An unauthenticated POST returns HTTP 403. The response body is a Cloudflare challenge page, not a protocol error. The probe therefore shows that the host is reachable and gated. It does not show that an MCP server answers behind it. The endpoint, protocol version and parameter schema below come from BigPanda's API specification. That specification is not publicly retrievable, so treat those three as vendor-stated rather than independently verified.

There is no fixed tool list. An action plan is a piece of work that Biggy, BigPanda's AI assistant, is configured to do. The specification states that each enabled action plan in your organization becomes an MCP tool. Tool descriptions are derived from the action plan's description and whenToSelect fields.

Every tool shares one input schema. A required query in natural language, an optional responseFormat of markdown or plain text, and an optional reasoningEffort of low, medium or high.

BigPanda also runs the other way. Its own assistant, Biggy, connects to your MCP servers as a client, with a trust policy that defaults to an explicit allowlist.

What is the BigPanda MCP server?

BigPanda correlates alerts into incidents. Biggy is its AI assistant, and an action plan is a configured piece of work Biggy knows how to do, such as troubleshooting an issue from historical data.

The MCP endpoint exposes those action plans. An external agent lists them, picks one from its description, and sends it a question in English. The action plan does the work and answers.

That is a different shape from every other connector in this directory. Elsewhere a tool is an API call with typed parameters. Here a tool is another agent, and the parameter is a sentence.

BigPanda sits on both ends of MCP:

DirectionWhereWhat it means
BigPanda as a serverPOST https://api.biggy.io/mcpYour action plans become tools your agents can call
Biggy as a clientThe web app integrations page, Add MCPYour servers become tools Biggy can call, under a trust policy you set

The two are configured in different places and answer different questions. A search result about connecting an MCP server to Biggy is the client direction, not this endpoint.

BigPanda's subject is the incident. Its reach depends on which action plans you have enabled.

Part of the workWhat BigPanda has hereCan an agent reach it
Code, tests & reviewOnly through an action plan you enablePartial. Indirect. BigPanda documents a Source Control Agent action plan that browses repositories, pull requests, commits and diffs
CI & releaseChange risk, where it is configuredPartial. Change risk analysis is a separate BigPanda API, and reaching it through MCP depends on an action plan
Production observabilityAlerts, incidents and correlationYes. Core strength, filtered through action plans rather than exposed as raw queries
Agent observability & evalsNoneNo traces or evaluations of model behavior
AI cost managementNoneNo spend data of any kind

In practice, BigPanda answers incident questions at whatever depth its action plans were built for. Two organizations connecting the same endpoint can get entirely different tool lists.

What can an AI agent do with BigPanda?

There is no fixed tool list to publish, and that is the design. Every Biggy action plan your organization has enabled becomes one MCP tool, so the surface is whatever your own plans cover. Each tool takes a query in English, and its description is derived from the plan behind it. An agent can ask incident questions your organization has already modelled, and nothing beyond them.

BigPanda MCP server limits: where answers come back incomplete

BigPanda's first limitation is unusual. You cannot know its tool list before you connect.

There is no tool list to look up. Yours is whatever you enabled.

The specification states that each enabled action plan in your organization becomes an MCP tool, and that descriptions are derived from the plan's own description and whenToSelect fields.

No published count applies to anyone else. An evaluation that starts by reading a tool table has nothing to read, and must call tools/list against a real token instead.

Guard: Run the tools/list call before writing any client configuration. It is the only way to know what this connector is for your organization.

The agent says: I called the troubleshooting tool with the incident ID. It received a sentence, not an identifier.

Every action plan tool takes the same three fields, and only query is required. There is no typed parameter for an incident, a service or a time range.

Guard: Have the agent record the exact query text it sent. Reproducing an answer means reproducing the wording.

One setting trusts tools that do not exist yet.

In the client direction, BigPanda offers Auto-trust all tools, which allows every tool a server exposes including tools added in the future. The alternative, Allow only selected tools, is the one marked recommended.

Guard: Keep the allowlist. A server you trusted last quarter can add a tool this quarter.

The agent says: BigPanda says the cause is the database. An action plan concluded that.

The tool is not a query. It is a configured agent that runs its own reasoning, at whichever effort level was requested, and returns prose.

Guard: Require the agent to name the action plan alongside any conclusion, as the disclosure block above does.

How to configure BigPanda MCP for agents

  1. 1

    Audit the action plans before connecting

    They are the tool list. Whatever is enabled is what an external agent can see and call.

  2. 2

    Expect stateless HTTP

    A single /mcp endpoint handles initialize, tools/list and tools/call over POST. GET and DELETE return 405, because there are no sessions and no server-sent event streams.

