@mpurdon/mcp-mongodb 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Matthew Purdon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,148 @@
+# @mpurdon/mcp-mongodb
+
+A local **stdio** MCP server that lets Claude query and manage MongoDB across `dev` / `stg` / `prd` environments, with a safety gate on write operations in production.
+
+- Three named environments selectable at runtime (`switch_environment`)
+- Read tools (`find`, `aggregate`, `count`, `list_*`) work in every environment
+- Write tools (`insert_*`, `update_*`, `delete_*`) require `confirmed: true` when the active environment is `prd`
+- `drop_collection` requires `confirmed: true` in **every** environment
+- Connection strings are never returned over the wire — only hostnames
+
+---
+
+## Install
+
+```bash
+npx -y @mpurdon/mcp-mongodb   # downloads & runs the latest published build
+```
+
+No global install needed — the host (Claude Desktop / Cowork / Code) runs it via
+`npx` per session. The fastest way to register it is the monorepo configurator:
+
+```bash
+npx @mpurdon/mcp-servers configure
+```
+
+…or configure it manually with the steps below.
+
+## Setup
+
+### 1. Create the config file
+
+The server reads `~/.mongodb-mcp/config.json`. Create it with your real connection strings:
+
+```bash
+mkdir -p ~/.mongodb-mcp
+cat > ~/.mongodb-mcp/config.json <<'EOF'
+{
+  "defaultEnvironment": "dev",
+  "environments": {
+    "dev": { "connectionString": "mongodb://localhost:27017", "name": "Development" },
+    "stg": { "connectionString": "mongodb://user:pass@staging-host:27017/?authSource=admin", "name": "Staging" },
+    "prd": { "connectionString": "mongodb://user:pass@prod-host:27017/?authSource=admin", "name": "Production" }
+  }
+}
+EOF
+chmod 600 ~/.mongodb-mcp/config.json
+```
+
+> The file contains credentials. `chmod 600` ensures only your user can read it.
+
+### 2. Register with your Claude host
+
+Add this to your host's MCP config (or let `npx @mpurdon/mcp-servers configure` do it):
+
+```json
+{
+  "mcpServers": {
+    "mongodb": {
+      "command": "npx",
+      "args": ["-y", "@mpurdon/mcp-mongodb"],
+      "env": {}
+    }
+  }
+}
+```
+
+Config file location per host:
+
+- **Claude Desktop** — `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)
+- **Claude Code** — `~/.claude.json` (user) or a project `.mcp.json`
+- **Claude Cowork** — the workspace's `.mcp.json`
+
+Restart the host.
+
+### 3. Verify
+
+Ask: _"What MongoDB environment am I connected to?"_ — Claude should call `current_environment` and return the active env, display name, host, and whether writes are restricted.
+
+---
+
+## Tool reference
+
+### Environment
+
+| Tool                      | Description                                                    |
+| ------------------------- | -------------------------------------------------------------- |
+| `switch_environment(env)` | Reconnect to `dev`, `stg`, or `prd`.                           |
+| `current_environment()`   | Return active env, display name, host, write-restriction flag. |
+
+### Read (unrestricted)
+
+| Tool                                                              | Description                                |
+| ----------------------------------------------------------------- | ------------------------------------------ |
+| `list_databases()`                                                | List all databases.                        |
+| `list_collections(database)`                                      | List collections in a db.                  |
+| `find(database, collection, filter?, projection?, limit?, sort?)` | Query docs. Default `limit=20`, max `500`. |
+| `aggregate(database, collection, pipeline)`                       | Run a pipeline. Capped at 500 results.     |
+| `count(database, collection, filter?)`                            | Count matching docs.                       |
+
+### Write (require `confirmed: true` in `prd`)
+
+- `insert_one(database, collection, document)`
+- `insert_many(database, collection, documents)`
+- `update_one(database, collection, filter, update, upsert?)`
+- `update_many(database, collection, filter, update)`
+- `delete_one(database, collection, filter)`
+- `delete_many(database, collection, filter)`
+
+When called in `prd` without `confirmed: true`, the server returns a structured `confirmationRequired` payload describing the planned execution. Re-invoke the same tool with `confirmed: true` to actually run it.
+
+### Always-confirm
+
+- `drop_collection(database, collection)` — requires `confirmed: true` in **every** environment.
+
+---
+
+## Security notes
+
+- **No credentials in responses.** Status responses include only the host (`host:port`), never the username/password or full URI.
+- **Config file permissions.** Use `chmod 600 ~/.mongodb-mcp/config.json`.
+- **Stdio only.** No TCP socket is opened; the server only accepts MCP traffic from its stdin (Claude Desktop spawns it per session).
+- **Input validation.** All tool parameters are validated with Zod before any MongoDB call.
+- **Production gate.** Writes in `prd` are rejected unless the caller explicitly opts in with `confirmed: true`. `drop_collection` is gated in every environment.
