BigPanda MCP server: your action plans become the tools
Why this connector's inventory is different in every organization, what one shared input schema means for an agent, and how BigPanda consumes your servers in the other direction.
Last verified 1 September 2026 · from The BigPanda public API spec, its docs and the live endpoint
This page is one of 90 in a directory of monitoring and developer tools. Each page checks what an AI coding agent can get out of the tool through its MCP server, the connector that lets the agent query the tool directly.
Summary
The BigPanda MCP server is published at https://api.biggy.io/mcp. An unauthenticated POST returns HTTP 403. The response body is a Cloudflare challenge page, not a protocol error. The probe therefore shows that the host is reachable and gated. It does not show that an MCP server answers behind it. The endpoint, protocol version and parameter schema below come from BigPanda's API specification. That specification is not publicly retrievable, so treat those three as vendor-stated rather than independently verified.
There is no fixed tool list. An action plan is a piece of work that Biggy, BigPanda's AI assistant, is configured to do. The specification states that each enabled action plan in your organization becomes an MCP tool. Tool descriptions are derived from the action plan's description and whenToSelect fields.
Every tool shares one input schema. A required query in natural language, an optional responseFormat of markdown or plain text, and an optional reasoningEffort of low, medium or high.
BigPanda also runs the other way. Its own assistant, Biggy, connects to your MCP servers as a client, with a trust policy that defaults to an explicit allowlist.
What is the BigPanda MCP server?
BigPanda correlates alerts into incidents. Biggy is its AI assistant, and an action plan is a configured piece of work Biggy knows how to do, such as troubleshooting an issue from historical data.
The MCP endpoint exposes those action plans. An external agent lists them, picks one from its description, and sends it a question in English. The action plan does the work and answers.
That is a different shape from every other connector in this directory. Elsewhere a tool is an API call with typed parameters. Here a tool is another agent, and the parameter is a sentence.
BigPanda sits on both ends of MCP:
| Direction | Where | What it means |
|---|---|---|
| BigPanda as a server | POST https://api.biggy.io/mcp | Your action plans become tools your agents can call |
| Biggy as a client | The web app integrations page, Add MCP | Your servers become tools Biggy can call, under a trust policy you set |
The two are configured in different places and answer different questions. A search result about connecting an MCP server to Biggy is the client direction, not this endpoint.
BigPanda's subject is the incident. Its reach depends on which action plans you have enabled.
| Part of the work | What BigPanda has here | Can an agent reach it |
|---|---|---|
| Code, tests & review | Only through an action plan you enable | Partial. Indirect. BigPanda documents a Source Control Agent action plan that browses repositories, pull requests, commits and diffs |
| CI & release | Change risk, where it is configured | Partial. Change risk analysis is a separate BigPanda API, and reaching it through MCP depends on an action plan |
| Production observability | Alerts, incidents and correlation | Yes. Core strength, filtered through action plans rather than exposed as raw queries |
| Agent observability & evals | None | No traces or evaluations of model behavior |
| AI cost management | None | No spend data of any kind |
In practice, BigPanda answers incident questions at whatever depth its action plans were built for. Two organizations connecting the same endpoint can get entirely different tool lists.
What can an AI agent do with BigPanda?
There is no fixed tool list to publish, and that is the design. Every Biggy action plan your organization has enabled becomes one MCP tool, so the surface is whatever your own plans cover. Each tool takes a query in English, and its description is derived from the plan behind it. An agent can ask incident questions your organization has already modelled, and nothing beyond them.
BigPanda MCP server limits: where answers come back incomplete
BigPanda's first limitation is unusual. You cannot know its tool list before you connect.
There is no tool list to look up. Yours is whatever you enabled.
The specification states that each enabled action plan in your organization becomes an MCP tool, and that descriptions are derived from the plan's own description and whenToSelect fields.
No published count applies to anyone else. An evaluation that starts by reading a tool table has nothing to read, and must call tools/list against a real token instead.
Guard: Run the tools/list call before writing any client configuration. It is the only way to know what this connector is for your organization.
The agent says: “I called the troubleshooting tool with the incident ID.” It received a sentence, not an identifier.
Every action plan tool takes the same three fields, and only query is required. There is no typed parameter for an incident, a service or a time range.
Guard: Have the agent record the exact query text it sent. Reproducing an answer means reproducing the wording.
One setting trusts tools that do not exist yet.
In the client direction, BigPanda offers Auto-trust all tools, which allows every tool a server exposes including tools added in the future. The alternative, Allow only selected tools, is the one marked recommended.
Guard: Keep the allowlist. A server you trusted last quarter can add a tool this quarter.
The agent says: “BigPanda says the cause is the database.” An action plan concluded that.
The tool is not a query. It is a configured agent that runs its own reasoning, at whichever effort level was requested, and returns prose.
Guard: Require the agent to name the action plan alongside any conclusion, as the disclosure block above does.
How to configure BigPanda MCP for agents
- 1
Audit the action plans before connecting
They are the tool list. Whatever is enabled is what an external agent can see and call.
- 2
Expect stateless HTTP
A single
/mcpendpoint handlesinitialize,tools/listandtools/callover POST. GET and DELETE return 405, because there are no sessions and no server-sent event streams. - 3
Decide the reasoning effort deliberately
Every tool accepts low, medium or high, and the default is not stated in the specification.
- 4
Write the
whenToSelectfield carefullyIt is not internal documentation. It becomes part of the tool description an external agent reads when choosing.
- 5
Keep the client direction separate
Adding an MCP server to Biggy is a different feature, configured in the web app, with its own trust policy.
Paste this into your agent’s instructions
A tool here is an action plan, which is itself a model doing work. Two layers of inference between the question and the alert data is worth stating.
When you answer using BigPanda MCP tools, state: - Which action plan you called, and the query text you sent it. The tool takes free text, so the wording matters. - That the answer came from an action plan rather than from a direct query against alert data. - The reasoning effort you requested, if you set one. Never state that data does not exist. State the action plan you called and what it returned. Write your answer in ASD-STE100 Simplified Technical English. Use short sentences with one idea in each.
Do you need the MCP server at all?
Not for anything that runs on a timer. The alert and incident endpoints of the BigPanda API take typed parameters, and they are the direct route for a report you already know how to shape.
For alert correlation without the action plan layer, PagerDuty and Opsgenie expose incident data as structured tools instead of as prose.
Where the question is about metrics rather than incidents, Datadog, Grafana and Prometheus answer it far more cheaply.
BigPanda also publishes an A2A interface for its Alpha agent, using JSON-RPC 2.0 for messages, streamed responses and task status. That is the route for agent-to-agent work rather than tool calls.
With MCP, work your team has already configured becomes callable from outside, without rebuilding any of it as an API integration.
Call tools/list first. The answer is your own configuration, and nobody else's page can tell you what it says.
BigPanda MCP server setup
Nothing is installed. The endpoint is https://api.biggy.io/mcp, and the whole MCP lifecycle runs over HTTP POST against that single path.
Every block below carries a BigPanda bearer token. The specification states that all BigPanda APIs require bearer token authorization in the call headers.
The tool list you get is your own. Each enabled action plan becomes one tool, so confirm what is enabled before wiring an agent to it.
Claude Code
The endpoint speaks streamable HTTP, so no proxy is needed. The token travels as a header.
claude mcp add --transport http bigpanda \ https://api.biggy.io/mcp \ --header "Authorization: Bearer <api-key>"
See your own tool list first
BigPanda publishes this call in its own specification. Run it before configuring a client, because the response is the inventory and it is specific to your organization.
curl -sS -X POST "https://api.biggy.io/mcp" \
-H "Content-Type: application/json" \
-H "Accept: application/json, text/event-stream" \
-H "Authorization: Bearer <api-key>" \
-d '{"jsonrpc":"2.0","id":2,
"method":"tools/list","params":{}}'Cursor
~/.cursor/mcp.json for all projects, or .cursor/mcp.json in one, carrying the same bearer token.
{"mcpServers":{"bigpanda":{"type":"http",
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Codex CLI
Codex reads TOML, so the JSON blocks above will not transfer.
[mcp_servers.bigpanda] url = "https://api.biggy.io/mcp" [mcp_servers.bigpanda.headers] Authorization = "Bearer <api-key>"
Every other client
Each block below is the configuration for one client, with the file path and the key that client expects.
Claude Desktop
macOS ~/Library/Application Support/Claude/claude_desktop_config.json. Windows %APPDATA%\Claude\claude_desktop_config.json. There is no CLI. Edit through Settings, Developer, Edit Config.
Quit and restart fully for changes to load. Claude Desktop cannot send an authorization header directly, so this route proxies through mcp-remote with the token in env.
{"mcpServers":{"bigpanda":{"command":"npx",
"args":["-y","mcp-remote","https://api.biggy.io/mcp",
"--header","Authorization: Bearer ${TOKEN}",
"--transport","http-only"],
"env":{"TOKEN":"<api-key>"}}}}Gemini CLI
~/.gemini/settings.json globally, or .gemini/settings.json per project. Key mcpServers, using httpUrl, carrying the same bearer token.
{"mcpServers":{"bigpanda":{
"httpUrl":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}VS Code Copilot
.vscode/mcp.json per workspace, or your user profile. An inputs prompt avoids writing the token into the file.
{"servers":{"bigpanda":{"type":"http",
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}The key is `servers`, not `mcpServers`. VS Code is the only client that uses that name, and copying a config from anywhere else fails silently.
