mongodb-mcp-server

The server exposes powerful database and Atlas management tools (create, update, delete operations, IP access list modifications). These operations are protected by a user confirmation mechanism and can be selectively disabled via configuration (`readOnly`, `disabledTools`). Sensitive data is redacted in logs. Untrusted data in tool responses is wrapped with clear warnings to prevent LLMs from executing embedded instructions. HTTP transport explicitly logs warnings when binding to public network interfaces and includes basic header validation. It employs secure password generation for temporary Atlas database users. The use of the Model Context Protocol (MCP) means external AI models will interact with these tools, so careful configuration of access controls and enabled tools is crucial.