+
+---
+
+## Development
+
+From the monorepo root:
+
+```bash
+pnpm --filter @mpurdon/mcp-mongodb dev        # run from source (tsx)
+pnpm --filter @mpurdon/mcp-mongodb typecheck  # type-check only
+pnpm --filter @mpurdon/mcp-mongodb build      # build to dist/
+```
+
+### Project layout
+
+```
+src/
+  index.ts            # server entry — loads config, wires transport
+  config.ts           # config schema + safe host extraction
+  connection.ts       # singleton MongoClient manager
+  tools/
+    environment.ts    # switch_environment, current_environment
+    read.ts           # list_databases, list_collections, find, aggregate, count
+    write.ts          # insert/update/delete/drop with prod confirmation guard
+```

package/dist/config.js

@@ -0,0 +1,83 @@
+import { readFileSync, existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { z } from "zod";
+export const CONFIG_PATH = join(homedir(), ".mongodb-mcp", "config.json");
+export const EnvKey = z.enum(["dev", "stg", "prd"]);
+const EnvironmentSchema = z
+    .object({
+    connectionString: z.string().min(1, "connectionString is required"),
+    name: z.string().min(1, "name is required"),
+})
+    .strict();
+export const ConfigSchema = z
+    .object({
+    defaultEnvironment: EnvKey,
+    environments: z
+        .object({
+        dev: EnvironmentSchema,
+        stg: EnvironmentSchema,
+        prd: EnvironmentSchema,
+    })
+        .strict(),
+})
+    .strict();
+export class ConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ConfigError";
+    }
+}
+const SAMPLE_CONFIG = `{
+  "defaultEnvironment": "dev",
+  "environments": {
+    "dev": { "connectionString": "mongodb://localhost:27017", "name": "Development" },
+    "stg": { "connectionString": "mongodb://user:pass@staging-host:27017/?authSource=admin", "name": "Staging" },
+    "prd": { "connectionString": "mongodb://user:pass@prod-host:27017/?authSource=admin", "name": "Production" }
+  }
+}`;
+export function loadConfig(path = CONFIG_PATH) {
+    if (!existsSync(path)) {
+        throw new ConfigError(`MongoDB MCP config file not found at ${path}.\n\n` +
+            `Create it with the following contents (fill in real connection strings):\n\n` +
+            `mkdir -p "$(dirname '${path}')"\n` +
+            `cat > '${path}' <<'EOF'\n${SAMPLE_CONFIG}\nEOF\n`);
+    }
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch (err) {
+        throw new ConfigError(`Failed to read config at ${path}: ${err.message}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new ConfigError(`Config at ${path} is not valid JSON: ${err.message}`);
+    }
+    const result = ConfigSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new ConfigError(`Config at ${path} failed validation:\n${result.error.issues
+            .map((i) => `  - ${i.path.join(".") || "(root)"}: ${i.message}`)
+            .join("\n")}`);
+    }
+    return result.data;
+}
+/**
+ * Extract a non-sensitive host descriptor from a MongoDB connection string.
+ * Never returns credentials or the full URI.
+ */
+export function safeHostFromUri(uri) {
+    try {
+        // mongodb:// and mongodb+srv:// are URL-parseable by WHATWG URL.
+        const u = new URL(uri);
+        // u.host includes hostname[:port]; strip credentials by construction (URL exposes them in u.username/u.password).
+        return u.host || "(unknown host)";
+    }
+    catch {
+        return "(unparseable host)";
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAGpD,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IACnE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,kBAAkB,EAAE,MAAM;IAC1B,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,iBAAiB;KACvB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,aAAa,GAAG;;;;;;;EAOpB,CAAC;AAEH,MAAM,UAAU,UAAU,CAAC,OAAe,WAAW;IACnD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CACnB,wCAAwC,IAAI,OAAO;YACjD,8EAA8E;YAC9E,wBAAwB,IAAI,OAAO;YACnC,UAAU,IAAI,cAAc,aAAa,SAAS,CACrD,CAAC;IACJ,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,4BAA4B,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,aAAa,IAAI,uBAAwB,GAAa,CAAC,OAAO,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CACnB,aAAa,IAAI,wBAAwB,MAAM,CAAC,KAAK,CAAC,MAAM;aACzD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC/D,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,kHAAkH;QAClH,OAAO,CAAC,CAAC,IAAI,IAAI,gBAAgB,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/connection.js

@@ -0,0 +1,120 @@
+import { MongoClient } from "mongodb";
+import { safeHostFromUri } from "./config.js";
+/**
+ * Singleton connection manager. Holds one active MongoClient at a time.
+ * Calling `switchTo` closes the existing client and opens a new one.
+ */
+export class ConnectionManager {
+    client = null;
+    _connectingPromise = null;
+    activeEnv;
+    config;
+    constructor(config) {
+        this.config = config;
+        this.activeEnv = config.defaultEnvironment;
+    }
+    getActiveEnv() {
+        return this.activeEnv;
+    }
+    getActiveEnvName() {
+        return this.config.environments[this.activeEnv].name;
+    }
+    getActiveHost() {
+        return safeHostFromUri(this.config.environments[this.activeEnv].connectionString);
+    }
+    isProduction() {
+        return this.activeEnv === "prd";
+    }
+    /**
+     * Get the connected client for the active environment, connecting lazily.
