MongoDB MCP Server

by mongodb-jsio.github.mongodb-js/mongodb-mcp-serverv2.1.0

MongoDB Model Context Protocol Server

1.1kNode.jsstdioofficial registry

context tax

pending

security

97/100

cold start

pending

freshness

Active5d ago

Our reading of MongoDB, from the data

MongoDB is a database MCP server from mongodb-js, listed in the official MCP Registry.

We haven't measured its tool list yet, so its token cost is unknown.

Maintenance is active: the last public signal was 5 days ago (2026-10-16). For comparison, 63% of database servers are active or maintained.

With 1,144 GitHub stars it ranks #23 of 1,397 database servers we index.

It runs locally on your machine over stdio and needs 4 secrets (MDB_MCP_API_CLIENT_ID, MDB_MCP_API_CLIENT_SECRET, MDB_MCP_CONNECTION_STRING, …); use a scoped, least-privilege key.

Install MongoDB MCP server

claude mcp add mongodb-mongodb-js -e MDB_MCP_API_CLIENT_ID='<mdb-mcp-api-client-id>' -e MDB_MCP_API_CLIENT_SECRET='<mdb-mcp-api-client-secret>' -e MDB_MCP_CONNECTION_STRING='<mdb-mcp-connection-string>' -e MDB_MCP_VOYAGE_API_KEY='<mdb-mcp-voyage-api-key>' -- npx -y mongodb-mcp-server

