MongoDB Model Context Protocol Server
Indexed, not yet reviewed
We found mongodb-mcp-server in the official MCP registry. Our automated check passed on Nov 1, 2026 (it confirms the server is published and reachable), but no one at CuratedMCP has reviewed its code, permissions or credentials handling. Check what it can access before you give it keys. Scan your machine free to see every MCP server you have installed.
mongodb-mcp-server@3.2.2| Environment variable | Required | What it is |
|---|---|---|
| MDB_MCP_AGGREGATION_COUNT_MAX_TIME_MS_CAP | No | Deprecated. Use `aggregationCountTimeoutMs` instead. |
| MDB_MCP_AGGREGATION_COUNT_TIMEOUT_MS | No | The maximum time in milliseconds for the count phase of aggregation operations. This is used to limit the time spent counting documents when determining if results were capped. |
| MDB_MCP_ALLOW_REQUEST_OVERRIDES | No | When set to true, allows configuration values to be overridden via request headers and query parameters. |
| MDB_MCP_API_CLIENT_IDsecret | No | Atlas API client ID for authentication. Required for running Atlas tools. |
| MDB_MCP_API_CLIENT_SECRETsecret | No | Atlas API client secret for authentication. Required for running Atlas tools. |
| MDB_MCP_ASSISTANT_BASE_URL | No | Base URL for the MongoDB Assistant API. |
| MDB_MCP_ATLAS_TEMPORARY_DATABASE_USER_LIFETIME_MS | No | Time in milliseconds that temporary database users created when connecting to MongoDB Atlas clusters will remain active before being automatically deleted. |
| MDB_MCP_CONFIRMATION_REQUIRED_TOOLS | No | Comma separated values of tool names that require user confirmation before execution. Requires the client to support elicitation. |
| MDB_MCP_CONNECTION_IDLE_TIMEOUT_MS | No | Milliseconds a MongoDB connection may stay unused (no tool call touching it) before it is closed to release the underlying connection pool and its server-side state. Applied per connection regardless |
| MDB_MCP_CONNECTION_SCOPE | No | Visibility scope for MongoDB connections created at runtime. With 'session' (the default), each MCP session only sees the connections it created (plus the shared 'preconfigured' one) and they are clos |
| MDB_MCP_CONNECTION_STRINGsecret | No | MongoDB connection string for direct database connections. Optional, if not set, you'll need to call the connect tool before interacting with MongoDB data. |
| MDB_MCP_DANGEROUS_HOST_BINDING | No | When set to true, allows binding the HTTP server (and monitoring server) to a non-loopback host such as 0.0.0.0, a LAN IP, or an empty host (all interfaces). Binding to a non-loopback host exposes the |
| MDB_MCP_DISABLE_SERVER_SIDE_JS | No | When set to true, disallows the use of server-side JavaScript operators (such as $where, $function, and $accumulator) in query filters and aggregation pipelines. |
| MDB_MCP_DISABLE_UNTRUSTED_DATA_WARNING | No | When set to true, tool responses include potentially untrusted data (such as documents or query results) as-is, without wrapping it in delimiters and a prompt-injection warning. |
| MDB_MCP_DISABLED_TOOLS | No | Comma separated values of tool names, operation types, and/or categories of tools that will be disabled. |
| MDB_MCP_DRY_RUN | No | When true, runs the server in dry mode: dumps configuration and enabled tools, then exits without starting the server. |
| MDB_MCP_ELICITATION_TIMEOUT_MS | No | Time in milliseconds the user has to respond to an elicitation request (such as a tool confirmation prompt) before it fails. |
| MDB_MCP_EVICTION_IDLE_GRACE_M_S | No | How long a session must be idle before it becomes eligible for least-recently-used eviction when the HTTP transport is at its maxSessions cap (only used when transport is 'http'). Swept back to idleTi |
| MDB_MCP_EXPORT_CLEANUP_INTERVAL_MS | No | Time in milliseconds between export cleanup cycles that remove expired export files. |
| MDB_MCP_EXPORT_TIMEOUT_MS | No | Time in milliseconds after which an export is considered expired and eligible for cleanup. |
| MDB_MCP_EXPORTS_PATH | No | Folder to store exported data files. |
| MDB_MCP_EXTERNALLY_MANAGED_SESSIONS | No | When true, the 2025-era HTTP transport accepts a session ID supplied externally through the 'mcp-session-id' header. When an external ID is supplied, the initialization request is optional, and an imp |
| MDB_MCP_HEALTH_CHECK_HOST | No | Deprecated. Use `monitoringServerHost` instead. Host address to bind the healthCheck HTTP server to (only used when transport is 'http'). If provided, `healthCheckPort` must also be set. |
| MDB_MCP_HEALTH_CHECK_PORT | No | Deprecated. Use `monitoringServerPort` instead. Port number for the healthCheck HTTP server (only used when transport is 'http'). If provided, `healthCheckHost` must also be set. |