+     *
+     * Uses a shared in-flight promise so concurrent callers awaiting an initial
+     * connection do not each create a separate MongoClient (TOCTOU race).
+     */
+    async getClient() {
+        if (this.client)
+            return this.client;
+        if (this._connectingPromise)
+            return this._connectingPromise;
+        this._connectingPromise = this._connect().finally(() => {
+            this._connectingPromise = null;
+        });
+        return this._connectingPromise;
+    }
+    async _connect() {
+        const uri = this.config.environments[this.activeEnv].connectionString;
+        const client = new MongoClient(uri, {
+            // Reasonable defaults for an interactive MCP server.
+            serverSelectionTimeoutMS: 10_000,
+            connectTimeoutMS: 10_000,
+            socketTimeoutMS: 30_000,
+            maxPoolSize: 5,
+            minPoolSize: 1,
+        });
+        // If the topology is closed (network blip, server restart, idle eviction),
+        // drop our cached reference so the next getClient() reconnects cleanly.
+        client.on("topologyClosed", () => {
+            if (this.client === client)
+                this.client = null;
+        });
+        client.on("close", () => {
+            if (this.client === client)
+                this.client = null;
+        });
+        await client.connect();
+        this.client = client;
+        return client;
+    }
+    /**
+     * Switch to a different environment. Closes the current client and opens a new one
+     * to verify the new connection works before returning.
+     */
+    async switchTo(env) {
+        this._connectingPromise = null;
+        if (this.client) {
+            try {
+                await this.client.close();
+            }
+            catch {
+                // ignore close errors during switch
+            }
+            this.client = null;
+        }
+        this.activeEnv = env;
+        // Eagerly connect so a bad config surfaces immediately.
+        await this.getClient();
+    }
+    /**
+     * Re-read a freshly parsed config without restarting the server.
+     * Closes the current connection and reconnects to the same active environment
+     * using the updated connection string.
+     */
+    async reloadConfig(newConfig) {
+        this._connectingPromise = null;
+        if (this.client) {
+            try {
+                await this.client.close();
+            }
+            catch {
+                // ignore close errors during reload
+            }
+            this.client = null;
+        }
+        this.config = newConfig;
+        // Keep the current env but reconnect with the (potentially new) URI.
+        await this.getClient();
+    }
+    async close() {
+        this._connectingPromise = null;
+        if (this.client) {
+            try {
+                await this.client.close();
+            }
+            catch {
+                // ignore
+            }
+            this.client = null;
+        }
+    }
+}
+//# sourceMappingURL=connection.js.map

package/dist/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../src/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAuB,IAAI,CAAC;IAClC,kBAAkB,GAAgC,IAAI,CAAC;IACvD,SAAS,CAAS;IAClB,MAAM,CAAS;IAEvB,YAAY,MAAc;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAC7C,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED,aAAa;QACX,OAAO,eAAe,CACpB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,gBAAgB,CAC1D,CAAC;IACJ,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,IAAI,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC;QAC5D,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACrD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACjC,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,QAAQ;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,gBAAgB,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE;YAClC,qDAAqD;YACrD,wBAAwB,EAAE,MAAM;YAChC,gBAAgB,EAAE,MAAM;YACxB,eAAe,EAAE,MAAM;YACvB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QACH,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;YAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACjD,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,wDAAwD;QACxD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,qEAAqE;QACrE,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;CACF"}

package/dist/index.js

@@ -0,0 +1,55 @@
+#!/usr/bin/env node
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { loadConfig, ConfigError } from "./config.js";
+import { ConnectionManager } from "./connection.js";
+import { registerEnvironmentTools } from "./tools/environment.js";
+import { registerReadTools } from "./tools/read.js";
+import { registerWriteTools } from "./tools/write.js";
+async function main() {
+    let config;
+    try {
+        config = loadConfig();
+    }
+    catch (err) {
+        if (err instanceof ConfigError) {
+            // Write to stderr so it surfaces in the host's MCP log without
+            // corrupting the stdio JSON-RPC stream on stdout.
+            process.stderr.write(`[mongodb] ${err.message}\n`);
+            process.exit(1);
+        }
+        throw err;
+    }
+    const conn = new ConnectionManager(config);
+    const server = new McpServer({
+        name: "mongodb",
+        version: "0.1.0",
+    }, {
+        instructions: "MongoDB MCP server. Switch environments with switch_environment; check status with current_environment. Read tools are unrestricted. Write tools require confirmed=true when the active environment is 'prd'. drop_collection ALWAYS requires confirmed=true.",
+    });
+    registerEnvironmentTools(server, conn);
+    registerReadTools(server, conn);
+    registerWriteTools(server, conn);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    const shutdown = async () => {
+        try {
+            await conn.close();
+        }
+        finally {
+            process.exit(0);
+        }
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+}
+// Prevent unhandled rejections (e.g. a MongoDB op that times out after the
+// MCP layer already returned) from crashing the process and resetting state.
