{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-13T23:52:59.204Z", "record_id": "VXI-EXT-TOOL-TRUST-MONGODB-01-v1", "record_kind": "external_reference", "title": "MongoDB MCP: Read-only tools and database authority", "system": "MongoDB local MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Can an agent inspect MongoDB without receiving permission to change data or clusters?", "near_questions": [ "Which MongoDB identity will an analysis agent use?", "Does MongoDB MCP enable writes by default?", "What does MongoDB MCP readOnly restrict?", "Can I disable Atlas tools without disabling database reads?", "Are read-only MongoDB tools enough with a write-capable user?", "Which collections can the MongoDB connection inspect?", "Could MongoDB MCP create a cluster?", "Which MongoDB MCP metadata operations remain available?", "Where do MongoDB query results go after retrieval?", "What telemetry settings should I review for MongoDB MCP?", "What evidence is missing before approving MongoDB agent access?", "What changes should trigger a MongoDB MCP permission recheck?" ], "supported_claims": [ { "claim": "MongoDB documents a read-only MCP mode and recommends a separate read-only database identity. Write operations are otherwise enabled by default. Review both layers and any Atlas tools: selecting a safer tool set does not establish the effective permissions of an existing connection.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "MongoDB documents a read-only MCP mode and recommends a separate read-only database identity. Write operations are otherwise enabled by default. Review both layers and any Atlas tools: selecting a safer tool set does not establish the effective permissions of an existing connection.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-SNOWFLAKE-01-v1", "VXI-EXT-TOOL-TRUST-QDRANT-01-v1", "VXI-EXT-TOOL-TRUST-PINECONE-01-v1", "VXI-EXT-TOOL-TRUST-CLICKHOUSE-01-v1", "VXI-EXT-TOOL-TRUST-REDIS-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "MongoDB local MCP security boundaries", "source_url": "https://www.mongodb.com/docs/mcp-server/local-mcp/security-best-practices/", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-MONGODB-01-v1", "candidate_record_sha256": "d435f01e1403cb925aae9ab7c556c1fb7efc6493b5fa909e2a80c7c0fa941bd1", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "MongoDB documents a read-only MCP mode and recommends a separate read-only database identity. Write operations are otherwise enabled by default. Review both layers and any Atlas tools: selecting a safer tool set does not establish the effective permissions of an existing connection.", "required_buyer_context": "Local server version, enabled tools, target database identity and any Atlas connection.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "MongoDB local MCP", "variant": "MongoDB-published local server; not the separately hosted remote service" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "MongoDB publishes the local MCP server; the buyer controls its local configuration.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "The server exposes database operations and optional Atlas management tools.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Read and metadata categories include finding data and inspecting databases or collections.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Create, update and delete categories can modify data or Atlas resources unless restricted.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "Database connection information and Atlas API credentials are separate configuration inputs.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "The readOnly setting limits tool operations; disabledTools can restrict individual categories. MongoDB also recommends read-only database credentials.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Query results enter the MCP client. Database hosting, telemetry configuration and model recipients need separate review.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "An enabled write category or a broader database identity can defeat the intended analysis-only scope.", "source_ids": [ "mongo-main", "mongo-tools" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Actual credentials, database grants, Atlas privileges, telemetry settings and installed version have not been inspected.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Resolve the target identity and allowed operations before requesting sensitive data; do not treat tool names as proof of database restrictions.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "mongo-main", "url": "https://www.mongodb.com/docs/mcp-server/local-mcp/security-best-practices/", "final_url": "https://www.mongodb.com/docs/mcp-server/local-mcp/security-best-practices/", "title": "MongoDB local MCP security boundaries", "checked_on": "2026-10-14", "sha256": "24cba7f58fe1c295f6709703e85d1db6d2a60b3805b6266ddd657afc3d74fa0f", "bytes": 911873 }, { "source_id": "mongo-tools", "url": "https://www.mongodb.com/docs/mcp-server/local-mcp/configuration/enable-or-disable-features/", "final_url": "https://www.mongodb.com/docs/mcp-server/local-mcp/configuration/enable-or-disable-features/", "title": "MongoDB MCP tool and telemetry configuration", "checked_on": "2026-10-14", "sha256": "69a2a99717ae29d78a3460affcb4e9f6a66143ab5a8326b2f6477385002d738e", "bytes": 803544 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Retain the two-layer permission review behind an analysis-only database connection.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck the server mode, disabled categories and database or Atlas grants." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#mongodb-mcp-database-authority-trust", "machine_readable_record": "/varexis-index/records/mongodb-mcp-database-authority-trust.json" }