| MDB_MCP_HTTP_BODY_LIMIT | No | Maximum size of the HTTP request body in bytes (only used when transport is 'http'). This value is passed as the optional limit parameter to the Express.js json() middleware. |
| MDB_MCP_HTTP_HEADERS | No | Header that the HTTP server will validate when making requests (only used when transport is 'http'). |
| MDB_MCP_HTTP_HOST | No | Host address to bind the HTTP server to (only used when transport is 'http'). |
| MDB_MCP_HTTP_PORT | No | Port number for the HTTP server (only used when transport is 'http'). Use 0 for a random port. |
| MDB_MCP_HTTP_RESPONSE_TYPE | No | The HTTP response type for tool responses: 'sse' for Server-Sent Events, 'json' for standard JSON responses. |
| MDB_MCP_IDLE_TIMEOUT_MS | No | Idle timeout for a client to disconnect (only applies to http transport). |
| MDB_MCP_INDEX_CHECK | No | When set to true, enforces that query operations must use an index, rejecting queries that perform a collection scan. |
| MDB_MCP_LOG_PATH | No | Folder to store logs. |
| MDB_MCP_LOGGERS | No | Comma separated values of logger types. |
| MDB_MCP_MAX_ACTIVE_CONNECTIONS | No | Maximum number of MongoDB connections a single scope (an MCP session by default, see connectionScope) can hold open. When exceeded, the scope's least-recently-used connection is closed and its connect |
| MDB_MCP_MAX_BYTES_PER_QUERY | No | The maximum size in bytes for results from a find or aggregate tool call. This serves as an upper bound for the responseBytesLimit parameter in those tools. |
| MDB_MCP_MAX_DOCUMENTS_PER_QUERY | No | The maximum number of documents that can be returned by a find or aggregate tool call. For the find tool, the effective limit will be the smaller of this value and the tool's limit parameter. |
| MDB_MCP_MAX_SESSIONS | No | Maximum number of concurrent sessions the HTTP transport will hold in memory (only used when transport is 'http'). Each session holds a full server instance, transport, and timers, so choose a value b |
| MDB_MCP_MAX_TIME_M_S | No | Deprecated. Use `timeoutMs` instead. The maximum time in milliseconds that operations are allowed to run on the MongoDB server. |
| MDB_MCP_MCP_CLIENT_LOG_LEVEL | No | Minimum severity level for log messages forwarded to the MCP client. |
| MDB_MCP_MONITORING_SERVER_FEATURES | No | Features to expose on the monitoring server (only used when transport is 'http' and monitoringServerHost/monitoringServerPort are set). |
| MDB_MCP_MONITORING_SERVER_HOST | No | Host address to bind the monitoring HTTP server to (only used when transport is 'http'). If provided, `monitoringServerPort` must also be set. |
| MDB_MCP_MONITORING_SERVER_PORT | No | Port number for the monitoring HTTP server (only used when transport is 'http'). If provided, `monitoringServerHost` must also be set. |
| MDB_MCP_NOTIFICATION_TIMEOUT_MS | No | Notification timeout for a client to be aware of disconnect (only applies to http transport). |
| MDB_MCP_PREVIEW_FEATURES | No | Comma separated values of preview features that are enabled. |
| MDB_MCP_QUERY_COUNT_MAX_TIME_MS_CAP | No | Deprecated. Use `queryCountTimeoutMs` instead. |
| MDB_MCP_QUERY_COUNT_TIMEOUT_MS | No | The maximum time in milliseconds for the count phase of find operations. This is used to limit the time spent counting documents when determining if results were capped. |
| MDB_MCP_READ_ONLY | No | When set to true, only allows read, connect, and metadata operation types, disabling create/update/delete operations. |
| MDB_MCP_TELEMETRY | No | When set to disabled, disables telemetry collection. |
| MDB_MCP_TIMEOUT_MS | No | The maximum time in milliseconds that MongoDB operations are allowed to run, applied as the driver's timeoutMS (client-side operation timeout, CSOT) on each connection. It bounds the entire operation, |
| MDB_MCP_TRANSPORT | No | Either 'stdio' or 'http'. |
| MDB_MCP_VOYAGE_API_KEYsecret | No | API key for Voyage AI embeddings service (required for creating Atlas Local deployments with auto-embed vector search capabilities). |
This checks that the server is published and reachable. It is not a security review. Source: the official MCP registry (io.github.mongodb-js/mongodb-mcp-server) and GitHub.
Claim this page to get a full CuratedMCP listing: edit your description, see listing analytics, and add our README badge. Listing is free, and a person checks every submission before it goes live. We'll pre-fill the form from the registry.
monitor
BetterDB MCP server - Valkey observability for Claude Code and other MCP clients
nanobanana-mcp-server
An MCP server that provides image generation and editing capabilities
Nautilus Compass Memory
Local-first long-term memory for AI agents, with byte-recomputable signed verification receipts.
Netdata
Real-time infrastructure monitoring with metrics, logs, alerts, and ML-based anomaly detection.