THRONE
See report Verify server

registry / record

mongodb-mcp-server

npm / sealed 2026-06-16 / No. e043ea58

Does mongodb-mcp-server MCP work in Claude Code and Cursor? Throne executed mongodb-mcp-server mcp in a single-use Firecracker microVM and replayed both recorded client behaviours. Compatibility verdict: not fit. Is mongodb-mcp-server mcp safe? Static security scan: 4 finding(s) to review under security ruleset v1. The full per-step results, security findings, scan date, and evidence hash are below.

> throne registry mongodb-mcp-server sealed
receiptsealed evidence
scan id
e043ea58c3a849c7bbb597049014b95c
target
mongodb-mcp-server
sealed at
2026-06-16 18:54:12Z
evidence hash
sha256:336c15eda9652d7d9ec3953e5c3cc842aade1fda66f939273d7dab5cff229044
01connectWARN30.1s

step timed out after 30s, threshold is assumed, not calibrated to real client behavior

02discoverFAIL0ms

RuntimeError: session not started, run step 1 (connect) first

03validate_schemasFAIL0ms

RuntimeError: session not started, run step 1 (connect) first

04smoke_test_toolsFAIL0ms

RuntimeError: session not started, run step 1 (connect) first

05error_handlingFAIL0ms

RuntimeError: session not started, run step 1 (connect) first

06streamingFAIL0ms

RuntimeError: session not started, run step 1 (connect) first

07resource_lifecycleFAIL0ms

RuntimeError: session not started, run step 1 (connect) first

08concurrent_callsFAIL0ms

RuntimeError: session not started, run step 1 (connect) first

09reconnectPASS16.2s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was None)

01connectPASS27.7s

initialize ok: server MongoDB MCP Server 1.13.0, negotiated protocolVersion 2025-11-25, capabilities ['completions', 'logging', 'resources', 'tools'] [request_strategy=pipelined, connection_count=2, second connection established]

02discoverPASS804ms

supported: tools/list (25 tools), resources/list (2); method not found (tolerated): prompts/list; notes: connection 2 confirms 25 tools

03validate_schemasPASS407ms

all 25 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS237ms

called 10 of 10 tools (cap 10, strategy=pipelined): 0 ok, 10 returned tool-level errors (expected for synthesized args)

05error_handlingWARN15.2s

survived probes but no structured error response, handshake: probe handshake failed or died

06streamingNOT_APPLICABLE0ms

no streaming-capable tool declared by this server

07resource_lifecyclePASS556ms

read config://config (1 content blocks); subscribed 2/2 resources, unsubscribed 2/2

08concurrent_callsWARN246ms

ladder 1/2/4/6 overlapping list-databases calls: max_observed_stable_concurrency=6; all ids answered exactly once, but every call returned an error (tool-level isError result), the tool may need runtime dependencies this sandbox does not provide

09reconnectPASS29.0s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-11-25, first session was 2025-11-25)

chatgpt desktop calibratingemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 4 finding(s) (3 medium) / review recommended
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

exec() called with a dynamically built command (heuristic, review): 'cmd, (error) => {'

package/dist/esm/setup/aiTool.js:190
LOWTHR-NET-05 / Hardcoded outbound endpoints

15 non-local endpoint host(s) referenced in code, verify each is expected for this server's purpose: api.example.com (package/dist/cjs/tools/atlas/streams/build.js:73), cloud.mongodb.com (package/dist/cjs/common/config/userConfig.js:14), d2va9gm4j17fy9.cloudfront.net (package/dist/cjs/ui/lib/tools/list-databases.d.ts:7), dochub.mongodb.org (package/dist/cjs/tools/atlas/connect/connectCluster.js:15), forum.cursor.com (package/dist/cjs/common/exportsManager.d.ts:45), html.spec.whatwg.org (package/dist/cjs/ui/lib/tools/list-databases.d.ts:7), hub.docker.com (package/dist/cjs/tools/atlasLocal/create/createDeployment.js:13), jira.mongodb.org (package/dist/cjs/common/exportsManager.d.ts:46), knowledge.mongodb.com (package/dist/cjs/common/config/userConfig.js:18), reactjs.org (package/dist/cjs/ui/lib/tools/list-databases.d.ts:7), schema-registry.example.com (package/dist/cjs/tools/atlas/streams/build.js:59), skills.sh (package/dist/cjs/setup/aiTool.d.ts:37), testing-library.com (package/dist/cjs/ui/lib/tools/list-databases.d.ts:7), testing-playground.com (package/dist/cjs/ui/lib/tools/list-databases.d.ts:7), www.mongodb.com (package/dist/cjs/common/atlas/performanceAdvisorUtils.d.ts:8)

package/dist/cjs/common/atlas/performanceAdvisorUtils.d.ts:8
MEDIUMTHR-PROMPT-07 / Prompt injection via tool descriptions

6 invisible unicode character(s) (zero-width/soft hyphen), a known vector for hiding instructions from human review

package/dist/cjs/ui/lib/tools/list-databases.js:10
MEDIUMTHR-PROMPT-07 / Prompt injection via tool descriptions

6 invisible unicode character(s) (zero-width/soft hyphen), a known vector for hiding instructions from human review

package/dist/esm/ui/lib/tools/list-databases.js:7
VERDICT: NOT FIT17 of 18 steps exercised across 2 clientsSANDBOXED RUN, submitted server executed in a disposable microVM, compatibility: 7 fail / 3 warn (17 of 18 steps exercised across 2 clients) / security: review, 4 finding(s), 0 highsealed by THRONE / No. e043ea58 / 2026-06-16
scopeattestation tuple
target
mongodb-mcp-server npm
engine
sandboxed
claude code
calibration: partial recorded=9,spec=0,assumed=9
cursor
calibration: partial recorded=11,spec=0,assumed=7
chatgpt desktop
calibration: unavailable recorded=0,spec=2,assumed=16
steps exercised
17 of 18
test suite
v1.0.0
security ruleset
v1.0.0
sealed at
2026-06-16 18:54:12Z
evidence hash
sha256:336c15eda9652d7d9ec3953e5c3cc842aade1fda66f939273d7dab5cff229044
valid until
2026-09-14
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.