B

MongoDB MCP Server

Official MongoDB MCP server for database CRUD operations, aggregation, schema inspection, Atlas cloud cluster management, Atlas Streams, local deployments, and knowledge base search.

Overall Score73/100

Score Breakdown

Server Info

Package
mongodb-mcp-server
Registry
npm
Maintainer
MongoDBVendor
Category
Developer Tools
Tags
nosqldatabasemongodb
Last Scanned
28 May 2026

Findings

6 issues

Authentication & Identity

HIGHNo MCP OAuth spec implementation

Server does not implement the MCP OAuth authorization server spec. The platform must handle the full OAuth flow, token management, and credential injection externally.

Remediation

Implement the MCP OAuth spec (.well-known/oauth-authorization-server) for native per-user authentication.

HIGHEnv var credentials with no rotation mechanism

Credentials (MDB_MCP_CONNECTION_STRING, MDB_MCP_API_CLIENT_ID, MDB_MCP_API_CLIENT_SECRET) are read from environment variables at startup. Rotation requires restarting the server process. All requests share the same service account credential.

Remediation

Support dynamic credential refresh or secrets manager integration.

Tool Schema Quality

HIGHRequired fields missing on 1 write operations

Write tools without required field declarations: atlas-local-create-deployment.

Remediation

Add required arrays to all write/delete tool schemas.

MEDIUMOnly 2 of 48 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

LLM Safety

HIGHTool descriptions contain instructional language

Descriptions include directives that could influence LLM behavior beyond tool selection.

Remediation

Remove instructional language. Descriptions should be purely factual.

Data Exposure

MEDIUM6 list operations lack pagination

find tool has a configurable limit (default 10) and a 1MB response bytes ceiling (responseBytesLimit). aggregate and aggregate-db pipelines can return unlimited results without a built-in cap unless the pipeline includes a $limit stage. list-databases, list-collections, collection-indexes have no documented pagination or result caps. find supports projection for field selection. atlas-get-performance-advisor limits slow query logs to a configured default count. export tool writes to file, bypassing in-memory size limits.

Remediation

Add limit/offset or cursor-based pagination.

Tools

48 total
NameDescriptionRisk
connectConnect to a MongoDB instance using a connection string.write
switch-connectionSwitch to a different active MongoDB connection.write
list-databasesList all databases on the connected MongoDB instance.read
list-collectionsList collections in a database.read
collection-indexesList indexes on a collection.read
collection-schemaInspect the inferred schema of a collection by sampling documents.read
collection-storage-sizeGet the storage size statistics for a collection.read
db-statsGet statistics for a database.read
findQuery documents in a MongoDB collection using EJSON filter syntax. Limit defaults to 10; responseBytesLimit defaults to 1MB.read
countCount documents in a collection matching a filter.read
aggregateRun an aggregation pipeline on a collection.read
aggregate-dbRun a database-level aggregation pipeline (e.g., $listLocalSessions, cross-collection).read
explainExplain the execution plan for a query or aggregation.read
exportExport documents from a collection to a file.read
mongodb-logsRetrieve recent MongoDB server logs.read
insert-manyInsert multiple documents into a collection.write
update-manyUpdate multiple documents in a collection matching a filter.write
delete-manyDelete multiple documents matching a filter from a collection.write
create-collectionCreate a new collection in a database.write
create-indexCreate an index on a collection.write
rename-collectionRename a collection.write
drop-collectionDrop (delete) a collection and all its documents. Destructive admin operation.admin
drop-databaseDrop an entire database and all its collections. Destructive admin operation.admin
drop-indexDrop an index from a collection.write
atlas-list-clustersList Atlas clusters in a project.read
atlas-list-projectsList Atlas projects in an organization.read
atlas-inspect-clusterGet configuration details for an Atlas cluster.read
atlas-create-free-clusterCreate a free-tier Atlas cluster.write
atlas-upgrade-clusterUpgrade an Atlas cluster tier or configuration.write
atlas-create-access-listAdd IP addresses to Atlas project access list.write
atlas-inspect-access-listGet the current IP access list for an Atlas project.read
atlas-list-db-usersList database users for an Atlas project.read
atlas-create-db-userCreate a database user in Atlas.write
atlas-create-projectCreate a new Atlas project.write
atlas-list-orgsList Atlas organizations.read
atlas-connect-clusterConnect to an Atlas cluster (sets up connection string).write
atlas-list-alertsList alerts for an Atlas project.read
atlas-get-performance-advisorGet performance advisor recommendations (slow query logs and index suggestions) for an Atlas cluster. Limited to most recent slow queries.read
atlas-streams-discoverDiscover Atlas Streams instances and connections.read
atlas-streams-buildBuild and deploy an Atlas Streams processor. Typical workflow: create workspace → add connections → deploy processor.write
atlas-streams-manageManage Atlas Streams processor lifecycle: start, stop, modify. Common workflow: stop → modify → start.write
atlas-streams-teardownTear down an Atlas Streams processor or instance.admin
atlas-local-list-deploymentsList local Atlas deployments.read
atlas-local-create-deploymentCreate a local Atlas deployment using Docker.write
atlas-local-connect-deploymentConnect to a local Atlas deployment.write
atlas-local-delete-deploymentDelete a local Atlas deployment. Destructive admin operation.admin
list-knowledge-sourcesList available MongoDB knowledge sources for documentation search.read
search-knowledgeSearch MongoDB knowledge base for documentation and guidance.read

Deploy MongoDB MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow