@mcpolyglot/connector-mongo
Advanced tools
MongoDB connector for mcpolyglot. Sample-based schema inference, read-only find / aggregate primitives, prompt-injection-safe results.
MongoDB connector for mcpolyglot. Sample-based schema inference, read-only find / aggregate primitives, prompt-injection-safe results.
For every Mongo source mcpolyglot generates:
<id>.list_collections — all collections with a sampled-field schema for each.<id>.describe_collection — one collection's sampled-field schema (paths, types, nullability).<id>.find — read-only find with filter, projection, sort, and a bounded limit.<id>.aggregate — read-only aggregation pipeline; mutating stages are rejected.Mongo doesn't have a one-shot "read-only transaction" knob, so mcpolyglot enforces it at the API surface:
find and aggregate are exposed — no update, insert, delete, or drop primitives.$out or $merge (the two stages that write back) is rejected with forbidden.read_only.maxTimeMS so a runaway aggregation can't pin the cluster.$sample per collection — no full-collection scans on list_collections.mongodb is declared as an optional dep. Install it once with your project and you're set.
MIT licensed.
FAQs
MongoDB connector for mcpolyglot. Sample-based schema inference, read-only find / aggregate primitives, prompt-injection-safe results.
We found that @mcpolyglot/connector-mongo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.