{"name":"io.github.mongodb-js/mongodb-mcp-server","slug":"mongodb-js-mongodb-mcp-server","title":null,"description":"MongoDB Model Context Protocol Server","url":"https://mcp.market/server/mongodb-js-mongodb-mcp-server","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":69,"stars":1138,"forks":294,"downloads_week":100562,"last_push_at":"2026-09-23T14:42:30.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"mixed","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/mongodb-js/mongodb-mcp-server","website":null,"version":"3.2.1","remotes":[],"packages":[{"registryType":"npm","identifier":"mongodb-mcp-server","version":"3.2.1","transport":{"type":"stdio"},"packageArguments":[{"description":"Deprecated. Use `aggregationCountTimeoutMs` instead.","format":"number","type":"named","name":"--aggregationCountMaxTimeMsCap"},{"description":"The maximum time in milliseconds for the count phase of aggregation operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","type":"named","name":"--aggregationCountTimeoutMs"},{"description":"When set to true, allows configuration values to be overridden via request headers and query parameters.","format":"boolean","type":"named","name":"--allowRequestOverrides"},{"description":"Atlas API client ID for authentication. Required for running Atlas tools.","type":"named","name":"--apiClientId"},{"description":"Atlas API client secret for authentication. Required for running Atlas tools.","type":"named","name":"--apiClientSecret"},{"description":"Base URL for the MongoDB Assistant API.","type":"named","name":"--assistantBaseUrl"},{"description":"Time in milliseconds that temporary database users created when connecting to MongoDB Atlas clusters will remain active before being automatically deleted.","format":"number","type":"named","name":"--atlasTemporaryDatabaseUserLifetimeMs"},{"description":"Comma separated values of tool names that require user confirmation before execution. Requires the client to support elicitation.","type":"named","name":"--confirmationRequiredTools"},{"description":"Milliseconds a MongoDB connection may stay unused (no tool call touching it) before it is closed to release the underlying connection pool and its server-side state. Applied per connection regardless of its connection scope; the preconfigured connection is excluded, and the reaper runs on this cadence. Set to 0 to disable reaping; must not be negative.","format":"number","type":"named","name":"--connectionIdleTimeoutMs"},{"description":"Visibility scope for MongoDB connections created at runtime. With 'session' (the default), each MCP session only sees the connections it created (plus the shared 'preconfigured' one) and they are closed when the session ends. With 'global', connections are shared across all sessions and survive session rotation. Deprecated: the MCP protocol is moving to sessionless, so this option will soon be removed and the connection scope will default to 'global'. For shared-server use cases, use the Atlas-Managed MCP server or build an authenticated library using the @mongodb-js/mcp-cli package. Note: on the sessionless (2026-07-28) HTTP path, a request without an mcp-session-id falls back to the shared ('global') scope so it can still persist connections across requests; the legacy sessionful path always carries a server-issued session.","type":"named","name":"--connectionScope"},{"description":"MongoDB connection string for direct database connections. Optional, if not set, you'll need to call the connect tool before interacting with MongoDB data.","type":"named","name":"--connectionString"},{"description":"When set to true, allows binding the HTTP server (and monitoring server) to a non-loopback host such as 0.0.0.0, a LAN IP, or an empty host (all interfaces). Binding to a non-loopback host exposes the server to the entire network and can allow unauthorized access. Off by default: the server refuses to start on a non-loopback host unless this is true.","format":"boolean","type":"named","name":"--dangerousHostBinding"},{"description":"When set to true, disallows the use of server-side JavaScript operators (such as $where, $function, and $accumulator) in query filters and aggregation pipelines.","format":"boolean","type":"named","name":"--disableServerSideJs"},{"description":"When set to true, tool responses include potentially untrusted data (such as documents or query results) as-is, without wrapping it in delimiters and a prompt-injection warning.","format":"boolean","type":"named","name":"--disableUntrustedDataWarning"},{"description":"Comma separated values of tool names, operation types, and/or categories of tools that will be disabled.","type":"named","name":"--disabledTools"},{"description":"When true, runs the server in dry mode: dumps configuration and enabled tools, then exits without starting the server.","format":"boolean","type":"named","name":"--dryRun"},{"description":"Time in milliseconds the user has to respond to an elicitation request (such as a tool confirmation prompt) before it fails.","format":"number","type":"named","name":"--elicitationTimeoutMs"},{"description":"How long a session must be idle before it becomes eligible for least-recently-used eviction when the HTTP transport is at its maxSessions cap (only used when transport is 'http'). Swept back to idleTimeoutMs when larger.","format":"number","type":"named","name":"--evictionIdleGraceMS"},{"description":"Time in milliseconds between export cleanup cycles that remove expired export files.","format":"number","type":"named","name":"--exportCleanupIntervalMs"},{"description":"Time in milliseconds after which an export is considered expired and eligible for cleanup.","format":"number","type":"named","name":"--exportTimeoutMs"},{"description":"Folder