+process.on("unhandledRejection", (reason) => {
+    process.stderr.write(`[mongodb] unhandled rejection (ignored): ${reason}\n`);
+});
+main().catch((err) => {
+    process.stderr.write(`[mongodb] fatal: ${err.stack ?? err}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,KAAK,UAAU,IAAI;IACjB,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC/B,+DAA+D;YAC/D,kDAAkD;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,IAAI,SAAS,CAC1B;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EACV,+PAA+P;KAClQ,CACF,CAAC;IAEF,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEjC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,MAAM,IAAI,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAqB,GAAa,CAAC,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;IAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/tools/environment.js

@@ -0,0 +1,85 @@
+import { z } from "zod";
+import { EnvKey, loadConfig, safeHostFromUri, ConfigError } from "../config.js";
+const textResult = (obj) => ({
+    content: [{ type: "text", text: JSON.stringify(obj) }],
+});
+const errorResult = (message) => ({
+    isError: true,
+    content: [{ type: "text", text: message }],
+});
+export function registerEnvironmentTools(server, conn) {
+    server.tool("switch_environment", "Switch the active MongoDB environment (dev|stg|prd). Reconnects and verifies the new connection.", { env: EnvKey }, async ({ env }) => {
+        try {
+            await conn.switchTo(env);
+            return textResult({
+                active: env,
+                name: conn.getActiveEnvName(),
+                host: conn.getActiveHost(),
+                writesRestricted: conn.isProduction(),
+            });
+        }
+        catch (err) {
+            return errorResult(`Failed to switch to '${env}': ${err.message}`);
+        }
+    });
+    server.tool("current_environment", "Return the active environment, its display name, the connection host (no credentials), and whether writes require confirmation.", {}, async () => {
+        return textResult({
+            active: conn.getActiveEnv(),
+            name: conn.getActiveEnvName(),
+            host: conn.getActiveHost(),
+            writesRestricted: conn.isProduction(),
+        });
+    });
+    server.tool("ping", "Ping the active MongoDB connection. Returns env, host, and round-trip time in ms.", {}, async () => {
+        const start = Date.now();
+        try {
+            const client = await conn.getClient();
+            await client.db("admin").command({ ping: 1 });
+            return textResult({
+                ok: true,
+                env: conn.getActiveEnv(),
+                host: conn.getActiveHost(),
+                roundTripMs: Date.now() - start,
+            });
+        }
+        catch (err) {
+            return errorResult(`ping failed (env=${conn.getActiveEnv()}, host=${conn.getActiveHost()}): ${err.message}`);
+        }
+    });
+    server.tool("reload_config", "Re-read ~/.mongodb-mcp/config.json and reconnect without restarting Claude Desktop. Useful after updating connection strings.", {}, async () => {
+        let newConfig;
+        try {
+            newConfig = loadConfig();
+        }
+        catch (err) {
+            return errorResult(err instanceof ConfigError
+                ? `Config error: ${err.message}`
+                : `Failed to read config: ${err.message}`);
+        }
+        try {
+            await conn.reloadConfig(newConfig);
+        }
+        catch (err) {
+            return errorResult(`Config loaded but reconnect failed: ${err.message}`);
+        }
+        const envs = Object.entries(newConfig.environments).map(([key, val]) => ({
+            env: key,
+            name: val.name,
+            host: safeHostFromUri(val.connectionString),
+        }));
+        return textResult({
+            reloaded: true,
+            active: conn.getActiveEnv(),
+            name: conn.getActiveEnvName(),
+            host: conn.getActiveHost(),
+            writesRestricted: conn.isProduction(),
+            environments: envs,
+        });
+    });
+}
+// Re-exported helpers used by other tool modules.
+export const _internal = { textResult, errorResult };
+export { textResult, errorResult };
+// Validation helpers used by read.ts / write.ts.
