Connect MongoDB to Claude

The MongoDB MCP server normally runs locally on the machine that starts it. For Claude on the web or on a phone to use it, it needs a stable address on the internet with sign-in. That is what XenMCP does: you add the connection, we start the server in an isolated sandbox, and you get an address like https://your-company-mongo.xenmcp.com/mcp with OAuth.

Your database does not have to be open to the whole internet. XenMCP connects from a fixed IP address, and you allow only that address in your firewall or network access list.

Read-only is the default: Claude can search, count and analyse, but not change anything. You enable write tools only if you need them.

What you can ask Claude

How many orders came in over the last 7 days, split by country?
Show me the structure of the customers collection and which fields are often empty.
Find all users who have not logged in for 90 days.
Why is this query slow? Explain the plan and suggest an index.
Give me revenue per month as a table.

Typical tools

find: Search documents with a filter
aggregate: Run aggregation pipelines
count: Count documents
list-databases / list-collections: Show databases and collections
collection-schema: Infer a collection’s structure from samples
explain: Show the execution plan of a query
insert-many / update-many: Write data (only when you allow it, off by default)

What you need to connect

The connection string of your MongoDB (mongodb:// or mongodb+srv://)
A dedicated database user, ideally read-only (role read)
XenMCP’s fixed IP address allowed in your firewall or access list
Optional: which databases Claude may see

Security

Read-only by default (--readOnly): insert, update and delete stay blocked until you explicitly allow them. Write tools are marked so the AI client asks before every call.
No open database needed: allow only XenMCP’s fixed IP. If your MongoDB is reachable from the internet without restrictions today, that is a risk – with or without AI.
The connection string is stored encrypted (AES-256-GCM), never shown again and never logged.
Its own isolated sandbox (gVisor) with CPU and memory limits and no access to other customers.
The call log keeps only tool, status and duration – no queries and no results.

Good to know

XenMCP uses MongoDB’s official open-source server (Apache-2.0). We do not enable the Atlas administration tools (creating clusters, managing users) – this is about your data, not your infrastructure.

Built on

We use the open server MongoDB MCP Server (Apache-2.0), build the image ourselves from a pinned version and review the tool descriptions before release.

Frequently asked questions

Does my MongoDB have to be publicly reachable?

It has to be reachable for XenMCP, not for everyone. Allow only our fixed outbound IP address and use TLS and a dedicated user. If the database is in MongoDB Atlas, add the IP to the Network Access List.

Can Claude delete data?

Not by default. The server runs read-only. If you allow writes, the AI client asks before every write call. We also recommend a database user that can only read.

Where is my data processed?

The MCP server runs at XenMCP in Germany. Query results go to the AI client you connect – for Claude, that is Anthropic. You decide which client to use.

Does it work with MongoDB Atlas and self-hosted servers?

Yes, both. All that matters is that XenMCP can reach the database through the connection string.

When will MongoDB be available?

MongoDB is part of the first wave at beta launch. Join the waitlist and we will get in touch.