to store exported data files.","type":"named","name":"--exportsPath"},{"description":"When true, the 2025-era HTTP transport accepts a session ID supplied externally through the 'mcp-session-id' header. When an external ID is supplied, the initialization request is optional, and an implicitly re-initialized session restores the client's previously negotiated capabilities from the session store.","format":"boolean","type":"named","name":"--externallyManagedSessions"},{"description":"Deprecated. Use `monitoringServerHost` instead. Host address to bind the healthCheck HTTP server to (only used when transport is 'http'). If provided, `healthCheckPort` must also be set.","type":"named","name":"--healthCheckHost"},{"description":"Deprecated. Use `monitoringServerPort` instead. Port number for the healthCheck HTTP server (only used when transport is 'http'). If provided, `healthCheckHost` must also be set.","format":"number","type":"named","name":"--healthCheckPort"},{"description":"Maximum size of the HTTP request body in bytes (only used when transport is 'http'). This value is passed as the optional limit parameter to the Express.js json() middleware.","format":"number","type":"named","name":"--httpBodyLimit"},{"description":"Header that the HTTP server will validate when making requests (only used when transport is 'http').","type":"named","name":"--httpHeaders"},{"description":"Host address to bind the HTTP server to (only used when transport is 'http').","type":"named","name":"--httpHost"},{"description":"Port number for the HTTP server (only used when transport is 'http'). Use 0 for a random port.","format":"number","type":"named","name":"--httpPort"},{"description":"The HTTP response type for tool responses: 'sse' for Server-Sent Events, 'json' for standard JSON responses.","type":"named","name":"--httpResponseType"},{"description":"Idle timeout for a client to disconnect (only applies to http transport).","format":"number","type":"named","name":"--idleTimeoutMs"},{"description":"When set to true, enforces that query operations must use an index, rejecting queries that perform a collection scan.","format":"boolean","type":"named","name":"--indexCheck"},{"description":"Folder to store logs.","type":"named","name":"--logPath"},{"description":"Comma separated values of logger types.","type":"named","name":"--loggers"},{"description":"Maximum number of MongoDB connections a single scope (an MCP session by default, see connectionScope) can hold open. When exceeded, the scope's least-recently-used connection is closed and its connectionId revoked. The preconfigured connection does not count towards the limit.","format":"number","type":"named","name":"--maxActiveConnections"},{"description":"The maximum size in bytes for results from a find or aggregate tool call. This serves as an upper bound for the responseBytesLimit parameter in those tools.","format":"number","type":"named","name":"--maxBytesPerQuery"},{"description":"The maximum number of documents that can be returned by a find or aggregate tool call. For the find tool, the effective limit will be the smaller of this value and the tool's limit parameter.","format":"number","type":"named","name":"--maxDocumentsPerQuery"},{"description":"Maximum number of concurrent sessions the HTTP transport will hold in memory (only used when transport is 'http'). Each session holds a full server instance, transport, and timers, so choose a value based on your deployment's available memory; the default is a conservative safety net rather than a recommended production value.","format":"number","type":"named","name":"--maxSessions"},{"description":"Deprecated. Use `timeoutMs` instead. The maximum time in milliseconds that operations are allowed to run on the MongoDB server.","format":"number","type":"named","name":"--maxTimeMS"},{"description":"Minimum severity level for log messages forwarded to the MCP client.","type":"named","name":"--mcpClientLogLevel"},{"description":"Features to expose on the monitoring server (only used when transport is 'http' and monitoringServerHost/monitoringServerPort are set).","type":"named","name":"--monitoringServerFeatures"},{"description":"Host address to bind the monitoring HTTP server to (only used when transport is 'http'). If provided, `monitoringServerPort` must also be set.","type":"named","name":"--monitoringServerHost"},{"description":"Port number for the monitoring HTTP server (only used when transport is 'http'). If provided, `monitoringServerHost` must also be set.","format":"number","type":"named","name":"--monitoringServerPort"},{"description":"Notification timeout for a client to be aware of disconnect (only applies to http transport).","format":"number","type":"named","name":"--notificationTimeoutMs"},{"description":"Comma separated values of preview features that are enabled.","type":"named","name":"--previewFeatures"},{"description":"Deprecated. Use `queryCountTimeoutMs` instead.","format":"number","type":"named","name":"--queryCountMaxTimeMsCap"},{"description":"The maximum time in milliseconds for the count phase of find operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","type":"named","name":"--queryCountTimeoutMs"},{"description":"When set to true, only allows read, connect, and metadata operation types, disabling create/update/delete operations.","format":"boolean","type":"named","name":"--readOnly"},{"description":"When set to disabled, disables telemetry collection.","type":"named","name":"--telemetry"},{"description":"The maximum time in milliseconds that MongoDB operations are allowed to run, applied as the driver's timeoutMS (client-side operation timeout, CSOT) on each connection. It bounds the entire operation, including server selection and network round trips.","format":"number","type":"named","name":"--timeoutMs"},{"description":"Either 'stdio' or 'http'.","type":"named","name":"--transport"},{"description":"API key for Voyage AI embeddings service (required for creating Atlas Local deployments with auto-embed vector search capabilities).","type":"named","name":"--voyageApiKey"}],"environmentVariables":[{"description":"Deprecated. Use `aggregationCountTimeoutMs` instead.","format":"number","name":"MDB_MCP_AGGREGATION_COUNT_MAX_TIME_MS_CAP"},{"description":"The maximum time in milliseconds for the count phase of aggregation operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","name":"MDB_MCP_AGGREGATION_COUNT_TIMEOUT_MS"},{"description":"When set to true, allows configuration values to be overridden via request headers and query parameters.","format":"boolean","name":"MDB_MCP_ALLOW_REQUEST_OVERRIDES"},{"description":"Atlas API client ID for authentication. Required for running Atlas tools.","format":"string","isSecret":true,"name":"MDB_MCP_API_CLIENT_ID"},{"description":"Atlas API client secret for authentication. Required for running Atlas tools.","format":"string","isSecret":true,"name":"MDB_MCP_API_CLIENT_SECRET"},{"description":"Base URL for the MongoDB Assistant API.","format":"string","name":"MDB_MCP_ASSISTANT_BASE_URL"},{"description":"Time in milliseconds that temporary database users created when connecting to MongoDB Atlas clusters will remain active before being automatically deleted.","format":"number","name":"MDB_MCP_ATLAS_TEMPORARY_DATABASE_USER_LIFETIME_MS"},{"description":"Comma separated values of tool names that require user confirmation before execution. Requires the client to support elicitation.","format":"string","name":"MDB_MCP_CONFIRMATION_REQUIRED_TOOLS"},{"description":"Milliseconds a MongoDB connection may stay unused (no tool call touching it) before it is closed to release the underlying connection pool and its server-side state. Applied per connection regardless of its connection scope; the preconfigured connection is excluded, and the reaper runs on this cadence. Set to 0 to disable reaping; must not be negative.","format":"number","name":"MDB_MCP_CONNECTION_IDLE_TIMEOUT_MS"},{"description":"Visibility scope for MongoDB connections created at runtime. With 'session' (the default), each MCP session only sees the connections it created (plus the shared 'preconfigured' one) and they are closed when the session ends. With 'global', connections are shared across all sessions and survive session rotation. Deprecated: the MCP protocol is moving to sessionless, so this option will soon be removed and the connection scope will default to 'global'. For shared-server use cases, use the Atlas-Managed MCP server or build an authenticated library using the @mongodb-js/mcp-cli package. Note: on the sessionless (2026-07-28) HTTP path, a request without an mcp-session-id falls back to the shared ('global') scope so it can still persist connections across requests; the legacy sessionful path always carries a server-issued session.","format":"string","name":"MDB_MCP_CONNECTION_SCOPE"},{"description":"MongoDB connection string for direct database connections. Optional, if not set, you'll need to call the connect tool before interacting with MongoDB data.","format":"string","isSecret":true,"name":"MDB_MCP_CONNECTION_STRING"},{"description":"When set to true, allows binding the HTTP server (and monitoring server) to a non-loopback host such as 0.0.0.0, a LAN IP, or an empty host (all interfaces). Binding to a non-loopback host exposes the server to the entire network and can allow unauthorized access. Off by default: the server refuses to start on a non-loopback host unless this is true.","format":"boolean","name":"MDB_MCP_DANGEROUS_HOST_BINDING"},{"description":"When set to true, disallows the use of server-side JavaScript operators (such as $where, $function, and $accumulator) in query filters and aggregation pipelines.","format":"boolean","name":"MDB_MCP_DISABLE_SERVER_SIDE_JS"},{"description":"When set to true, tool responses include potentially untrusted data (such as documents or query results) as-is, without wrapping it in delimiters and a prompt-injection warning.","format":"boolean","name":"MDB_MCP_DISABLE_UNTRUSTED_DATA_WARNING"},{"description":"Comma separated values of tool names, operation types, and/or categories of tools that will be disabled.","format":"string","name":"MDB_MCP_DISABLED_TOOLS"},{"description":"When true, runs the server in dry mode: dumps configuration and enabled tools, then exits without starting the server.","format":"boolean","name":"MDB_MCP_DRY_RUN"},{"description":"Time in milliseconds the user has to respond to an elicitation request (such as a tool confirmation prompt) before it fails.","format":"number","name":"MDB_MCP_ELICITATION_TIMEOUT_MS"},{"description":"How long a session must be idle before it becomes eligible for least-recently-used eviction when the HTTP transport is at its maxSessions cap (only used when transport is 'http'). Swept back to idleTimeoutMs when larger.","format":"number","name":"MDB_MCP_EVICTION_IDLE_GRACE_M_S"},{"description":"Time in milliseconds between export cleanup cycles that remove expired export files.","format":"number","name":"MDB_MCP_EXPORT_CLEANUP_INTERVAL_MS"},{"description":"Time in milliseconds after which an export is considered expired and eligible for cleanup.","format":"number","name":"MDB_MCP_EXPORT_TIMEOUT_MS"},{"description":"Folder to store exported data files.","format":"string","name":"MDB_MCP_EXPORTS_PATH"},{"description":"When true, the 2025-era HTTP transport accepts a session ID supplied externally through the 'mcp-session-id' header. When an external ID is supplied, the initialization request is optional, and an implicitly re-initialized session restores the client's previously negotiated capabilities from the session store.","format":"boolean","name":"MDB_MCP_EXTERNALLY_MANAGED_SESSIONS"},{"description":"Deprecated. Use `monitoringServerHost` instead. Host address to bind the healthCheck HTTP server to (only used when transport is 'http'). If provided, `healthCheckPort` must also be set.","format":"string","name":"MDB_MCP_HEALTH_CHECK_HOST"},{"description":"Deprecated. Use `monitoringServerPort` instead. Port number for the healthCheck HTTP server (only used when transport is 'http'). If provided, `healthCheckHost` must also be set.","format":"number","name":"MDB_MCP_HEALTH_CHECK_PORT"},{"description":"Maximum size of the HTTP request body in bytes (only used when transport is 'http'). This value is passed as the optional limit parameter to the Express.js json() middleware.","format":"number","name":"MDB_MCP_HTTP_BODY_LIMIT"},{"description":"Header that the HTTP server will validate when making requests (only used when transport is 'http').","format":"string","name":"MDB_MCP_HTTP_HEADERS"},{"description":"Host address to bind the HTTP server to (only used when transport is 'http').","format":"string","name":"MDB_MCP_HTTP_HOST"},{"description":"Port number for the HTTP server (only used when transport is 'http'). Use 0 for a random port.","format":"number","name":"MDB_MCP_HTTP_PORT"},{"description":"The HTTP response type for tool responses: 'sse' for Server-Sent Events, 'json' for standard JSON responses.","format":"string","name":"MDB_MCP_HTTP_RESPONSE_TYPE"},{"description":"Idle timeout for a client to disconnect (only applies to http transport).","format":"number","name":"MDB_MCP_IDLE_TIMEOUT_MS"},{"description":"When set to true, enforces that query operations must use an index, rejecting queries that perform a collection scan.","format":"boolean","name":"MDB_MCP_INDEX_CHECK"},{"description":"Folder to store logs.","format":"string","name":"MDB_MCP_LOG_PATH"},{"description":"Comma separated values of logger types.","format":"string","name":"MDB_MCP_LOGGERS"},{"description":"Maximum number of MongoDB connections a single scope (an MCP session by default, see connectionScope) can hold open. When exceeded, the scope's least-recently-used connection is closed and its connectionId revoked. The preconfigured connection does not count towards the limit.","format":"number","name":"MDB_MCP_MAX_ACTIVE_CONNECTIONS"},{"description":"The maximum size in bytes for results from a find or aggregate tool call. This serves as an upper bound for the responseBytesLimit parameter in those tools.","format":"number","name":"MDB_MCP_MAX_BYTES_PER_QUERY"},{"description":"The maximum number of documents that can be returned by a find or aggregate tool call. For the find tool, the effective limit will be the smaller of this value and the tool's limit parameter.","format":"number","name":"MDB_MCP_MAX_DOCUMENTS_PER_QUERY"},{"description":"Maximum number of concurrent sessions the HTTP transport will hold in memory (only used when transport is 'http'). Each session holds a full server instance, transport, and timers, so choose a value based on your deployment's available memory; the default is a conservative safety net rather than a recommended production value.","format":"number","name":"MDB_MCP_MAX_SESSIONS"},{"description":"Deprecated. Use `timeoutMs` instead. The maximum time in milliseconds that operations are allowed to run on the MongoDB server.","format":"number","name":"MDB_MCP_MAX_TIME_M_S"},{"description":"Minimum severity level for log messages forwarded to the MCP client.","format":"string","name":"MDB_MCP_MCP_CLIENT_LOG_LEVEL"},{"description":"Features to expose on the monitoring server (only used when transport is 'http' and monitoringServerHost/monitoringServerPort are set).","format":"string","name":"MDB_MCP_MONITORING_SERVER_FEATURES"},{"description":"Host address to bind the monitoring HTTP server to (only used when transport is 'http'). If provided, `monitoringServerPort` must also be set.","format":"string","name":"MDB_MCP_MONITORING_SERVER_HOST"},{"description":"Port number for the monitoring HTTP server (only used when transport is 'http'). If provided, `monitoringServerHost` must also be set.","format":"number","name":"MDB_MCP_MONITORING_SERVER_PORT"},{"description":"Notification timeout for a client to be aware of disconnect (only applies to http transport).","format":"number","name":"MDB_MCP_NOTIFICATION_TIMEOUT_MS"},{"description":"Comma separated values of preview features that are enabled.","format":"string","name":"MDB_MCP_PREVIEW_FEATURES"},{"description":"Deprecated. Use `queryCountTimeoutMs` instead.","format":"number","name":"MDB_MCP_QUERY_COUNT_MAX_TIME_MS_CAP"},{"description":"The maximum time in milliseconds for the count phase of find operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","name":"MDB_MCP_QUERY_COUNT_TIMEOUT_MS"},{"description":"When set to true, only allows read, connect, and metadata operation types, disabling create/update/delete operations.","format":"boolean","name":"MDB_MCP_READ_ONLY"},{"description":"When set to disabled, disables telemetry collection.","format":"string","name":"MDB_MCP_TELEMETRY"},{"description":"The maximum time in milliseconds that MongoDB operations are allowed to run, applied as the driver's timeoutMS (client-side operation timeout, CSOT) on each connection. It bounds the entire operation, including server selection and network round trips.","format":"number","name":"MDB_MCP_TIMEOUT_MS"},{"description":"Either 'stdio' or 'http'.","format":"string","name":"MDB_MCP_TRANSPORT"},{"description":"API key for Voyage AI embeddings service (required for creating Atlas Local deployments with auto-embed vector search capabilities).","format":"string","isSecret":true,"name":"MDB_MCP_VOYAGE_API_KEY"}]},{"registryType":"oci","identifier":"docker.io/mongodb/mongodb-mcp-server:3.2.1","transport":{"type":"stdio"},"packageArguments":[{"description":"Deprecated. Use `aggregationCountTimeoutMs` instead.","format":"number","type":"named","name":"--aggregationCountMaxTimeMsCap"},{"description":"The maximum time in milliseconds for the count phase of aggregation operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","type":"named","name":"--aggregationCountTimeoutMs"},{"description":"When set to true, allows configuration values to be overridden via request headers and query parameters.","format":"boolean","type":"named","name":"--allowRequestOverrides"},{"description":"Atlas API client ID for authentication. Required for running Atlas tools.","type":"named","name":"--apiClientId"},{"description":"Atlas API client secret for authentication. Required for running Atlas tools.","type":"named","name":"--apiClientSecret"},{"description":"Base URL for the MongoDB Assistant API.","type":"named","name":"--assistantBaseUrl"},{"description":"Time in milliseconds that temporary database users created when connecting to MongoDB Atlas clusters will remain active before being automatically deleted.","format":"number","type":"named","name":"--atlasTemporaryDatabaseUserLifetimeMs"},{"description":"Comma separated values of tool names that require user confirmation before execution. Requires the client to support elicitation.","type":"named","name":"--confirmationRequiredTools"},{"description":"Milliseconds a MongoDB connection may stay unused (no tool call touching it) before it is closed to release the underlying connection pool and its server-side state. Applied per connection regardless of its connection scope; the preconfigured connection is excluded, and the reaper runs on this cadence. Set to 0 to disable reaping; must not be negative.","format":"number","type":"named","name":"--connectionIdleTimeoutMs"},{"description":"Visibility scope for MongoDB connections created at runtime. With 'session' (the default), each MCP session only sees the connections it created (plus the shared 'preconfigured' one) and they are closed when the session ends. With 'global', connections are shared across all sessions and survive session rotation. Deprecated: the MCP protocol is moving to sessionless, so this option will soon be removed and the connection scope will default to 'global'. For shared-server use cases, use the Atlas-Managed MCP server or build an authenticated library using the @mongodb-js/mcp-cli package. Note: on the sessionless (2026-07-28) HTTP path, a request without an mcp-session-id falls back to the shared ('global') scope so it can still persist connections across requests; the legacy sessionful path always carries a server-issued session.","type":"named","name":"--connectionScope"},{"description":"MongoDB connection string for direct database connections. Optional, if not set, you'll need to call the connect tool before interacting with MongoDB data.","type":"named","name":"--connectionString"},{"description":"When set to true, allows binding the HTTP server (and monitoring server) to a non-loopback host such as 0.0.0.0, a LAN IP, or an empty host (all interfaces). Binding to a non-loopback host exposes the server to the entire network and can allow unauthorized access. Off by default: the server refuses to start on a non-loopback host unless this is true.","format":"boolean","type":"named","name":"--dangerousHostBinding"},{"description":"When set to true, disallows the use of server-side JavaScript operators (such as $where, $function, and $accumulator) in query filters and aggregation pipelines.","format":"boolean","type":"named","name":"--disableServerSideJs"},{"description":"When set to true, tool responses include potentially untrusted data (such as documents or query results) as-is, without wrapping it in delimiters and a prompt-injection warning.","format":"boolean","type":"named","name":"--disableUntrustedDataWarning"},{"description":"Comma separated values of tool names, operation types, and/or categories of tools that will be disabled.","type":"named","name":"--disabledTools"},{"description":"When true, runs the server in dry mode: dumps configuration and enabled tools, then exits without starting the server.","format":"boolean","type":"named","name":"--dryRun"},{"description":"Time in milliseconds the user has to respond to an elicitation request (such as a tool confirmation prompt) before it fails.","format":"number","type":"named","name":"--elicitationTimeoutMs"},{"description":"How long a session must be idle before it becomes eligible for least-recently-used eviction when the HTTP transport is at its maxSessions cap (only used when transport is 'http'). Swept back to idleTimeoutMs when larger.","format":"number","type":"named","name":"--evictionIdleGraceMS"},{"description":"Time in milliseconds between export cleanup cycles that remove expired export files.","format":"number","type":"named","name":"--exportCleanupIntervalMs"},{"description":"Time in milliseconds after which an export is considered expired and eligible for cleanup.","format":"number","type":"named","name":"--exportTimeoutMs"},{"description":"Folder to store exported data files.","type":"named","name":"--exportsPath"},{"description":"When true, the 2025-era HTTP transport accepts a session ID supplied externally through the 'mcp-session-id' header. When an external ID is supplied, the initialization request is optional, and an implicitly re-initialized session restores the client's previously negotiated capabilities from the session store.","format":"boolean","type":"named","name":"--externallyManagedSessions"},{"description":"Deprecated. Use `monitoringServerHost` instead. Host address to bind the healthCheck HTTP server to (only used when transport is 'http'). If provided, `healthCheckPort` must also be set.","type":"named","name":"--healthCheckHost"},{"description":"Deprecated. Use `monitoringServerPort` instead. Port number for the healthCheck HTTP server (only used when transport is 'http'). If provided, `healthCheckHost` must also be set.","format":"number","type":"named","name":"--healthCheckPort"},{"description":"Maximum size of the HTTP request body in bytes (only used when transport is 'http'). This value is passed as the optional limit parameter to the Express.js json() middleware.","format":"number","type":"named","name":"--httpBodyLimit"},{"description":"Header that the HTTP server will validate when making requests (only used when transport is 'http').","type":"named","name":"--httpHeaders"},{"description":"Host address to bind the HTTP server to (only used when transport is 'http').","type":"named","name":"--httpHost"},{"description":"Port number for the HTTP server (only used when transport is 'http'). Use 0 for a random port.","format":"number","type":"named","name":"--httpPort"},{"description":"The HTTP response type for tool responses: 'sse' for Server-Sent Events, 'json' for standard JSON responses.","type":"named","name":"--httpResponseType"},{"description":"Idle timeout for a client to disconnect (only applies to http transport).","format":"number","type":"named","name":"--idleTimeoutMs"},{"description":"When set to true, enforces that query operations must use an index, rejecting queries that perform a collection scan.","format":"boolean","type":"named","name":"--indexCheck"},{"description":"Folder to store logs.","type":"named","name":"--logPath"},{"description":"Comma separated values of logger types.","type":"named","name":"--loggers"},{"description":"Maximum number of MongoDB connections a single scope (an MCP session by default, see connectionScope) can hold open. When exceeded, the scope's least-recently-used connection is closed and its connectionId revoked. The preconfigured connection does not count towards the limit.","format":"number","type":"named","name":"--maxActiveConnections"},{"description":"The maximum size in bytes for results from a find or aggregate tool call. This serves as an upper bound for the responseBytesLimit parameter in those tools.","format":"number","type":"named","name":"--maxBytesPerQuery"},{"description":"The maximum number of documents that can be returned by a find or aggregate tool call. For the find tool, the effective limit will be the smaller of this value and the tool's limit parameter.","format":"number","type":"named","name":"--maxDocumentsPerQuery"},{"description":"Maximum number of concurrent sessions the HTTP transport will hold in memory (only used when transport is 'http'). Each session holds a full server instance, transport, and timers, so choose a value based on your deployment's available memory; the default is a conservative safety net rather than a recommended production value.","format":"number","type":"named","name":"--maxSessions"},{"description":"Deprecated. Use `timeoutMs` instead. The maximum time in milliseconds that operations are allowed to run on the MongoDB server.","format":"number","type":"named","name":"--maxTimeMS"},{"description":"Minimum severity level for log messages forwarded to the MCP client.","type":"named","name":"--mcpClientLogLevel"},{"description":"Features to expose on the monitoring server (only used when transport is 'http' and monitoringServerHost/monitoringServerPort are set).","type":"named","name":"--monitoringServerFeatures"},{"description":"Host address to bind the monitoring HTTP server to (only used when transport is 'http'). If provided, `monitoringServerPort` must also be set.","type":"named","name":"--monitoringServerHost"},{"description":"Port number for the monitoring HTTP server (only used when transport is 'http'). If provided, `monitoringServerHost` must also be set.","format":"number","type":"named","name":"--monitoringServerPort"},{"description":"Notification timeout for a client to be aware of disconnect (only applies to http transport).","format":"number","type":"named","name":"--notificationTimeoutMs"},{"description":"Comma separated values of preview features that are enabled.","type":"named","name":"--previewFeatures"},{"description":"Deprecated. Use `queryCountTimeoutMs` instead.","format":"number","type":"named","name":"--queryCountMaxTimeMsCap"},{"description":"The maximum time in milliseconds for the count phase of find operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","type":"named","name":"--queryCountTimeoutMs"},{"description":"When set to true, only allows read, connect, and metadata operation types, disabling create/update/delete operations.","format":"boolean","type":"named","name":"--readOnly"},{"description":"When set to disabled, disables telemetry collection.","type":"named","name":"--telemetry"},{"description":"The maximum time in milliseconds that MongoDB operations are allowed to run, applied as the driver's timeoutMS (client-side operation timeout, CSOT) on each connection. It bounds the entire operation, including server selection and network round trips.","format":"number","type":"named","name":"--timeoutMs"},{"description":"Either 'stdio' or 'http'.","type":"named","name":"--transport"},{"description":"API key for Voyage AI embeddings service (required for creating Atlas Local deployments with auto-embed vector search capabilities).","type":"named","name":"--voyageApiKey"}],"environmentVariables":[{"description":"Deprecated. Use `aggregationCountTimeoutMs` instead.","format":"number","name":"MDB_MCP_AGGREGATION_COUNT_MAX_TIME_MS_CAP"},{"description":"The maximum time in milliseconds for the count phase of aggregation operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","name":"MDB_MCP_AGGREGATION_COUNT_TIMEOUT_MS"},{"description":"When set to true, allows configuration values to be overridden via request headers and query parameters.","format":"boolean","name":"MDB_MCP_ALLOW_REQUEST_OVERRIDES"},{"description":"Atlas API client ID for authentication. Required for running Atlas tools.","format":"string","isSecret":true,"name":"MDB_MCP_API_CLIENT_ID"},{"description":"Atlas API client secret for authentication. Required for running Atlas tools.","format":"string","isSecret":true,"name":"MDB_MCP_API_CLIENT_SECRET"},{"description":"Base URL for the MongoDB Assistant API.","format":"string","name":"MDB_MCP_ASSISTANT_BASE_URL"},{"description":"Time in milliseconds that temporary database users created when connecting to MongoDB Atlas clusters will remain active before being automatically deleted.","format":"number","name":"MDB_MCP_ATLAS_TEMPORARY_DATABASE_USER_LIFETIME_MS"},{"description":"Comma separated values of tool names that require user confirmation before execution. Requires the client to support elicitation.","format":"string","name":"MDB_MCP_CONFIRMATION_REQUIRED_TOOLS"},{"description":"Milliseconds a MongoDB connection may stay unused (no tool call touching it) before it is closed to release the underlying connection pool and its server-side state. Applied per connection regardless of its connection scope; the preconfigured connection is excluded, and the reaper runs on this cadence. Set to 0 to disable reaping; must not be negative.","format":"number","name":"MDB_MCP_CONNECTION_IDLE_TIMEOUT_MS"},{"description":"Visibility scope for MongoDB connections created at runtime. With 'session' (the default), each MCP session only sees the connections it created (plus the shared 'preconfigured' one) and they are closed when the session ends. With 'global', connections are shared across all sessions and survive session rotation. Deprecated: the MCP protocol is moving to sessionless, so this option will soon be removed and the connection scope will default to 'global'. For shared-server use cases, use the Atlas-Managed MCP server or build an authenticated library using the @mongodb-js/mcp-cli package. Note: on the sessionless (2026-07-28) HTTP path, a request without an mcp-session-id falls back to the shared ('global') scope so it can still persist connections across requests; the legacy sessionful path always carries a server-issued session.","format":"string","name":"MDB_MCP_CONNECTION_SCOPE"},{"description":"MongoDB connection string for direct database connections. Optional, if not set, you'll need to call the connect tool before interacting with MongoDB data.","format":"string","isSecret":true,"name":"MDB_MCP_CONNECTION_STRING"},{"description":"When set to true, allows binding the HTTP server (and monitoring server) to a non-loopback host such as 0.0.0.0, a LAN IP, or an empty host (all interfaces). Binding to a non-loopback host exposes the server to the entire network and can allow unauthorized access. Off by default: the server refuses to start on a non-loopback host unless this is true.","format":"boolean","name":"MDB_MCP_DANGEROUS_HOST_BINDING"},{"description":"When set to true, disallows the use of server-side JavaScript operators (such as $where, $function, and $accumulator) in query filters and aggregation pipelines.","format":"boolean","name":"MDB_MCP_DISABLE_SERVER_SIDE_JS"},{"description":"When set to true, tool responses include potentially untrusted data (such as documents or query results) as-is, without wrapping it in delimiters and a prompt-injection warning.","format":"boolean","name":"MDB_MCP_DISABLE_UNTRUSTED_DATA_WARNING"},{"description":"Comma separated values of tool names, operation types, and/or categories of tools that will be disabled.","format":"string","name":"MDB_MCP_DISABLED_TOOLS"},{"description":"When true, runs the server in dry mode: dumps configuration and enabled tools, then exits without starting the server.","format":"boolean","name":"MDB_MCP_DRY_RUN"},{"description":"Time in milliseconds the user has to respond to an elicitation request (such as a tool confirmation prompt) before it fails.","format":"number","name":"MDB_MCP_ELICITATION_TIMEOUT_MS"},{"description":"How long a session must be idle before it becomes eligible for least-recently-used eviction when the HTTP transport is at its maxSessions cap (only used when transport is 'http'). Swept back to idleTimeoutMs when larger.","format":"number","name":"MDB_MCP_EVICTION_IDLE_GRACE_M_S"},{"description":"Time in milliseconds between export cleanup cycles that remove expired export files.","format":"number","name":"MDB_MCP_EXPORT_CLEANUP_INTERVAL_MS"},{"description":"Time in milliseconds after which an export is considered expired and eligible for cleanup.","format":"number","name":"MDB_MCP_EXPORT_TIMEOUT_MS"},{"description":"Folder to store exported data files.","format":"string","name":"MDB_MCP_EXPORTS_PATH"},{"description":"When true, the 2025-era HTTP transport accepts a session ID supplied externally through the 'mcp-session-id' header. When an external ID is supplied, the initialization request is optional, and an implicitly re-initialized session restores the client's previously negotiated capabilities from the session store.","format":"boolean","name":"MDB_MCP_EXTERNALLY_MANAGED_SESSIONS"},{"description":"Deprecated. Use `monitoringServerHost` instead. Host address to bind the healthCheck HTTP server to (only used when transport is 'http'). If provided, `healthCheckPort` must also be set.","format":"string","name":"MDB_MCP_HEALTH_CHECK_HOST"},{"description":"Deprecated. Use `monitoringServerPort` instead. Port number for the healthCheck HTTP server (only used when transport is 'http'). If provided, `healthCheckHost` must also be set.","format":"number","name":"MDB_MCP_HEALTH_CHECK_PORT"},{"description":"Maximum size of the HTTP request body in bytes (only used when transport is 'http'). This value is passed as the optional limit parameter to the Express.js json() middleware.","format":"number","name":"MDB_MCP_HTTP_BODY_LIMIT"},{"description":"Header that the HTTP server will validate when making requests (only used when transport is 'http').","format":"string","name":"MDB_MCP_HTTP_HEADERS"},{"description":"Host address to bind the HTTP server to (only used when transport is 'http').","format":"string","name":"MDB_MCP_HTTP_HOST"},{"description":"Port number for the HTTP server (only used when transport is 'http'). Use 0 for a random port.","format":"number","name":"MDB_MCP_HTTP_PORT"},{"description":"The HTTP response type for tool responses: 'sse' for Server-Sent Events, 'json' for standard JSON responses.","format":"string","name":"MDB_MCP_HTTP_RESPONSE_TYPE"},{"description":"Idle timeout for a client to disconnect (only applies to http transport).","format":"number","name":"MDB_MCP_IDLE_TIMEOUT_MS"},{"description":"When set to true, enforces that query operations must use an index, rejecting queries that perform a collection scan.","format":"boolean","name":"MDB_MCP_INDEX_CHECK"},{"description":"Folder to store logs.","format":"string","name":"MDB_MCP_LOG_PATH"},{"description":"Comma separated values of logger types.","format":"string","name":"MDB_MCP_LOGGERS"},{"description":"Maximum number of MongoDB connections a single scope (an MCP session by default, see connectionScope) can hold open. When exceeded, the scope's least-recently-used connection is closed and its connectionId revoked. The preconfigured connection does not count towards the limit.","format":"number","name":"MDB_MCP_MAX_ACTIVE_CONNECTIONS"},{"description":"The maximum size in bytes for results from a find or aggregate tool call. This serves as an upper bound for the responseBytesLimit parameter in those tools.","format":"number","name":"MDB_MCP_MAX_BYTES_PER_QUERY"},{"description":"The maximum number of documents that can be returned by a find or aggregate tool call. For the find tool, the effective limit will be the smaller of this value and the tool's limit parameter.","format":"number","name":"MDB_MCP_MAX_DOCUMENTS_PER_QUERY"},{"description":"Maximum number of concurrent sessions the HTTP transport will hold in memory (only used when transport is 'http'). Each session holds a full server instance, transport, and timers, so choose a value based on your deployment's available memory; the default is a conservative safety net rather than a recommended production value.","format":"number","name":"MDB_MCP_MAX_SESSIONS"},{"description":"Deprecated. Use `timeoutMs` instead. The maximum time in milliseconds that operations are allowed to run on the MongoDB server.","format":"number","name":"MDB_MCP_MAX_TIME_M_S"},{"description":"Minimum severity level for log messages forwarded to the MCP client.","format":"string","name":"MDB_MCP_MCP_CLIENT_LOG_LEVEL"},{"description":"Features to expose on the monitoring server (only used when transport is 'http' and monitoringServerHost/monitoringServerPort are set).","format":"string","name":"MDB_MCP_MONITORING_SERVER_FEATURES"},{"description":"Host address to bind the monitoring HTTP server to (only used when transport is 'http'). If provided, `monitoringServerPort` must also be set.","format":"string","name":"MDB_MCP_MONITORING_SERVER_HOST"},{"description":"Port number for the monitoring HTTP server (only used when transport is 'http'). If provided, `monitoringServerHost` must also be set.","format":"number","name":"MDB_MCP_MONITORING_SERVER_PORT"},{"description":"Notification timeout for a client to be aware of disconnect (only applies to http transport).","format":"number","name":"MDB_MCP_NOTIFICATION_TIMEOUT_MS"},{"description":"Comma separated values of preview features that are enabled.","format":"string","name":"MDB_MCP_PREVIEW_FEATURES"},{"description":"Deprecated. Use `queryCountTimeoutMs` instead.","format":"number","name":"MDB_MCP_QUERY_COUNT_MAX_TIME_MS_CAP"},{"description":"The maximum time in milliseconds for the count phase of find operations. This is used to limit the time spent counting documents when determining if results were capped.","format":"number","name":"MDB_MCP_QUERY_COUNT_TIMEOUT_MS"},{"description":"When set to true, only allows read, connect, and metadata operation types, disabling create/update/delete operations.","format":"boolean","name":"MDB_MCP_READ_ONLY"},{"description":"When set to disabled, disables telemetry collection.","format":"string","name":"MDB_MCP_TELEMETRY"},{"description":"The maximum time in milliseconds that MongoDB operations are allowed to run, applied as the driver's timeoutMS (client-side operation timeout, CSOT) on each connection. It bounds the entire operation, including server selection and network round trips.","format":"number","name":"MDB_MCP_TIMEOUT_MS"},{"description":"Either 'stdio' or 'http'.","format":"string","name":"MDB_MCP_TRANSPORT"},{"description":"API key for Voyage AI embeddings service (required for creating Atlas Local deployments with auto-embed vector search capabilities).","format":"string","isSecret":true,"name":"MDB_MCP_VOYAGE_API_KEY"}]}],"tools":[],"scan":null,"grade_history":[],"reviews":[]}