+export const NonEmptyString = z.string().min(1);
+//# sourceMappingURL=environment.js.map

package/dist/tools/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/tools/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhF,MAAM,UAAU,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CACtC,MAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB,kGAAkG,EAClG,EAAE,GAAG,EAAE,MAAM,EAAE,EACf,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAChB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,UAAU,CAAC;gBAChB,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBAC7B,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC1B,gBAAgB,EAAE,IAAI,CAAC,YAAY,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAChB,wBAAwB,GAAG,MAAO,GAAa,CAAC,OAAO,EAAE,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,iIAAiI,EACjI,EAAE,EACF,KAAK,IAAI,EAAE;QACT,OAAO,UAAU,CAAC;YAChB,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE;YAC7B,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE;YAC1B,gBAAgB,EAAE,IAAI,CAAC,YAAY,EAAE;SACtC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,MAAM,EACN,mFAAmF,EACnF,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,UAAU,CAAC;gBAChB,EAAE,EAAE,IAAI;gBACR,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC1B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAChB,oBAAoB,IAAI,CAAC,YAAY,EAAE,UAAU,IAAI,CAAC,aAAa,EAAE,MAAO,GAAa,CAAC,OAAO,EAAE,CACpG,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,+HAA+H,EAC/H,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,UAAU,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAChB,GAAG,YAAY,WAAW;gBACxB,CAAC,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE;gBAChC,CAAC,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAChB,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,gBAAgB,CAAC;SAC5C,CAAC,CAAC,CAAC;QACJ,OAAO,UAAU,CAAC;YAChB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE;YAC7B,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE;YAC1B,gBAAgB,EAAE,IAAI,CAAC,YAAY,EAAE;YACrC,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAEnC,iDAAiD;AACjD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC"}

package/dist/tools/read.js

@@ -0,0 +1,145 @@
+import { z } from "zod";
+import { textResult, errorResult, NonEmptyString } from "./environment.js";
+const FilterSchema = z.record(z.unknown()).optional();
+const ProjectionSchema = z
+    .record(z.union([z.literal(0), z.literal(1), z.boolean()]))
+    .optional();
+const SortSchema = z.record(z.union([z.literal(1), z.literal(-1)])).optional();
+const PipelineSchema = z.array(z.record(z.unknown()));
+const DEFAULT_FIND_LIMIT = 20;
+const MAX_FIND_LIMIT = 500;
+const MAX_AGG_RESULTS = 500;
+// Server-side time budget for every operation. Set below the MCP ~30s timeout
+// so MongoDB aborts cleanly and we can return an errorResult instead of an
+// unhandled rejection after the MCP layer has already given up.
+const OP_MAX_TIME_MS = 25_000;
+// Aggregation stages that write to the database. We block these in every
+// environment because they bypass the write tools' confirmation guard.
+const DISALLOWED_AGG_STAGES = ["$out", "$merge"];
+export function registerReadTools(server, conn) {
+    server.tool("list_databases", "List all databases on the active MongoDB connection.", {}, async () => {
+        try {
+            const client = await conn.getClient();
+            const admin = client.db().admin();
+            const result = await admin.listDatabases();
+            return textResult({
+                env: conn.getActiveEnv(),
+                databases: result.databases.map((d) => ({
+                    name: d.name,
+                    sizeOnDisk: d.sizeOnDisk,
+                    empty: d.empty,
+                })),
+            });
+        }
+        catch (err) {
+            return errorResult(`list_databases failed: ${err.message}`);
+        }
+    });
+    server.tool("list_collections", "List all collections in a database.", { database: NonEmptyString }, async ({ database }) => {
+        try {
+            const client = await conn.getClient();
+            const cols = await client.db(database).listCollections().toArray();
+            return textResult({
+                env: conn.getActiveEnv(),
+                database,
+                collections: cols.map((c) => ({ name: c.name, type: c.type })),
+            });
+        }
+        catch (err) {
+            return errorResult(`list_collections failed: ${err.message}`);
+        }
+    });
+    server.tool("find", "Query documents. Defaults to limit=20, max 500. Returns matched documents.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        filter: FilterSchema,
+        projection: ProjectionSchema,
+        limit: z.number().int().positive().max(MAX_FIND_LIMIT).optional(),
+        sort: SortSchema,
+    }, async ({ database, collection, filter, projection, limit, sort }) => {
+        try {
+            const client = await conn.getClient();
+            const col = client.db(database).collection(collection);
+            const cursor = col.find((filter ?? {}), {
+                projection: projection,
+                limit: limit ?? DEFAULT_FIND_LIMIT,
+                sort: sort,
+                maxTimeMS: OP_MAX_TIME_MS,
+            });
+            const docs = await cursor.toArray();
+            return textResult({
+                env: conn.getActiveEnv(),
+                database,
+                collection,
+                count: docs.length,
+                limit: limit ?? DEFAULT_FIND_LIMIT,
+                documents: docs,
+            });
+        }
+        catch (err) {
+            return errorResult(`find failed: ${err.message}`);
+        }
+    });
+    server.tool("aggregate", "Run an aggregation pipeline. Result capped at 500 documents.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        pipeline: PipelineSchema,
+    }, async ({ database, collection, pipeline }) => {
+        try {
+            // Reject write-capable stages ($out, $merge) before sending to the server.
+            // These bypass the write tools' confirmation flow entirely.