Windsurf
~/.codeium/windsurf/mcp_config.json, which is the path Windsurf documents. Key mcpServers, carrying the same bearer token.
{"mcpServers":{"bigpanda":{
"serverUrl":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Zed
~/.config/zed/settings.json, under context_servers, carrying the same bearer token.
{"context_servers":{"bigpanda":{
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Google Antigravity
~/.gemini/config/mcp_config.json globally, or .agents/mcp_config.json per project. Key mcpServers. There is no CLI. Use the /mcp overlay. Streamable HTTP is supported, carrying the same bearer token.
{"mcpServers":{"bigpanda":{"type":"http",
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Amp (Sourcegraph)
~/.config/amp/settings.json or .amp/settings.json, carrying the same bearer token. The amp mcp CLI covers approve, doctor and oauth.
{"amp.mcpServers":{"bigpanda":{
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Cline
~/.cline/mcp.json per the docs. The source also reads ~/.cline/data/settings/cline_mcp_settings.json. Key mcpServers, carrying the same bearer token.
{"mcpServers":{"bigpanda":{"type":"streamableHttp",
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Goose (Block)
~/.config/goose/config.yaml, carrying the same bearer token in the headers map.
extensions:
bigpanda:
type: streamable_http
uri: https://api.biggy.io/mcp
headers:
Authorization: Bearer <api-key>Kiro (AWS)
.kiro/settings/mcp.json per workspace, or ~/.kiro/settings/mcp.json globally. Kiro runs stdio servers, so this route uses the same mcp-remote proxy as Claude Desktop, carrying the same bearer token.
{"mcpServers":{"bigpanda":{"command":"npx",
"args":["-y","mcp-remote","https://api.biggy.io/mcp",
"--header","Authorization: Bearer ${TOKEN}",
"--transport","http-only"],
"env":{"TOKEN":"<api-key>"}}}}Warp
~/.warp/.mcp.json or .warp/.mcp.json. Key mcpServers, carrying the same bearer token. Also addable through the /agent-add-mcp skill.
{"mcpServers":{"bigpanda":{
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}JetBrains Junie
.junie/mcp/mcp.json per project, or ~/.junie/mcp/mcp.json. Key mcpServers, carrying the same bearer token. Use /mcp in the CLI to manage.
{"mcpServers":{"bigpanda":{"type":"http",
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Roo Code
.roo/mcp.json per project. The global file is mcp_settings.json, opened from the Roo Code MCP settings view with Edit Global MCP. Key mcpServers, carrying the same bearer token.
{"mcpServers":{"bigpanda":{
"type":"streamable-http",
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Continue
.continue/mcpServers/*.yaml, one file per server, carrying the same bearer token.
name: BigPanda
version: 0.0.1
schema: v1
mcpServers:
- name: bigpanda
type: streamable-http
url: https://api.biggy.io/mcp
requestOptions:
headers:
Authorization: Bearer <api-key>Trae
.trae/mcp.json per project, or paste into the UI under Raw Config (JSON). Key mcpServers, standard shape, carrying the same bearer token.
{"mcpServers":{"bigpanda":{
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}Devin
Devin has no config file to edit. Servers are added through a web form in the settings UI, and Devin's documentation states you do not need to write or paste JSON. The block below is the shape those fields describe, shown for reference. Either route uses the same bearer token.
{"mcpServers":{"bigpanda":{"type":"http",
"url":"https://api.biggy.io/mcp",
"headers":{"Authorization":"Bearer <api-key>"}}}}The other direction: Biggy as the client
A different feature, configured in the BigPanda web app under integrations, Add MCP. Service type is Observability, ITSM or Context Retrieval, and the form takes your server URL, a bearer token for it, optional custom headers and a deployment type.
Marking an integration as on-prem makes it eligible for the Biggy Relay Client, which reaches infrastructure behind your firewall. The trust policy is the field that matters, and it is described below.
Integrations -> + Add MCP Service Type: Observability | ITSM | Context Retrieval MCP Server URL: https://your-server.example.com/mcp Bearer Token: <token Biggy uses to call your server> Deployment: Cloud | On Prem Trust Policy: Allow only selected tools (recommended)
Read-only access, permissions and security
Your action plans are the attack surface, in both directions
Anything enabled becomes callable, and the description an external agent reads is generated from fields your own team wrote.
Free text is the only parameter
There is nothing to validate at the schema level: an agent sends a sentence, and the action plan decides what to do with it.
In the client direction, prefer the allowlist
BigPanda offers two trust policies. Allow only selected tools is the one it marks as recommended, and new tools then need explicit approval. Auto-trust all tools allows every tool the server exposes, including ones added later.
The on-prem option crosses your firewall deliberately
Marking an integration as on-prem makes it eligible for the Biggy Relay Client, which is how it reaches internal infrastructure.
The token is a full BigPanda API key
The specification states that all BigPanda APIs require bearer token authorization, so the credential is not scoped to MCP alone.
Troubleshooting
- `405 Method Not Allowed`
- Only POST is supported. The specification states that GET and DELETE return 405, because stateless mode uses neither sessions nor server-sent event streams.
- `tools/list` returns nothing useful
- The list is your enabled action plans. If it is short or empty, the answer is in the BigPanda action plan configuration, not in the client.
- The agent picks the wrong action plan
- Tool descriptions are generated from each plan's
descriptionandwhenToSelectfields. Rewriting those fields is the supported way to change how an external agent chooses. - Answers are shallow or too slow
- Every tool accepts a
reasoningEffortof low, medium or high. It is optional, so a client that omits it takes whatever the server defaults to. - The response is hard to parse
- Set
responseFormattoplain-text. The default documented in the schema table ismarkdown. - Biggy cannot reach your internal server
- Set the deployment type to On Prem. That marks the integration as eligible to connect through the Biggy Relay Client, which is the documented route to infrastructure behind a firewall.
BigPanda MCP server: Reference
| Item | Value |
|---|---|
| Endpoint | POST https://api.biggy.io/mcp |
| Live check | HTTP 403 to an unauthenticated POST, 25 August 2026 |
| Server name | biggy-action-plans, version 1.0.0 |
| Protocol | 2025-11-25 |
| Transport | Stateless HTTP POST. No sessions, no SSE |
| Methods | initialize, tools/list, tools/call |
| GET and DELETE | 405 Method Not Allowed |
| Tools | One per enabled action plan. No fixed count |
| Tool descriptions | Generated from description and whenToSelect |
| Input schema | query required · responseFormat · reasoningEffort |
| Auth | Bearer token, as with every BigPanda API |
| Client direction | Add MCP in the web app, with a trust policy |
| Inventory source | BigPanda public API specification, read 25 August 2026 |
What the vendor documents
The facts below come from BigPanda's own API specification and its MCP integration documentation, read 25 August 2026. No tool count can exist, because the inventory is per organization. Public discussion of the endpoint is thin.
| What was checked | What it shows |
|---|---|
| Endpoints | One, /mcp |
| Methods supported | Three |
| Input fields per tool | Three, one required |
| Reasoning levels | Three: low, medium, high |
| Response formats | Two: markdown, plain text |
| Client service types | Three: Observability, ITSM, Context Retrieval |
| Trust policy options | Two, one marked recommended |
| Fixed tool count | None |
“Each enabled action plan in your organization becomes an MCP tool. Tool descriptions are derived from the action plan's description and whenToSelect fields, giving external agents enough context to choose the right tool autonomously.”
“Allow only selected tools (Recommended): Pick exactly which tools Biggy can call. New tools require explicit approval.”
“GET and DELETE calls return 405 Method Not Allowed (stateless mode does not use sessions or server-sent event (SSE) streams).”
The BigPanda public API specification and the MCP integration documentation were read on 25 August 2026, and the endpoint was probed on the same date. No tool count is claimed, because the specification states the inventory is per organization.
Should you connect an agent to BigPanda?
Yes. Best for incident questions phrased in English, against action plans you have reviewed.
- Strongest fit
- BigPanda customers who have already built action plans and want external agents to reach them.
- Main advantage
- Work that already exists becomes callable without building an integration for each capability.
- Main weakness
- Nothing about the tool list is knowable in advance, because it is generated from your own configuration.
- Operational risk
- Free text is the only input, so nothing is validated before an action plan acts on it.
From Oodle
One platform for agent traces and infrastructure
Agent traces usually sit in a different product from the rest of your telemetry, so when a slow database makes an agent slow the symptom is in one tool and the cause is in another. Oodle keeps both in one query surface, from $10 per million spans.
See agent observabilityFrequently asked questions
Does BigPanda have an official MCP server?
Yes. POST https://api.biggy.io/mcp is a documented public API operation, described as using Biggy action plans as remote MCP tools.
How many tools does it expose?
There is no fixed number. The specification states that each enabled action plan in your organization becomes one MCP tool, so the count differs per customer.
What parameters do the tools take?
All of them share one schema: a required query in natural language, an optional responseFormat of markdown or plain text, and an optional reasoningEffort of low, medium or high.
Why do GET requests fail?
Only POST is supported. The specification states that GET and DELETE return 405, because stateless mode uses no sessions and no server-sent event streams.
Can Biggy call my MCP server instead?
Yes, and it is a separate feature. Add it in the web app under integrations, choosing Observability, ITSM or Context Retrieval as the service type.
Which trust policy should I choose there?
BigPanda marks Allow only selected tools as recommended. The alternative auto-trusts every tool the server exposes, including tools added in the future.