  3. 3

    Decide the reasoning effort deliberately

    Every tool accepts low, medium or high, and the default is not stated in the specification.

  4. 4

    Write the whenToSelect field carefully

    It is not internal documentation. It becomes part of the tool description an external agent reads when choosing.

  5. 5

    Keep the client direction separate

    Adding an MCP server to Biggy is a different feature, configured in the web app, with its own trust policy.

Paste this into your agent’s instructions

A tool here is an action plan, which is itself a model doing work. Two layers of inference between the question and the alert data is worth stating.

Terminal
When you answer using BigPanda MCP tools, state:
- Which action plan you called, and the query text you sent
  it. The tool takes free text, so the wording matters.
- That the answer came from an action plan rather than from
  a direct query against alert data.
- The reasoning effort you requested, if you set one.
Never state that data does not exist. State the action plan
you called and what it returned.
Write your answer in ASD-STE100 Simplified Technical
English. Use short sentences with one idea in each.

Do you need the MCP server at all?

Not for anything that runs on a timer. The alert and incident endpoints of the BigPanda API take typed parameters, and they are the direct route for a report you already know how to shape.

For alert correlation without the action plan layer, PagerDuty and Opsgenie expose incident data as structured tools instead of as prose.

Where the question is about metrics rather than incidents, Datadog, Grafana and Prometheus answer it far more cheaply.

BigPanda also publishes an A2A interface for its Alpha agent, using JSON-RPC 2.0 for messages, streamed responses and task status. That is the route for agent-to-agent work rather than tool calls.

With MCP, work your team has already configured becomes callable from outside, without rebuilding any of it as an API integration.

Call tools/list first. The answer is your own configuration, and nobody else's page can tell you what it says.

BigPanda MCP server setup

Nothing is installed. The endpoint is https://api.biggy.io/mcp, and the whole MCP lifecycle runs over HTTP POST against that single path.

Every block below carries a BigPanda bearer token. The specification states that all BigPanda APIs require bearer token authorization in the call headers.

The tool list you get is your own. Each enabled action plan becomes one tool, so confirm what is enabled before wiring an agent to it.

Claude Code

The endpoint speaks streamable HTTP, so no proxy is needed. The token travels as a header.

Terminal
claude mcp add --transport http bigpanda \
  https://api.biggy.io/mcp \
  --header "Authorization: Bearer <api-key>"

See your own tool list first

BigPanda publishes this call in its own specification. Run it before configuring a client, because the response is the inventory and it is specific to your organization.

Terminal
curl -sS -X POST "https://api.biggy.io/mcp" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "Authorization: Bearer <api-key>" \
  -d '{"jsonrpc":"2.0","id":2,
       "method":"tools/list","params":{}}'

Cursor

~/.cursor/mcp.json for all projects, or .cursor/mcp.json in one, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{"type":"http",
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}

Codex CLI

Codex reads TOML, so the JSON blocks above will not transfer.

Terminal
[mcp_servers.bigpanda]
url = "https://api.biggy.io/mcp"

[mcp_servers.bigpanda.headers]
Authorization = "Bearer <api-key>"

Every other client

Each block below is the configuration for one client, with the file path and the key that client expects.

Claude Desktop

macOS ~/Library/Application Support/Claude/claude_desktop_config.json. Windows %APPDATA%\Claude\claude_desktop_config.json. There is no CLI. Edit through Settings, Developer, Edit Config.

Quit and restart fully for changes to load. Claude Desktop cannot send an authorization header directly, so this route proxies through mcp-remote with the token in env.

Terminal
{"mcpServers":{"bigpanda":{"command":"npx",
  "args":["-y","mcp-remote","https://api.biggy.io/mcp",
    "--header","Authorization: Bearer ${TOKEN}",
    "--transport","http-only"],
  "env":{"TOKEN":"<api-key>"}}}}
Gemini CLI

~/.gemini/settings.json globally, or .gemini/settings.json per project. Key mcpServers, using httpUrl, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{
  "httpUrl":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
VS Code Copilot

.vscode/mcp.json per workspace, or your user profile. An inputs prompt avoids writing the token into the file.

Terminal
{"servers":{"bigpanda":{"type":"http",
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}

The key is `servers`, not `mcpServers`. VS Code is the only client that uses that name, and copying a config from anywhere else fails silently.

Windsurf

~/.codeium/windsurf/mcp_config.json, which is the path Windsurf documents. Key mcpServers, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{
  "serverUrl":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Zed

~/.config/zed/settings.json, under context_servers, carrying the same bearer token.