+            for (const stage of pipeline) {
+                for (const key of Object.keys(stage)) {
+                    if (DISALLOWED_AGG_STAGES.includes(key)) {
+                        return errorResult(`aggregate refused: stage '${key}' performs writes and is blocked in all environments. ` +
+                            `Use the dedicated write tools (insert/update/delete) with confirmed=true if needed.`);
+                    }
+                }
+            }
+            const client = await conn.getClient();
+            const col = client.db(database).collection(collection);
+            const docs = await col
+                .aggregate(pipeline, { maxTimeMS: OP_MAX_TIME_MS })
+                .limit(MAX_AGG_RESULTS)
+                .toArray();
+            return textResult({
+                env: conn.getActiveEnv(),
+                database,
+                collection,
+                count: docs.length,
+                capped: docs.length >= MAX_AGG_RESULTS,
+                documents: docs,
+            });
+        }
+        catch (err) {
+            return errorResult(`aggregate failed: ${err.message}`);
+        }
+    });
+    server.tool("count", "Count documents. With no filter uses estimatedDocumentCount (fast, metadata-based). With a filter uses countDocuments (exact but slower).", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        filter: FilterSchema,
+    }, async ({ database, collection, filter }) => {
+        try {
+            const client = await conn.getClient();
+            const col = client.db(database).collection(collection);
+            const hasFilter = filter && Object.keys(filter).length > 0;
+            const n = hasFilter
+                ? await col.countDocuments(filter, {
+                    maxTimeMS: OP_MAX_TIME_MS,
+                })
+                : await col.estimatedDocumentCount({ maxTimeMS: OP_MAX_TIME_MS });
+            return textResult({
+                env: conn.getActiveEnv(),
+                database,
+                collection,
+                count: n,
+                estimated: !hasFilter,
+            });
+        }
+        catch (err) {
+            return errorResult(`count failed: ${err.message}`);
+        }
+    });
+}
+//# sourceMappingURL=read.js.map

package/dist/tools/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/tools/read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE3E,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtD,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;KAC1D,QAAQ,EAAE,CAAC;AACd,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/E,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAEtD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,8EAA8E;AAC9E,2EAA2E;AAC3E,gEAAgE;AAChE,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,yEAAyE;AACzE,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAU,CAAC;AAE1D,MAAM,UAAU,iBAAiB,CAC/B,MAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB,sDAAsD,EACtD,EAAE,EACF,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACtC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;iBACf,CAAC,CAAC;aACJ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kBAAkB,EAClB,qCAAqC,EACrC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAC5B,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,CAAC;YACnE,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,QAAQ;gBACR,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC/D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAChB,4BAA6B,GAAa,CAAC,OAAO,EAAE,CACrD,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,MAAM,EACN,4EAA4E,EAC5E;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;QACpB,UAAU,EAAE,gBAAgB;QAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;QACjE,IAAI,EAAE,UAAU;KACjB,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QAClE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAa,EAAE;gBAClD,UAAU,EAAE,UAAkC;gBAC9C,KAAK,EAAE,KAAK,IAAI,kBAAkB;gBAClC,IAAI,EAAE,IAAwB;gBAC9B,SAAS,EAAE,cAAc;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,QAAQ;gBACR,UAAU;gBACV,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,KAAK,EAAE,KAAK,IAAI,kBAAkB;gBAClC,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,gBAAiB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,WAAW,EACX,8DAA8D,EAC9D;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,cAAc;KACzB,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,2EAA2E;YAC3E,4DAA4D;YAC5D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrC,IAAK,qBAA2C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC/D,OAAO,WAAW,CAChB,6BAA6B,GAAG,wDAAwD;4BACtF,qFAAqF,CACxF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,GAAG;iBACnB,SAAS,CAAC,QAAsB,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;iBAChE,KAAK,CAAC,eAAe,CAAC;iBACtB,OAAO,EAAE,CAAC;YACb,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,QAAQ;gBACR,UAAU;gBACV,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,eAAe;gBACtC,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,OAAO,EACP,2IAA2I,EAC3I;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;KACrB,EACD,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,SAAS;gBACjB,CAAC,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,MAAkB,EAAE;oBAC3C,SAAS,EAAE,cAAc;iBAC1B,CAAC;gBACJ,CAAC,CAAC,MAAM,GAAG,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;YACpE,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,QAAQ;gBACR,UAAU;gBACV,KAAK,EAAE,CAAC;gBACR,SAAS,EAAE,CAAC,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,iBAAkB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/write.js

@@ -0,0 +1,188 @@
+import { z } from "zod";
+import { textResult, errorResult, NonEmptyString } from "./environment.js";
+const DocumentSchema = z.record(z.unknown());
+const FilterSchema = z.record(z.unknown());
+const UpdateSchema = z.record(z.unknown());
+/**
+ * Wrap a write handler so that, when the active env is `prd` and `confirmed`
+ * isn't explicitly true, we return a structured confirmation-required response
+ * instead of executing.
+ *
+ * Pass `alwaysConfirm: true` for extra-dangerous ops (e.g. drop_collection)
+ * which require confirmation in every environment.
