mcp-mongodb

The `query` and `aggregation` tools accept flexible JSON objects for filters, projections, sort, and pipelines (`z.any()` in their input schemas). This allows agents to construct arbitrary MongoDB read queries. While the README emphasizes 'read-only access' and strongly recommends not exposing the server publicly, and database access can be controlled via `ALLOWED_DB_NAME`/`DISALLOWED_DB_NAME` environment variables, a compromised or maliciously instructed agent could potentially execute complex, resource-intensive read operations or exfiltrate unintended data if the connected MongoDB user has broader permissions than strictly necessary for these tools. It is CRITICAL to ensure the MongoDB user configured via `MONGODB_URI` has minimal, read-only privileges.