{
  "mcpServers": {
    "mongodb-mongodb-js": {
      "command": "npx",
      "args": [
        "-y",
        "mongodb-mcp-server"
      ],
      "env": {
        "MDB_MCP_API_CLIENT_ID": "<mdb-mcp-api-client-id>",
        "MDB_MCP_API_CLIENT_SECRET": "<mdb-mcp-api-client-secret>",
        "MDB_MCP_CONNECTION_STRING": "<mdb-mcp-connection-string>",
        "MDB_MCP_VOYAGE_API_KEY": "<mdb-mcp-voyage-api-key>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "mongodb-mongodb-js": {
      "command": "npx",
      "args": [
        "-y",
        "mongodb-mcp-server"
      ],
      "env": {
        "MDB_MCP_API_CLIENT_ID": "<mdb-mcp-api-client-id>",
        "MDB_MCP_API_CLIENT_SECRET": "<mdb-mcp-api-client-secret>",
        "MDB_MCP_CONNECTION_STRING": "<mdb-mcp-connection-string>",
        "MDB_MCP_VOYAGE_API_KEY": "<mdb-mcp-voyage-api-key>"
      }
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "mongodb-mongodb-js": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mongodb-mcp-server"
      ],
      "env": {
        "MDB_MCP_API_CLIENT_ID": "<mdb-mcp-api-client-id>",
        "MDB_MCP_API_CLIENT_SECRET": "<mdb-mcp-api-client-secret>",
        "MDB_MCP_CONNECTION_STRING": "<mdb-mcp-connection-string>",
        "MDB_MCP_VOYAGE_API_KEY": "<mdb-mcp-voyage-api-key>"
      }
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "mongodb-mongodb-js": {
      "command": "npx",
      "args": [
        "-y",
        "mongodb-mcp-server"
      ],
      "env": {
        "MDB_MCP_API_CLIENT_ID": "<mdb-mcp-api-client-id>",
        "MDB_MCP_API_CLIENT_SECRET": "<mdb-mcp-api-client-secret>",
        "MDB_MCP_CONNECTION_STRING": "<mdb-mcp-connection-string>",
        "MDB_MCP_VOYAGE_API_KEY": "<mdb-mcp-voyage-api-key>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
MDB_MCP_ALLOW_REQUEST_OVERRIDES	—	—	When set to true, allows configuration values to be overridden via request headers and query parameters.
MDB_MCP_API_CLIENT_ID	—	yes	Atlas API client ID for authentication. Required for running Atlas tools.
MDB_MCP_API_CLIENT_SECRET	—	yes	Atlas API client secret for authentication. Required for running Atlas tools.
MDB_MCP_ASSISTANT_BASE_URL	—	—	Base URL for the MongoDB Assistant API.
MDB_MCP_ATLAS_TEMPORARY_DATABASE_USER_LIFETIME_MS	—	—	Time in milliseconds that temporary database users created when connecting to MongoDB Atlas clusters will remain active before being automatically deleted.
MDB_MCP_CONFIRMATION_REQUIRED_TOOLS	—	—	Comma separated values of tool names that require user confirmation before execution. Requires the client to support elicitation.
MDB_MCP_CONNECTION_SCOPE	—	—	Visibility scope for MongoDB connections created at runtime. With 'session' (the default), each MCP session only sees the connections it created (plus the shared 'preconfigured' one) and they are closed when the session ends — recommended when the HTTP transport is exposed to multiple clients without authentication. With 'global', connections are shared across all sessions and survive session rotation.
MDB_MCP_CONNECTION_STRING	—	yes	MongoDB connection string for direct database connections. Optional, if not set, you'll need to call the connect tool before interacting with MongoDB data.
MDB_MCP_DISABLE_SERVER_SIDE_JS	—	—	When set to true, disallows the use of server-side JavaScript operators (such as $where, $function, and $accumulator) in query filters and aggregation pipelines.
MDB_MCP_DISABLED_TOOLS	—	—	Comma separated values of tool names, operation types, and/or categories of tools that will be disabled.
MDB_MCP_DRY_RUN	—	—	When true, runs the server in dry mode: dumps configuration and enabled tools, then exits without starting the server.
MDB_MCP_ELICITATION_TIMEOUT_MS	—	—	Time in milliseconds the user has to respond to an elicitation request (such as a tool confirmation prompt) before it fails.
MDB_MCP_EXPORT_CLEANUP_INTERVAL_MS	—	—	Time in milliseconds between export cleanup cycles that remove expired export files.
MDB_MCP_EXPORT_TIMEOUT_MS	—	—	Time in milliseconds after which an export is considered expired and eligible for cleanup.
MDB_MCP_EXPORTS_PATH	—	—	Folder to store exported data files.
MDB_MCP_EXTERNALLY_MANAGED_SESSIONS	—	—	When true, the HTTP transport allows requests with a session ID supplied externally through the 'mcp-session-id' header. When an external ID is supplied, the initialization request is optional.
MDB_MCP_HEALTH_CHECK_HOST	—	—	Deprecated. Use `monitoringServerHost` instead. Host address to bind the healthCheck HTTP server to (only used when transport is 'http'). If provided, `healthCheckPort` must also be set.
MDB_MCP_HEALTH_CHECK_PORT	—	—	Deprecated. Use `monitoringServerPort` instead. Port number for the healthCheck HTTP server (only used when transport is 'http'). If provided, `healthCheckHost` must also be set.
MDB_MCP_HTTP_BODY_LIMIT	—	—	Maximum size of the HTTP request body in bytes (only used when transport is 'http'). This value is passed as the optional limit parameter to the Express.js json() middleware.
MDB_MCP_HTTP_HEADERS	—	—	Header that the HTTP server will validate when making requests (only used when transport is 'http').
MDB_MCP_HTTP_HOST	—	—	Host address to bind the HTTP server to (only used when transport is 'http').
MDB_MCP_HTTP_PORT	—	—	Port number for the HTTP server (only used when transport is 'http'). Use 0 for a random port.
MDB_MCP_HTTP_RESPONSE_TYPE	—	—	The HTTP response type for tool responses: 'sse' for Server-Sent Events, 'json' for standard JSON responses.
MDB_MCP_IDLE_TIMEOUT_MS	—	—	Idle timeout for a client to disconnect (only applies to http transport).
MDB_MCP_INDEX_CHECK	—	—	When set to true, enforces that query operations must use an index, rejecting queries that perform a collection scan.
MDB_MCP_LOG_PATH	—	—	Folder to store logs.
MDB_MCP_LOGGERS	—	—	Comma separated values of logger types.
MDB_MCP_MAX_ACTIVE_CONNECTIONS	—	—	Maximum number of MongoDB connections a single scope (an MCP session by default, see connectionScope) can hold open. When exceeded, the scope's least-recently-used connection is closed and its connectionId revoked. The preconfigured connection does not count towards the limit.
MDB_MCP_MAX_BYTES_PER_QUERY	—	—	The maximum size in bytes for results from a find or aggregate tool call. This serves as an upper bound for the responseBytesLimit parameter in those tools.
MDB_MCP_MAX_DOCUMENTS_PER_QUERY	—	—	The maximum number of documents that can be returned by a find or aggregate tool call. For the find tool, the effective limit will be the smaller of this value and the tool's limit parameter.
MDB_MCP_MAX_SESSIONS	—	—	Maximum number of concurrent sessions the HTTP transport will hold in memory (only used when transport is 'http'). Each session holds a full server instance, transport, and timers, so choose a value based on your deployment's available memory; the default is a conservative safety net rather than a recommended production value.
MDB_MCP_MAX_TIME_M_S	—	—	The maximum time in milliseconds that operations are allowed to run on the MongoDB server. When set, this value is passed as the maxTimeMS option to read operations such as find, aggregate, and count.
MDB_MCP_MCP_CLIENT_LOG_LEVEL	—	—	Minimum severity level for log messages forwarded to the MCP client.
MDB_MCP_MONITORING_SERVER_FEATURES	—	—	Features to expose on the monitoring server (only used when transport is 'http' and monitoringServerHost/monitoringServerPort are set).
MDB_MCP_MONITORING_SERVER_HOST	—	—	Host address to bind the monitoring HTTP server to (only used when transport is 'http'). If provided, `monitoringServerPort` must also be set.
MDB_MCP_MONITORING_SERVER_PORT	—	—	Port number for the monitoring HTTP server (only used when transport is 'http'). If provided, `monitoringServerHost` must also be set.
MDB_MCP_NOTIFICATION_TIMEOUT_MS	—	—	Notification timeout for a client to be aware of disconnect (only applies to http transport).
MDB_MCP_PREVIEW_FEATURES	—	—	Comma separated values of preview features that are enabled.
MDB_MCP_READ_ONLY	—	—	When set to true, only allows read, connect, and metadata operation types, disabling create/update/delete operations.
MDB_MCP_TELEMETRY	—	—	When set to disabled, disables telemetry collection.
MDB_MCP_TRANSPORT	—	—	Either 'stdio' or 'http'.
MDB_MCP_VOYAGE_API_KEY	—	yes	API key for Voyage AI embeddings service (required for creating Atlas Local deployments with auto-embed vector search capabilities).

