Which integrations are available for this server?

Provides authentication and role-based access control for the MCP server, enabling secured operations with OAuth 2.1 and RBAC using Keycloak realm roles. Allows AI agents to interact with MongoDB databases, including listing databases, collections, documents, and running aggregation pipelines.

How do I use MongoDB MCP Server?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@MongoDB MCP Server list all databases" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

MongoDB MCP Server

by ameksike

Overview Schema Related Servers Score Discussions

JavaScript

Hybrid

🍃 MongoDB MCP Server

A ready-to-use integration of the MongoDB MCP Server with multiple deployment modes — from a simple local launcher to a fully secured RBAC gateway with Keycloak authentication.

Explore how to connect AI agents and LLM clients (Claude, VS Code Copilot, Cursor, etc.) to your MongoDB databases through the Model Context Protocol.

📋 Table of Contents

#	Section	Description
1	Deployment Modes	Compare the three available modes
2	Quick Start	Get running in 2 minutes (basic mode)
3	Project Structure	Directory layout overview
4	Test Client	Built-in MCP diagnostic client
5	VS Code Copilot	Connect VS Code to the MCP Server
6	Docker Compose	Run the full stack with containers
7	Documentation	Links to detailed guides
8	npm Scripts	All available commands at a glance
9	References	Official docs and specifications

Related MCP server: mcp-mongo

🔀 Deployment Modes

This project supports three deployment modes, each adding a layer of security on top of the previous one:

🟢 Basic Mode — Direct Connection

The simplest setup. The MCP Server runs locally and accepts connections without authentication. Best for local development and quick testing.

┌────────────┐           ┌──────────────┐
│   Client   │──────────>│  MCP Server  │
│   (Agent)  │   :8008   │  (MongoDB)   │
└────────────┘           └──────────────┘

When to use: Solo development, local experiments, testing tools.

📖 See Quick Start below.

🟡 Proxy Mode — OAuth 2.1 Authentication

Adds Keycloak as an OAuth 2.1 Authorization Server and a reverse proxy that validates Bearer tokens before forwarding to the MCP Server. Implements the Delegated Authorization pattern.

┌────────────┐  Bearer  ┌──────────┐           ┌──────────────┐
│   Client   │──token──>│  Proxy   │──────────>│  MCP Server  │
│   (Agent)  │          │  (RS)    │ (no auth) │  (MongoDB)   │
└────────────┘          └────┬─────┘           └──────────────┘
                             │ JWKS
                        ┌────┴─────┐
                        │ Keycloak │
                        │  (AS)    │
                        └──────────┘

When to use: Shared environments, multiple users, audit requirements.

📖 See iac/auth-proxy/ for the proxy implementation.

🔴 Gateway Mode — RBAC (Role-Based Tool Filtering)

The most secure mode. Extends Proxy Mode by inspecting MCP messages and filtering tools based on the user's Keycloak realm role. Different users see and can execute different sets of tools.

┌────────────┐  Bearer  ┌──────────────┐           ┌──────────────┐
│   Client   │──token──>│ RBAC Gateway │──────────>│  MCP Server  │
│   (Agent)  │          │ :4040        │ (no auth) │  (MongoDB)   │
└────────────┘          └──────┬───────┘           └──────────────┘
                               │ JWKS + roles
                          ┌────┴─────┐
                          │ Keycloak │
                          │  (AS)    │
                          └──────────┘

Role	Mode	Access Level
🔑 `mcp-admin`	allow	Full access — all tools (RW)
📊 `mcp-analyst`	allow	14 specific tools (RO)
👁️ `mcp-viewer`	allow	5 specific tools (RW)
👤 `mcp-guest`	deny	All except `atlas` category (RO)

When to use: Production, teams with different access levels, compliance.

📖 See doc/gateway.md for the full guide: architecture, step-by-step setup, Keycloak curl examples, token inspection, and RBAC configuration.

🚀 Quick Start

Prerequisites

Node.js v18+
A MongoDB connection string (Atlas or local)

1. Install dependencies

npm install

2. Configure environment

cp .env.example .env

Edit .env and set your MongoDB connection string:

MDB_MCP_CONNECTION_STRING=mongodb+srv://user:password@cluster.mongodb.net

3. Start the MCP Server

npm run mcp:wrapper:start

========================================
  MongoDB MCP Server
========================================
  Status   : running
  URL      : http://127.0.0.1:8008
  Endpoint : http://127.0.0.1:8008/mcp
========================================

4. Verify with the test client

npm run mcp:client:start

All 7 diagnostic checks should pass (connect, ping, list tools, call tool, list resources, read resource, shutdown).