+ */
+function withProdGuard(conn, opName, describe, execute, alwaysConfirm = false) {
+    return async (args) => {
+        const needsConfirm = alwaysConfirm || conn.isProduction();
+        if (needsConfirm && !args.confirmed) {
+            return textResult({
+                confirmationRequired: true,
+                operation: opName,
+                environment: conn.getActiveEnv(),
+                environmentName: conn.getActiveEnvName(),
+                host: conn.getActiveHost(),
+                reason: alwaysConfirm
+                    ? `${opName} is destructive and requires explicit confirmation in every environment.`
+                    : `Active environment is production. Re-invoke with confirmed=true to execute.`,
+                plannedExecution: describe(args),
+            });
+        }
+        try {
+            const result = await execute(args);
+            return textResult({
+                env: conn.getActiveEnv(),
+                operation: opName,
+                ...result,
+            });
+        }
+        catch (err) {
+            return errorResult(`${opName} failed: ${err.message}`);
+        }
+    };
+}
+export function registerWriteTools(server, conn) {
+    // insert_one
+    server.tool("insert_one", "Insert one document. In prd, requires confirmed=true.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        document: DocumentSchema,
+        confirmed: z.boolean().optional(),
+    }, withProdGuard(conn, "insert_one", (a) => ({
+        database: a.database,
+        collection: a.collection,
+        document: a.document,
+    }), async (a) => {
+        const client = await conn.getClient();
+        const r = await client
+            .db(a.database)
+            .collection(a.collection)
+            .insertOne(a.document);
+        return { acknowledged: r.acknowledged, insertedId: r.insertedId };
+    }));
+    // insert_many
+    server.tool("insert_many", "Insert multiple documents. In prd, requires confirmed=true.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        documents: z.array(DocumentSchema).min(1),
+        confirmed: z.boolean().optional(),
+    }, withProdGuard(conn, "insert_many", (a) => ({
+        database: a.database,
+        collection: a.collection,
+        documentCount: a.documents.length,
+        firstDocumentPreview: a.documents[0],
+    }), async (a) => {
+        const client = await conn.getClient();
+        const r = await client
+            .db(a.database)
+            .collection(a.collection)
+            .insertMany(a.documents);
+        return {
+            acknowledged: r.acknowledged,
+            insertedCount: r.insertedCount,
+            insertedIds: r.insertedIds,
+        };
+    }));
+    // update_one
+    server.tool("update_one", "Update one matching document. In prd, requires confirmed=true.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        filter: FilterSchema,
+        update: UpdateSchema,
+        upsert: z.boolean().optional(),
+        confirmed: z.boolean().optional(),
+    }, withProdGuard(conn, "update_one", (a) => ({
+        database: a.database,
+        collection: a.collection,
+        filter: a.filter,
+        update: a.update,
+        upsert: a.upsert ?? false,
+    }), async (a) => {
+        const client = await conn.getClient();
+        const r = await client
+            .db(a.database)
+            .collection(a.collection)
+            .updateOne(a.filter, a.update, { upsert: a.upsert ?? false });
+        return {
+            acknowledged: r.acknowledged,
+            matchedCount: r.matchedCount,
+            modifiedCount: r.modifiedCount,
+            upsertedCount: r.upsertedCount,
+            upsertedId: r.upsertedId,
+        };
+    }));
+    // update_many
+    server.tool("update_many", "Update all matching documents. In prd, requires confirmed=true.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        filter: FilterSchema,
+        update: UpdateSchema,
+        confirmed: z.boolean().optional(),
+    }, withProdGuard(conn, "update_many", (a) => ({
+        database: a.database,
+        collection: a.collection,
+        filter: a.filter,
+        update: a.update,
+    }), async (a) => {
+        const client = await conn.getClient();
+        const r = await client
+            .db(a.database)
+            .collection(a.collection)
+            .updateMany(a.filter, a.update);
+        return {
+            acknowledged: r.acknowledged,
+            matchedCount: r.matchedCount,
+            modifiedCount: r.modifiedCount,
+        };
+    }));
+    // delete_one
+    server.tool("delete_one", "Delete one matching document. In prd, requires confirmed=true.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        filter: FilterSchema,
+        confirmed: z.boolean().optional(),
+    }, withProdGuard(conn, "delete_one", (a) => ({
+        database: a.database,
+        collection: a.collection,
+        filter: a.filter,
+    }), async (a) => {
+        const client = await conn.getClient();
+        const r = await client
+            .db(a.database)
+            .collection(a.collection)
+            .deleteOne(a.filter);
+        return { acknowledged: r.acknowledged, deletedCount: r.deletedCount };
+    }));
+    // delete_many
+    server.tool("delete_many", "Delete all matching documents. In prd, requires confirmed=true.", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        filter: FilterSchema,
+        confirmed: z.boolean().optional(),
+    }, withProdGuard(conn, "delete_many", (a) => ({
+        database: a.database,
+        collection: a.collection,
+        filter: a.filter,
+    }), async (a) => {
+        const client = await conn.getClient();
+        const r = await client
+            .db(a.database)
+            .collection(a.collection)
+            .deleteMany(a.filter);
+        return { acknowledged: r.acknowledged, deletedCount: r.deletedCount };
+    }));
+    // drop_collection — ALWAYS requires confirmation
+    server.tool("drop_collection", "Drop an entire collection. Requires confirmed=true in EVERY environment (dev/stg/prd).", {