Security signals

97/100 — no known issues found as of 2026-10-19, from the checks below. This is not a guarantee of safety; review what a server can do before connecting it.

Deductions

No security policy (SECURITY.md)-3

Checks

✓Repository hygiene (archived, activity, license, security policy)
○Package metadata (install scripts, provenance) — pending
○Tool descriptions (prompt-injection and hidden-text heuristics) — pending
○Source scan (secrets, CVEs, risky code) by vectra-guard — pending

Scan it yourself before installing with vectra-guard, the open-source agent security CLI (made by NavyaAI, which also runs MCPSkillHub). Scoring rules

Freshness

Active — last maintenance signal 5d ago. The newest of the signals below sets the band.

Last commit (default branch)
2026-10-16 · 5d ago · GitHub
Latest release
2026-10-15 · 6d ago · GitHub · v3.1.0
Package published
no data · npm/PyPI
Registry entry updated
2026-08-10 · 2mo ago · official registry · v2.1.0

How it compares in Database

Against the most-starred database servers we index. Token cost is per model turn, measured from each server's live tool list.

Server	Stars	Tools	Tokens / turn	Freshness	Runs
MongoDB (this)	1,144	—	not measured	Active	local
Screenpipe	21,982	—	not measured	Active	—
Genai Toolbox	16,679	—	not measured	Active	hosted
Convex Backend	12,716	—	not measured	Active	—
Kubeshark	12,100	—	not measured	Active	local
Baserow	6,174	—	not measured	Active	—

All database MCP servers

FAQ

›How do I install the MongoDB MCP server in Claude Code?

Run: claude mcp add mongodb-mongodb-js -e MDB_MCP_API_CLIENT_ID='<mdb-mcp-api-client-id>' -e MDB_MCP_API_CLIENT_SECRET='<mdb-mcp-api-client-secret>' -e MDB_MCP_CONNECTION_STRING='<mdb-mcp-connection-string>' -e MDB_MCP_VOYAGE_API_KEY='<mdb-mcp-voyage-api-key>' -- npx -y mongodb-mcp-server. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does MongoDB require an API key?

Yes. It expects MDB_MCP_API_CLIENT_ID, MDB_MCP_API_CLIENT_SECRET, MDB_MCP_CONNECTION_STRING, MDB_MCP_VOYAGE_API_KEY, of which 4 are secrets.

›Can I use MongoDB as a remote (hosted) MCP server?

No hosted endpoint is published; it runs locally over stdio.

›Is MongoDB in the official MCP registry?

Yes, as io.github.mongodb-js/mongodb-mcp-server.

Sources and method

Official MCP Registry entry: updated 2026-08-10
GitHub repository: fetched 2026-10-19
Package registry (npm / PyPI): listed
Security signals, computed by us: 2026-10-19
Last checked against all sources: 2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Editorial standards are owned by Ramachandra Vikas Chamarthi, Founder & AI HPC Architect. Spot an error? Request a correction or claim the listing.

License: Apache-2.0
Last commit: 2026-10-16
npm: mongodb-mcp-server
oci: docker.io/mongodb/mongodb-mcp-server:2.1.0
Indexed from: registry

Repository npm

Related servers

size = stars · dark = fresh

Servers similar to MongoDB in Database and related categories.

Maintain this server?

Claim it to get a verified badge and request re-analysis.

Claim this listing

Verify with GitHub repo access or a DNS TXT record on your domain.

Add to your README

[![MCP security](https://mcpskillhub.com/badge/mongodb-mongodb-js/security.svg)](https://mcpskillhub.com/servers/mongodb-mongodb-js) [![MCP tokens](https://mcpskillhub.com/badge/mongodb-mongodb-js/tokens.svg)](https://mcpskillhub.com/servers/mongodb-mongodb-js) [![MCP freshness](https://mcpskillhub.com/badge/mongodb-mongodb-js/freshness.svg)](https://mcpskillhub.com/servers/mongodb-mongodb-js)