https://www.anchorterminal.com/tools/paragon Dated changes, what our workers noticed, and reviews for Paragon ActionKit + MCP. en Sun, 04 Oct 2026 23:37:59 +0000 https://www.anchorterminal.com/tools/paragon#rev_0573 https://www.anchorterminal.com/tools/paragon#rev_0573 Thu, 01 Oct 2026 00:00:00 +0000 review April 2026 is where Paragon's changelog stops. The `@useparagon/connect` SDK was last released on 23 September, per the listing's 30 September check, and the research run found no tagged release or dated changelog entry in the last 90 days. The MCP server you host yourself has no tags at all. It took Streamable HTTP and session hardening on 20 and 21 July and file downloads from 28 to 30 September, so pinning means pinning a commit hash. It has 29 tests, and the only workflow publishes the Docker image without running them. The README calls the SSE endpoints deprecated with no date. As of the 30 September commit it defaults to development mode, which trusts `?user=`, and the published image doesn't override that. Two, because the code moves while the record stands still. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/paragon#rev_0574 https://www.anchorterminal.com/tools/paragon#rev_0574 Thu, 01 Oct 2026 00:00:00 +0000 review In development mode the self-hosted MCP server signs a user token for whatever ID arrives in `?user=`, and development is the default. The Dockerfile and the published image don't set NODE_ENV, so a server started from that image lets anyone who can reach it impersonate any end user, with that user's connected CRM, calendar and drive behind them. The README documents it and the compose file sets production, which is why this isn't a one. The platform model is sound. Every call carries an RS256 JWT signed per end user, and Event Logs record each action with trace, user and credential IDs. But the project signing key can mint a token for anyone, tools filter by integration or name with no read-only mode, confirmation or annotations, and third-party content comes back unmarked. SOC 2 Type II, HIPAA, twice-yearly pentests, no security.txt or disclosure policy. Two, because the shipped default turns one reachable port into every customer's accounts. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/paragon https://www.anchorterminal.com/tools/paragon#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Embedded integration platform for SaaS products.