← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionMongoDB MCP ServerLet AI assistants work with your MongoDB databases safely.DBHubBytebase's official, minimalist two-tool database MCP server
FMRS42 / 100 · D74 / 100 · B
Reliability5 / 2013 / 20
Security and permissions7 / 2013 / 20
Maintenance6 / 2016 / 20
Documentation13 / 2015 / 20
Setup experience11 / 2017 / 20
Best for
  • Users of AI coding assistants (Claude Desktop, Cursor, Windsurf) that need to interact with MongoDB
  • Developers who want to query databases using plain language
  • Teams sharing MongoDB data access with AI tools
  • Scenarios wanting the smallest possible tool count and lowest context-window overhead for database access
  • Cases needing to grant non-technical teammates safe, read-only database access
Not for
  • High-security production environments unless properly configured with authentication and permissions
  • Performance-critical scenarios where AI may run suboptimal queries
  • Users needing full database administration (e.g., user management, backups)
  • Scenarios needing database administration operations (creating indexes, altering schema) rather than just querying (DBHub is positioned as a query tool, not a DBA management tool)
Required permissions
  • MongoDB connection string, possibly including username and password
  • Read/write access to the target database (unless read-only mode is enabled)
  • HTTP mode may require an authentication token
  • Requires a database connection string (DSN), which may contain sensitive credentials
  • execute_sql can run arbitrary SQL (including writes) by default — must be constrained via read-only mode or the underlying database account's own permissions
Risks and side effects
  • If read-only mode is not enabled, AI may inadvertently perform write operations (updates, inserts, index creation)
  • Cross-database operations are blocked by default, but enabling --allow-cross-db may expose other databases
  • Server-side JavaScript operators ($function, $where) are disabled by default, but enabling can introduce code execution risks
  • HTTP mode defaults to localhost only, but misconfiguration could expose the database
  • May execute resource-intensive aggregations or queries, leading to performance issues
  • Under default settings, if the connected database account has write access, execute_sql could let the assistant perform an unintended write or delete — pair with a read-only database account in production
  • The DSN contains a plaintext password — pay attention to the access permissions on wherever the config is stored
Supported clientsClaude Desktop, Cursor, WindsurfClaude Desktop, Claude Code, VS Code, Cursor, Zed
Tools82