📁 Project Structure

mongodb-mcp/
├── src/
│   ├── wrapper/                 # 🟢 MCP Server launcher
│   │   ├── index.js             #    Entry point
│   │   └── McpServerLauncher.js #    Process manager (env, spawn, shutdown)
│   ├── gateway/                 # 🔴 RBAC Gateway (OOP, SOLID/GRASP)
│   │   ├── index.js             #    Entry point — config + startup
│   │   ├── GatewayServer.js     #    Controller — HTTP server orchestration
│   │   ├── TokenVerifier.js     #    JWT/JWKS token verification
│   │   ├── RoleResolver.js      #    Role resolution + tool permissions
│   │   ├── McpInterceptor.js    #    MCP message filtering/blocking
│   │   └── ProxyHandler.js      #    HTTP reverse proxy to upstream
│   └── client/index.js          # 🧪 MCP test client (direct & auth modes)
├── cfg/
│   └── roles.json               # 🔧 Role-to-tools mapping config
├── iac/
│   ├── keycloak/
│   │   └── realm-export.json    # 🔐 Keycloak realm (roles, users, scopes)
├── doc/
│   └── gateway.md               # 📖 Full RBAC gateway guide
├── docker-compose.yml           # 🐳 Keycloak + MCP Server + Gateway
├── .env                         # ⚙️  Environment configuration
└── .vscode/mcp.json             # 🆚 VS Code Copilot MCP config

🧪 Test Client

The built-in test client implements the full MCP lifecycle and supports both direct and authenticated modes:

# 🟢 Direct — no authentication
npm run mcp:client:start

# 🔴 Via Gateway — with Keycloak token (uses .env defaults)
npm run mcp:client:gateway

# 🔴 Via Gateway — override user from the command line
npm run mcp:client:gateway -- --user mcp-admin --pass admin123

The client runs a diagnostic suite: initialize, ping, list tools, call a tool, list resources, read a resource, and graceful shutdown.

🆚 VS Code Copilot Integration

The .vscode/mcp.json file provides two server entries:

Server	URL	Auth
`mongodb`	`http://127.0.0.1:8008/mcp`	None
`mongodb-gateway`	`http://127.0.0.1:4040/mcp`	Bearer

For mongodb-gateway, VS Code will prompt you to paste a Keycloak access token. Obtain one first (replace user/password as needed):

curl -s -X POST http://localhost:8080/realms/mcp/protocol/openid-connect/token \
  -d "grant_type=password" \
  -d "client_id=mcp-client" \
  -d "username=mcp-admin" \
  -d "password=admin123" \
  -d "scope=openid mcp:access" | node -e "
    let d=''; process.stdin.on('data',c=>d+=c);
    process.stdin.on('end',()=>console.log(JSON.parse(d).access_token));
  "

Copy the token and paste it when VS Code prompts. See doc/gateway.md for more details and all available users.

🐳 Docker Compose

Run the complete stack with a single command:

npm run mcp:docker:start

This starts three services:

Service	Port	Description
`keycloak`	`:8080`	🔐 OAuth 2.1 Authorization Server
`mongodb-mcp`	`:8008`	🍃 MongoDB MCP Server
`mcp-gateway`	`:4040`	🛡️ RBAC Gateway (validates JWT + roles)

Stop everything:

npm run mcp:docker:stop

📜 npm Scripts

Script	Mode	Description
`npm run mcp:wrapper:start`	🟢	Start the MCP Server locally
`npm run mcp:client:start`	🟢	Run diagnostics — direct (no auth)
`npm run mcp:gateway:start`	🔴	Start the RBAC Gateway locally
`npm run mcp:client:gateway`	🔴	Run diagnostics — via gateway (with auth)
`npm run mcp:client:auth`	🟡	Run diagnostics — via proxy (with auth)
`npm run mcp:docker:start`	🐳	Start all Docker services
`npm run mcp:docker:stop`	🐳	Stop all Docker services

📖 Documentation

Document	Description
doc/gateway.md	🔴 RBAC Gateway, full guide with Keycloak examples
doc/remote.md	🟢 Securing Remote MongoDB MCP Servers: An RBAC Gateway Architecture

📚 References

📄 License

ISC

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

MongoDB MCP Server
Databases Developer Tools
Taki-Ta
A
license
-
quality
D
maintenance
Enables interaction with MongoDB databases through MCP protocol. Provides containerized deployment with Docker support for database operations and management.
Last updated 2025-06-20
64,747
Apache 2.0
mcp-mongo
Databases Developer Tools AI & Machine Learning
Filipescordeiro2
F
license
-
quality
D
maintenance
Enables AI agents to query and introspect MongoDB databases through find, aggregate, and schema discovery operations. Supports read-only default mode with optional write capabilities and works with any MCP-compatible client via stdio or HTTP transports.
Last updated 2026-04-03
Workspace MCP Server
Databases Project Management
sudenlee
F
license
-
quality
C
maintenance
Enables AI agents to query MongoDB databases and project management REST APIs through a universal MCP interface, providing read-time access to workspace data.
Last updated 2026-05-15
MongoDB MCP Server
Databases Cloud Platforms
stackblaze
A
license
-
quality
B
maintenance
Enables AI agents to interact with MongoDB databases and MongoDB Atlas, supporting read-only and write operations, Atlas cluster management, and data exploration.
Last updated 2026-06-14
64,747
Apache 2.0

View all related MCP servers

Related MCP Connectors

anythingmcp
Self-hosted MCP gateway: turn any API, database or MCP server into AI connectors — no code.
microservices.sh
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
pAIchart MCP Hub
MCP Hub: AI service discovery, per-user OAuth, and multi-service workflow orchestration

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ameksike/mongodb-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server