mongo-ts-mcp

The server uses `JSON.parse` for filters, pipelines, and documents provided by the AI agent. While standard for MongoDB interaction, this relies on the Model Context Protocol (MCP) SDK and the AI agent to prevent malicious or malformed input. Credentials can be configured using environment variables via placeholders in `config.json`, which is a good security practice. No `eval` or obvious obfuscation found. The server communicates via stdio, limiting network attack surface. Connection options include `serverSelectionTimeoutMS`, `connectTimeoutMS`, `maxPoolSize`, `minPoolSize`, and `maxIdleTimeMS` for robustness.