Mongodb Atlas (montumodi) MCP Server
mongodb-atlas-mcp-server
npm
v1.7.0
Published by montumodi — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for MongoDB Atlas API using mongodb-atlas-api-client
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 76
Each tool and what it can reach — statically extracted from the published source.
datalake_get_logs_streamreads sensitive dataalert_acknowledgeno sensitive capabilityalert_getno sensitive capabilityalert_get_allno sensitive capabilityatlas_search_createno sensitive capabilityatlas_search_deleteno sensitive capabilityatlas_search_getno sensitive capabilityatlas_search_get_allno sensitive capabilityatlas_search_get_all_analyzersno sensitive capabilityatlas_search_updateno sensitive capability
Show 66 more tools ↓
atlas_search_upsert_analyzerno sensitive capabilityatlas_user_createno sensitive capabilityatlas_user_get_allno sensitive capabilityatlas_user_get_by_idno sensitive capabilityatlas_user_get_by_nameno sensitive capabilityatlas_user_updateno sensitive capabilitycloud_backup_create_restore_jobno sensitive capabilitycloud_backup_get_restore_jobno sensitive capabilitycloud_backup_get_snapshotno sensitive capabilitycloud_backup_get_snapshotsno sensitive capabilitycloud_provider_access_createno sensitive capabilitycloud_provider_access_deleteno sensitive capabilitycloud_provider_access_get_allno sensitive capabilitycloud_provider_access_updateno sensitive capabilitycluster_createno sensitive capabilitycluster_deleteno sensitive capabilitycluster_getno sensitive capabilitycluster_get_advanced_configurationno sensitive capabilitycluster_get_allno sensitive capabilitycluster_test_primary_failoverno sensitive capabilitycluster_updateno sensitive capabilitycluster_update_advanced_configurationno sensitive capabilitycustom_db_role_createno sensitive capabilitycustom_db_role_deleteno sensitive capabilitycustom_db_role_getno sensitive capabilitycustom_db_role_get_allno sensitive capabilitycustom_db_role_updateno sensitive capabilitydatalake_createno sensitive capabilitydatalake_deleteno sensitive capabilitydatalake_getno sensitive capabilitydatalake_get_allno sensitive capabilitydatalake_updateno sensitive capabilityevents_getno sensitive capabilityevents_get_allno sensitive capabilityevents_get_all_by_orgno sensitive capabilityevents_get_by_orgno sensitive capabilityorganization_deleteno sensitive capabilityorganization_get_allno sensitive capabilityorganization_get_by_idno sensitive capabilityorganization_get_projectsno sensitive capabilityorganization_get_usersno sensitive capabilityorganization_inviteno sensitive capabilityorganization_renameno sensitive capabilityproject_access_list_createno sensitive capabilityproject_access_list_deleteno sensitive capabilityproject_access_list_getno sensitive capabilityproject_access_list_get_allno sensitive capabilityproject_access_list_updateno sensitive capabilityproject_assign_teamsno sensitive capabilityproject_createno sensitive capabilityproject_deleteno sensitive capabilityproject_get_allno sensitive capabilityproject_get_by_idno sensitive capabilityproject_get_by_nameno sensitive capabilityproject_get_teamsno sensitive capabilityproject_remove_userno sensitive capabilityproject_whitelist_createno sensitive capabilityproject_whitelist_deleteno sensitive capabilityproject_whitelist_getno sensitive capabilityproject_whitelist_get_allno sensitive capabilityproject_whitelist_updateno sensitive capabilityuser_createno sensitive capabilityuser_deleteno sensitive capabilityuser_getno sensitive capabilityuser_get_allno sensitive capabilityuser_updateno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (76 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.7.0 latest |
A 96/100 | 0 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan mongodb-atlas-mcp-server --onlineOther implementations of Mongodb Atlas 1
Independent packages implementing the same tool, scanned with the same engine. Compare all 2 side by side →
More in Cloud & DevOps
Operator control CLI for AdGuard Home with an MCP adapter
interacting with Aliyun (Alibaba Cloud) services through This MCP server provides tools.
MCP server for the Aspro.Cloud REST API
MCP server for Atlassian Confluence and Jira Cloud APIs
AuroraCloud-first MCP server that exposes AuroraDocs workspace data to Claude Desktop and other AI agents
The official AWS Knowledge Base retrieval server using Bedrock Agent Runtime.