Terminal
{"context_servers":{"bigpanda":{
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Google Antigravity

~/.gemini/config/mcp_config.json globally, or .agents/mcp_config.json per project. Key mcpServers. There is no CLI. Use the /mcp overlay. Streamable HTTP is supported, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{"type":"http",
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Amp (Sourcegraph)

~/.config/amp/settings.json or .amp/settings.json, carrying the same bearer token. The amp mcp CLI covers approve, doctor and oauth.

Terminal
{"amp.mcpServers":{"bigpanda":{
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Cline

~/.cline/mcp.json per the docs. The source also reads ~/.cline/data/settings/cline_mcp_settings.json. Key mcpServers, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{"type":"streamableHttp",
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Goose (Block)

~/.config/goose/config.yaml, carrying the same bearer token in the headers map.

Terminal
extensions:
  bigpanda:
    type: streamable_http
    uri: https://api.biggy.io/mcp
    headers:
      Authorization: Bearer <api-key>
Kiro (AWS)

.kiro/settings/mcp.json per workspace, or ~/.kiro/settings/mcp.json globally. Kiro runs stdio servers, so this route uses the same mcp-remote proxy as Claude Desktop, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{"command":"npx",
  "args":["-y","mcp-remote","https://api.biggy.io/mcp",
    "--header","Authorization: Bearer ${TOKEN}",
    "--transport","http-only"],
  "env":{"TOKEN":"<api-key>"}}}}
Warp

~/.warp/.mcp.json or .warp/.mcp.json. Key mcpServers, carrying the same bearer token. Also addable through the /agent-add-mcp skill.

Terminal
{"mcpServers":{"bigpanda":{
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
JetBrains Junie

.junie/mcp/mcp.json per project, or ~/.junie/mcp/mcp.json. Key mcpServers, carrying the same bearer token. Use /mcp in the CLI to manage.

Terminal
{"mcpServers":{"bigpanda":{"type":"http",
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Roo Code

.roo/mcp.json per project. The global file is mcp_settings.json, opened from the Roo Code MCP settings view with Edit Global MCP. Key mcpServers, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{
  "type":"streamable-http",
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Continue

.continue/mcpServers/*.yaml, one file per server, carrying the same bearer token.

Terminal
name: BigPanda
version: 0.0.1
schema: v1
mcpServers:
  - name: bigpanda
    type: streamable-http
    url: https://api.biggy.io/mcp
    requestOptions:
      headers:
        Authorization: Bearer <api-key>
Trae

.trae/mcp.json per project, or paste into the UI under Raw Config (JSON). Key mcpServers, standard shape, carrying the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
Devin

Devin has no config file to edit. Servers are added through a web form in the settings UI, and Devin's documentation states you do not need to write or paste JSON. The block below is the shape those fields describe, shown for reference. Either route uses the same bearer token.

Terminal
{"mcpServers":{"bigpanda":{"type":"http",
  "url":"https://api.biggy.io/mcp",
  "headers":{"Authorization":"Bearer <api-key>"}}}}
The other direction: Biggy as the client

A different feature, configured in the BigPanda web app under integrations, Add MCP. Service type is Observability, ITSM or Context Retrieval, and the form takes your server URL, a bearer token for it, optional custom headers and a deployment type.

Marking an integration as on-prem makes it eligible for the Biggy Relay Client, which reaches infrastructure behind your firewall. The trust policy is the field that matters, and it is described below.

Terminal
Integrations  ->  + Add MCP
  Service Type:   Observability | ITSM | Context Retrieval
  MCP Server URL: https://your-server.example.com/mcp
  Bearer Token:   <token Biggy uses to call your server>
  Deployment:     Cloud | On Prem
  Trust Policy:   Allow only selected tools (recommended)

Read-only access, permissions and security

  • Your action plans are the attack surface, in both directions

    Anything enabled becomes callable, and the description an external agent reads is generated from fields your own team wrote.

  • Free text is the only parameter

    There is nothing to validate at the schema level: an agent sends a sentence, and the action plan decides what to do with it.

  • In the client direction, prefer the allowlist

    BigPanda offers two trust policies. Allow only selected tools is the one it marks as recommended, and new tools then need explicit approval. Auto-trust all tools allows every tool the server exposes, including ones added later.

  • The on-prem option crosses your firewall deliberately

    Marking an integration as on-prem makes it eligible for the Biggy Relay Client, which is how it reaches internal infrastructure.

  • The token is a full BigPanda API key

    The specification states that all BigPanda APIs require bearer token authorization, so the credential is not scoped to MCP alone.

