What it is
The MongoDB MCP Server gives agents 53 tools in four groups: database tools such as find, aggregate, explain, collection-schema and index management; Atlas tools for projects, clusters, database users, access lists, alerts and Stream Processing; Atlas Local tools for local deployments; and two MongoDB Assistant knowledge tools. It works with self-managed MongoDB and with Atlas.
Run it locally with npx -y mongodb-mcp-server@latest --readOnly and a connection string or Atlas service-account credentials in environment variables, use Docker or the interactive setup script, or install MongoDB’s plugins. The mongodb-atlas plugin connects to a MongoDB-hosted Atlas server over OAuth with nothing to run locally. Version 3.1.0 shipped on 15 October 2026.
Install
npx -y mongodb-mcp-server@latest --readOnlyOur review
MongoDB has thought harder about agent safety than most database vendors, and the defaults show it. Every README example passes --readOnly. Destructive tools such as drop-database and delete-many ask for confirmation in clients that support elicitation, and query results arrive wrapped in delimiters with a prompt-injection warning unless you switch that off. Aggregations with a $out or $merge stage are confirmed regardless, since $out replaces a collection outright.
The flip side is size. Across its four groups the server lists 53 tools, and the Atlas set includes atlas-create-cluster for M10 to M80 tiers and atlas-upgrade-cluster. In write mode with an over-privileged service account, an agent can start a dedicated cluster billed from $0.08 an hour for M10 to $7.30 for M80. The disabledTools option accepts whole categories, so turning off atlas when the job is querying is cheap insurance.
Result caps keep context and cost bounded: 100 documents and 16 MB per find or aggregate by default, and an optional indexCheck mode rejects collection scans, useful when an agent is pointed at production-sized data. The local server has no authentication, binds to 127.0.0.1, and refuses other hosts unless you set MDB_MCP_DANGEROUS_HOST_BINDING. The README is frank that its session scoping is not a security boundary between users.
Telemetry is on by default and goes to MongoDB; --telemetry disabled stops it. Releases are frequent, with 3.1.0 a fortnight after 3.0.5, and Node 20 support is deprecated in favour of 22.13 or later. For shared use MongoDB steers teams to its hosted Atlas server over OAuth rather than a self-hosted instance, an honest admission of where the local binary stops.
Where it earns its place
A backend developer on a Node.js app backed by Atlas
Find out why the orders endpoint slowed down after a schema change
In read-only mode the agent runs collection-schema, explain and atlas-get-performance-advisor, then proposes an index for a person to create. There is no cost beyond the cluster, and indexCheck stops the agent’s own exploratory queries from scanning large collections.
A data analyst at a 50-person e-commerce company
Answer ad hoc questions about orders without writing aggregation pipelines
Point the server at a secondary with --readOnly and a read-only database user; the agent drafts pipelines and gets back at most 100 documents a call. It saves waiting on an engineer, and the risk is limited to query load.
A platform team running developer sandboxes on Atlas
Let engineers create and tear down test clusters from their editor
With a scoped service account, Atlas tools create projects, free clusters and access-list entries, and access-list and user creation ask for confirmation by default. M0 is free and Flex runs $8 to $30 a month, but the same account can create M10+ clusters unless its Atlas role forbids it.
Before you commit
- Setup
- npx -y mongodb-mcp-server@latest --readOnly with MDB_MCP_CONNECTION_STRING set (Node 22.13 or later), Docker, a setup script, or the mongodb and mongodb-atlas plugins for Cursor, VS Code, Claude, Codex, Copilot CLI and Grok. Atlas tools appear only once service-account credentials are configured.
- Integrations
- 53 tools: 25 database tools, 22 Atlas tools including Stream Processing and cluster creation, 4 Atlas Local tools and 2 Assistant knowledge tools. --readOnly removes every create, update and delete tool rather than blocking calls at runtime.
- Data and privacy
- The server can do whatever the database user or Atlas service account can, so the MongoDB role is the real boundary, not the flag. Results are wrapped as untrusted data by default; telemetry to MongoDB is on unless disabled; the README sets secrets through environment variables rather than arguments.
- Cost at scale
- The server is free. Atlas M0 is free with 512 MB, Flex is $8 to $30 a month, and dedicated tiers run from $0.08 an hour (from $56.94 a month) for M10 to $7.30 an hour for M80, the largest tier atlas-create-cluster offers.
- Limits
- Defaults of 100 documents and 16 MB per query; confirmations need a client that supports elicitation. HTTP mode has no authentication or per-user isolation, and the server is not yet supported on Atlas Infinite clusters during their public preview.
What's good
- --readOnly in every example; confirmations on destructive tools
- Results wrapped with a prompt-injection warning by default
- 100-document and 16 MB caps per query by default
- Hosted Atlas server over OAuth for teams
What's not
- 53 tools across four groups crowd context
- Write mode can create paid Atlas clusters
- Telemetry on by default
- Local server has no auth and no per-user isolation
Best for
Teams on MongoDB or Atlas who want agents to explore data and manage clusters with safety defaults already in place.
Alternatives
MongoDB MCP Server: common questions
- Is MongoDB MCP Server worth it?
- Read-only examples, confirmation prompts and injection-wrapped results make this a careful default for MongoDB, provided you trim its 53 tools. We rate it 4.4 out of 5.
- How much does MongoDB MCP Server cost?
- Server is free and Apache-2.0 licensed. Atlas M0 is free with 512 MB; Flex costs $8–$30 a month; dedicated clusters start at $0.08/hour (M10).
- What are the downsides of MongoDB MCP Server?
- 53 tools across four groups crowd context; write mode can create paid Atlas clusters; telemetry on by default; local server has no auth and no per-user isolation.
- Who is MongoDB MCP Server best for?
- Teams on MongoDB or Atlas who want agents to explore data and manage clusters with safety defaults already in place.
- How much does MongoDB MCP Server cost for a team or in production?
- The server is free. Atlas M0 is free with 512 MB, Flex is $8 to $30 a month, and dedicated tiers run from $0.08 an hour (from $56.94 a month) for M10 to $7.30 an hour for M80, the largest tier atlas-create-cluster offers.
- Is MongoDB MCP Server safe for company data?
- The server can do whatever the database user or Atlas service account can, so the MongoDB role is the real boundary, not the flag. Results are wrapped as untrusted data by default; telemetry to MongoDB is on unless disabled; the README sets secrets through environment variables rather than arguments.
- What are the best MongoDB MCP Server alternatives?
- The closest alternatives we have reviewed are Supabase MCP Server, MCP Toolbox for Databases and Redis MCP Server.
Answers checked Oct 22, 2026.
Make MongoDB MCP Server? Show this rating on your site
