Mongo Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mongo Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A read-only Model Context Protocol (MCP) server for querying MongoDB databases. Designed to be used with MCP-compatible clients like Claude Code, Claude Desktop, etc.
Run directly with npx — no installation needed:
MONGODB_URI="mongodb://localhost:27017" npx mongodb-mcpOr install globally:
npm install -g mongodb-mcp| Variable | Required | Description |
|---|---|---|
MONGODB_URI | Yes | MongoDB connection string (e.g. mongodb://localhost:27017 or mongodb+srv://...) |
Add to your .mcp.json:
{
"mcpServers": {
"mongodb": {
"command": "npx",
"args": ["mongodb-mcp"],
"env": {
"MONGODB_URI": "mongodb+srv://user:[email protected]/dbname"
}
}
}
}Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"mongodb": {
"command": "npx",
"args": ["mongodb-mcp"],
"env": {
"MONGODB_URI": "mongodb+srv://user:[email protected]/dbname"
}
}
}
}list_databasesLists all databases on the connected MongoDB instance.
list_collectionsLists all collections in a given database.
| Parameter | Type | Description |
|---|---|---|
database | string | The database name |
list_indexesLists all indexes on a collection.
| Parameter | Type | Description |
|---|---|---|
database | string | The database name |
collection | string | The collection name |
run_aggregationRuns an aggregation pipeline on a collection.
| Parameter | Type | Description |
|---|---|---|
database | string | The database name |
collection | string | The collection name |
pipeline | object[] | The aggregation pipeline stages |
run_aggregation_to_fileRuns an aggregation pipeline and writes results to a JSON file on disk instead of returning them over MCP. Returns only metadata (document count, file path, file size), which avoids loading large result sets into the agent's context window. Use CLI tools like jq, head, or the Read tool to selectively inspect the output file.
| Parameter | Type | Description |
|---|---|---|
database | string | The database name |
collection | string | The collection name |
pipeline | object[] | The aggregation pipeline stages |
output_path | string | Absolute file path where JSON results are written |
$out, $merge) in aggregation pipelines are rejected with an error.maxTimeMS) to prevent runaway queries.secondaryPreferred read preference as defense in depth.npm run dev # watch mode
npm run build # compile TypeScript
npm start # run the compiled serverMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.