Troubleshooting

`405 Method Not Allowed`
Only POST is supported. The specification states that GET and DELETE return 405, because stateless mode uses neither sessions nor server-sent event streams.
`tools/list` returns nothing useful
The list is your enabled action plans. If it is short or empty, the answer is in the BigPanda action plan configuration, not in the client.
The agent picks the wrong action plan
Tool descriptions are generated from each plan's description and whenToSelect fields. Rewriting those fields is the supported way to change how an external agent chooses.
Answers are shallow or too slow
Every tool accepts a reasoningEffort of low, medium or high. It is optional, so a client that omits it takes whatever the server defaults to.
The response is hard to parse
Set responseFormat to plain-text. The default documented in the schema table is markdown.
Biggy cannot reach your internal server
Set the deployment type to On Prem. That marks the integration as eligible to connect through the Biggy Relay Client, which is the documented route to infrastructure behind a firewall.

BigPanda MCP server: Reference

ItemValue
EndpointPOST https://api.biggy.io/mcp
Live checkHTTP 403 to an unauthenticated POST, 25 August 2026
Server namebiggy-action-plans, version 1.0.0
Protocol2025-11-25
TransportStateless HTTP POST. No sessions, no SSE
Methodsinitialize, tools/list, tools/call
GET and DELETE405 Method Not Allowed
ToolsOne per enabled action plan. No fixed count
Tool descriptionsGenerated from description and whenToSelect
Input schemaquery required · responseFormat · reasoningEffort
AuthBearer token, as with every BigPanda API
Client directionAdd MCP in the web app, with a trust policy
Inventory sourceBigPanda public API specification, read 25 August 2026

What the vendor documents

The facts below come from BigPanda's own API specification and its MCP integration documentation, read 25 August 2026. No tool count can exist, because the inventory is per organization. Public discussion of the endpoint is thin.

What was checkedWhat it shows
EndpointsOne, /mcp
Methods supportedThree
Input fields per toolThree, one required
Reasoning levelsThree: low, medium, high
Response formatsTwo: markdown, plain text
Client service typesThree: Observability, ITSM, Context Retrieval
Trust policy optionsTwo, one marked recommended
Fixed tool countNone

“Each enabled action plan in your organization becomes an MCP tool. Tool descriptions are derived from the action plan's description and whenToSelect fields, giving external agents enough context to choose the right tool autonomously.”

“Allow only selected tools (Recommended): Pick exactly which tools Biggy can call. New tools require explicit approval.”

“GET and DELETE calls return 405 Method Not Allowed (stateless mode does not use sessions or server-sent event (SSE) streams).”

The BigPanda public API specification and the MCP integration documentation were read on 25 August 2026, and the endpoint was probed on the same date. No tool count is claimed, because the specification states the inventory is per organization.

Should you connect an agent to BigPanda?

Yes. Best for incident questions phrased in English, against action plans you have reviewed.

Strongest fit
BigPanda customers who have already built action plans and want external agents to reach them.
Main advantage
Work that already exists becomes callable without building an integration for each capability.
Main weakness
Nothing about the tool list is knowable in advance, because it is generated from your own configuration.
Operational risk
Free text is the only input, so nothing is validated before an action plan acts on it.

From Oodle

One platform for agent traces and infrastructure

Agent traces usually sit in a different product from the rest of your telemetry, so when a slow database makes an agent slow the symptom is in one tool and the cause is in another. Oodle keeps both in one query surface, from $10 per million spans.

See agent observability

Frequently asked questions

Does BigPanda have an official MCP server?

Yes. POST https://api.biggy.io/mcp is a documented public API operation, described as using Biggy action plans as remote MCP tools.

How many tools does it expose?

There is no fixed number. The specification states that each enabled action plan in your organization becomes one MCP tool, so the count differs per customer.

What parameters do the tools take?

All of them share one schema: a required query in natural language, an optional responseFormat of markdown or plain text, and an optional reasoningEffort of low, medium or high.

Why do GET requests fail?

Only POST is supported. The specification states that GET and DELETE return 405, because stateless mode uses no sessions and no server-sent event streams.

Can Biggy call my MCP server instead?

Yes, and it is a separate feature. Add it in the web app under integrations, choosing Observability, ITSM or Context Retrieval as the service type.

Which trust policy should I choose there?

BigPanda marks Allow only selected tools as recommended. The alternative auto-trusts every tool the server exposes, including tools added in the future.

Changelog

  • 25 August 2026. api.biggy.io/mcp answered an unauthenticated POST with HTTP 403, so the endpoint is live and gated.
  • 2025-11-25. The protocol version the published API specification advertises.

Sources

Every number on this page traces to one of these

  1. BigPanda public API specification · the /mcp operation, read 25 August 2026
  2. BigPanda documentation · Model Context Protocol (MCP) Integration, same date
  3. BigPanda release notes · the two MCP entries, same date
  4. Live check · POST https://api.biggy.io/mcp returned HTTP 403, same date

BigPanda’s own MCP documentation

Also incident response:

Structured alternatives: