MongoDB
MongoDB's official MCP for natural-language queries against your collections. Read-only by default, with explicit write toggles.
Delv Safety Grade: A+
Score 92/100 · assessed 2026-04-28
MongoDB's official MCP server is a well-engineered interface for natural-language database queries. The maintainer score is excellent: MongoDB Inc. is a major database vendor with deep resources and a strong track record. The server is distributed via npm with standard versioning and ships read-only by default, which is a sensible safety posture. Permissions are reasonably scoped: it reads and optionally writes to MongoDB collections, plus requires network access to your database. The explicit write toggle is good design. Transparency is strong with open-source code, clear documentation, and active maintenance. Supply chain is solid via npm, though not cryptographically signed. No known security incidents. The main risk is that you're handing an AI direct database access, so connection-string hygiene and network segmentation matter. Overall, this is a trustworthy tool from a reputable vendor with appropriate guardrails.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREERead-write to a private DB. Trifecta needs a second server.
Green flags
- Official MongoDB Inc. project with active maintenance and resources
- Read-only by default, writes require explicit opt-in flag
- Distributed via npm with standard package management and versioning
- Open source with clear docs and developer blog post
- Scoped to MongoDB operations, no shell or filesystem access
Red flags
- Connection string in env var may expose credentials if misconfigured
- Write mode, when enabled, allows arbitrary mutations without row-level controls
- Network access to database required, broadens attack surface if host compromised
Permissions requested
Install
npx -y mongodb-mcp-server --connectionString mongodb://localhost:27017/mydb
MDB_MCP_CONNECTION_STRINGReview
Install this if you're a MongoDB user who spends time exploring collections or debugging data issues. It's faster than context-switching to a GUI or writing one-off queries. Skip it if you need multi-database support or if your workflow is purely transactional.
Good at
- Natural-language queries save time when exploring unfamiliar collections or debugging data anomalies.
- Read-only default is a sensible safety rail for production connections.
- Shows the generated aggregation pipeline, so you can learn or correct misinterpretations.
- Official MongoDB support means it tracks API changes and best practices.
- Single-command install with no additional dependencies beyond Node.
Watch out
- Natural-language parsing occasionally misinterprets complex nested queries or joins.
- No schema discovery—you need to know your collection names upfront.
- Read-only by default means you need explicit config changes to test writes.
- Limited to MongoDB; if you work across multiple databases, you'll need separate MCPs.
Getting started
Works with
Similar MCPs
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.
- SupabaseSupabase's official MCP — query Postgres, manage auth, inspect storage buckets, all from your agent.
- PostgresQuery Postgres databases with natural language. Read-only access by default - the agent sees your schema and runs SELECT queries safely.
- ClickHouseClickHouse MCP for fast analytical queries. Built by ClickHouse Inc, supports cluster topology discovery.