MongoDB Lens
Full-featured MongoDB MCP with natural language query support, aggregation pipelines, and inspection helpers.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
MongoDB Lens is a solo-maintained community MCP server that provides natural language querying for MongoDB databases. The package is distributed via npm with a straightforward install, which is positive for supply chain integrity. However, it requires full database credentials via MONGODB_URI, granting complete read and write access to your MongoDB instance. The solo maintainer (James Furey) appears active but represents a single point of failure. The natural language query translation feature is powerful but inherently risky - it could misinterpret instructions and execute unintended writes or deletions. The aggregation pipeline support adds complexity that increases the attack surface. No security incidents are known, but the combination of broad database permissions and AI-driven query generation warrants careful consideration. Best suited for development environments rather than production databases.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREESame.
Green flags
- Standard npm distribution with versioned releases
- Open source repository allows code inspection
- No known security incidents or malicious behaviour
- Clear install process via npx without custom scripts
Red flags
- Full database write access via MONGODB_URI with no scoping mechanism
- Solo maintainer with limited community review or oversight
- Natural language query translation could misinterpret destructive operations
- No apparent rate limiting or query validation safeguards documented
- Aggregation pipelines allow complex operations that could impact performance
Permissions requested
Install
npx -y mongodb-lens
MONGODB_URIReview
Install this if you use MongoDB but don't use it daily. The natural language aggregation pipeline builder alone justifies the setup time. Skip it if you're already fluent in MongoDB query syntax or if you need sub-second query execution - the LLM layer adds latency.
Good at
- Natural language to aggregation pipeline conversion is genuinely useful for complex queries you'd otherwise need to look up.
- Inspection helpers (schema description, document counts) beat opening a separate MongoDB client for quick checks.
- Outputs valid MongoDB syntax you can copy directly into code, not just results.
- Handles temporal queries and nested field references without needing exact syntax.
Watch out
- Adds LLM latency to every query, so it's slower than direct MongoDB access for routine operations.
- Requires you to know collection names and rough schema - won't auto-discover your database structure.
- Natural language parsing quality depends entirely on prompt clarity, vague questions get vague queries.
- Not designed for production use or end-user facing applications, strictly a developer tool.
Use cases
- MongoDB query building
- collection inspection
- aggregation pipelines
- data exploration
Getting started
Works with
Similar MCPs
- NeonNeon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.
- SupabaseSupabase's official MCP — query Postgres, manage auth, inspect storage buckets, all from your agent.
- PostgresQuery Postgres databases with natural language. Read-only access by default - the agent sees your schema and runs SELECT queries safely.
- ClickHouseClickHouse MCP for fast analytical queries. Built by ClickHouse Inc, supports cluster topology discovery.