+        database: NonEmptyString,
+        collection: NonEmptyString,
+        confirmed: z.boolean().optional(),
+    }, withProdGuard(conn, "drop_collection", (a) => ({ database: a.database, collection: a.collection }), async (a) => {
+        const client = await conn.getClient();
+        const dropped = await client
+            .db(a.database)
+            .collection(a.collection)
+            .drop();
+        return { dropped };
+    }, 
+    /* alwaysConfirm */ true));
+}
+//# sourceMappingURL=write.js.map

package/dist/tools/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE3E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC7C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC3C,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAI3C;;;;;;;GAOG;AACH,SAAS,aAAa,CACpB,IAAuB,EACvB,MAAc,EACd,QAAkD,EAClD,OAA0C,EAC1C,aAAa,GAAG,KAAK;IAErB,OAAO,KAAK,EAAE,IAAW,EAAE,EAAE;QAC3B,MAAM,YAAY,GAAG,aAAa,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1D,IAAI,YAAY,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC;gBAChB,oBAAoB,EAAE,IAAI;gBAC1B,SAAS,EAAE,MAAM;gBACjB,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE;gBAChC,eAAe,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBACxC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC1B,MAAM,EAAE,aAAa;oBACnB,CAAC,CAAC,GAAG,MAAM,0EAA0E;oBACrF,CAAC,CAAC,6EAA6E;gBACjF,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;gBACxB,SAAS,EAAE,MAAM;gBACjB,GAAI,MAAkC;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAAC,GAAG,MAAM,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAiB,EACjB,IAAuB;IAEvB,aAAa;IACb,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,uDAAuD,EACvD;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE,cAAc;QACxB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,EACD,aAAa,CACX,IAAI,EACJ,YAAY,EACZ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,MAAM;aACnB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACd,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,SAAS,CAAC,CAAC,CAAC,QAAoB,CAAC,CAAC;QACrC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IACpE,CAAC,CACF,CACF,CAAC;IAEF,cAAc;IACd,MAAM,CAAC,IAAI,CACT,aAAa,EACb,6DAA6D,EAC7D;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,EACD,aAAa,CACX,IAAI,EACJ,aAAa,EACb,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM;QACjC,oBAAoB,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;KACrC,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,MAAM;aACnB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACd,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,UAAU,CAAC,CAAC,CAAC,SAAuB,CAAC,CAAC;QACzC,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC;IACJ,CAAC,CACF,CACF,CAAC;IAEF,aAAa;IACb,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,gEAAgE,EAChE;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC9B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,EACD,aAAa,CACX,IAAI,EACJ,YAAY,EACZ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK;KAC1B,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,MAAM;aACnB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACd,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,SAAS,CACR,CAAC,CAAC,MAA0B,EAC5B,CAAC,CAAC,MAAgC,EAClC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,EAAE,CAC9B,CAAC;QACJ,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC,CACF,CACF,CAAC;IAEF,cAAc;IACd,MAAM,CAAC,IAAI,CACT,aAAa,EACb,iEAAiE,EACjE;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,EACD,aAAa,CACX,IAAI,EACJ,aAAa,EACb,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,MAAM;aACnB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACd,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,UAAU,CACT,CAAC,CAAC,MAA0B,EAC5B,CAAC,CAAC,MAAgC,CACnC,CAAC;QACJ,OAAO;YACL,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;SAC/B,CAAC;IACJ,CAAC,CACF,CACF,CAAC;IAEF,aAAa;IACb,MAAM,CAAC,IAAI,CACT,YAAY,EACZ,gEAAgE,EAChE;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,EACD,aAAa,CACX,IAAI,EACJ,YAAY,EACZ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,MAAM;aACnB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACd,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,SAAS,CAAC,CAAC,CAAC,MAA0B,CAAC,CAAC;QAC3C,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;IACxE,CAAC,CACF,CACF,CAAC;IAEF,cAAc;IACd,MAAM,CAAC,IAAI,CACT,aAAa,EACb,iEAAiE,EACjE;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,EACD,aAAa,CACX,IAAI,EACJ,aAAa,EACb,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,EACF,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,MAAM;aACnB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACd,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,UAAU,CAAC,CAAC,CAAC,MAA0B,CAAC,CAAC;QAC5C,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;IACxE,CAAC,CACF,CACF,CAAC;IAEF,iDAAiD;IACjD,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,wFAAwF,EACxF;QACE,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAClC,EACD,aAAa,CACX,IAAI,EACJ,iBAAiB,EACjB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,EAC3D,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,MAAM;aACzB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACd,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,mBAAmB,CAAC,IAAI,CACzB,CACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@mpurdon/mcp-mongodb",
+  "version": "0.1.0",
+  "description": "Local stdio MCP server for MongoDB with multi-environment support and production write protection.",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "mongodb": "dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "mongodb",
+    "claude"
+  ],
+  "license": "MIT",
+  "author": "Matthew Purdon",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mpurdon/mcp-servers.git",
+    "directory": "packages/mongodb"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.4",
+    "mongodb": "^6.10.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "eslint": "^9.17.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "@mpurdon/tsconfig": "0.0.0",
+    "@mpurdon/eslint-config": "0.0.0"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint ."
+  }
+}