mongodb-mcp-server 0.1.2 → 0.2.0

package/.github/pull_request_template.md

@@ -0,0 +1,5 @@
+## Proposed changes
+
+## Checklist
+
+- [ ] I have signed the [MongoDB CLA](https://www.mongodb.com/legal/contributor-agreement)

package/.github/workflows/accuracy-tests.yml

@@ -0,0 +1,55 @@
+name: Accuracy Tests
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+  pull_request:
+    types:
+      - labeled
+
+jobs:
+  run-accuracy-tests:
+    name: Run Accuracy Tests
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    if: |
+      github.event_name == 'workflow_dispatch' ||
+      (github.event_name == 'pull_request' && github.event.label.name == 'accuracy-tests')
+    env:
+      MDB_OPEN_AI_API_KEY: ${{ secrets.ACCURACY_OPEN_AI_API_KEY }}
+      MDB_GEMINI_API_KEY: ${{ secrets.ACCURACY_GEMINI_API_KEY }}
+      MDB_AZURE_OPEN_AI_API_KEY: ${{ secrets.ACCURACY_AZURE_OPEN_AI_API_KEY }}
+      MDB_AZURE_OPEN_AI_API_URL: ${{ vars.ACCURACY_AZURE_OPEN_AI_API_URL }}
+      MDB_ACCURACY_MDB_URL: ${{ secrets.ACCURACY_MDB_CONNECTION_STRING }}
+      MDB_ACCURACY_MDB_DB: ${{ vars.ACCURACY_MDB_DB }}
+      MDB_ACCURACY_MDB_COLLECTION: ${{ vars.ACCURACY_MDB_COLLECTION }}
+      MDB_ACCURACY_BASELINE_COMMIT: ${{ github.event.pull_request.base.sha || '' }}
+    steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version-file: package.json
+          cache: "npm"
+      - name: Install dependencies
+        run: npm ci
+      - name: Run accuracy tests
+        run: npm run test:accuracy
+      - name: Upload accuracy test summary
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: accuracy-test-summary
+          path: .accuracy/test-summary.html
+      - name: Comment summary on PR
+        if: github.event_name == 'pull_request' && github.event.label.name == 'accuracy-tests'
+        uses: marocchino/sticky-pull-request-comment@d2ad0de260ae8b0235ce059e63f2949ba9e05943 # v2
+        with:
+          # Hides the previous comment and add a comment at the end
+          hide_and_recreate: true
+          hide_classify: "OUTDATED"
+          path: .accuracy/test-brief.md

package/.github/workflows/check.yml

@@ -55,4 +55,4 @@ jobs:
           rm -rf node_modules
           npm pkg set scripts.prepare="exit 0"
           npm install --omit=dev
-      - run: npx -y @modelcontextprotocol/inspector --cli --method tools/list -- node dist/index.js --connectionString "mongodb://localhost"
+      - run: npx -y @modelcontextprotocol/inspector --cli --method tools/list -- node dist/index.js

package/.github/workflows/code_health.yaml

@@ -11,7 +11,7 @@ permissions: {}
 jobs:
   run-tests:
     name: Run MongoDB tests
-    if: github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository
+    if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository)
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
@@ -38,7 +38,7 @@ jobs:
 
   run-atlas-tests:
     name: Run Atlas tests
-    if: github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository
+    if: github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository)
     runs-on: ubuntu-latest
     steps:
       - uses: GitHubSecurityLab/actions-permissions/monitor@v1
@@ -54,7 +54,7 @@ jobs:
           MDB_MCP_API_CLIENT_ID: ${{ secrets.TEST_ATLAS_CLIENT_ID }}
           MDB_MCP_API_CLIENT_SECRET: ${{ secrets.TEST_ATLAS_CLIENT_SECRET }}
           MDB_MCP_API_BASE_URL: ${{ vars.TEST_ATLAS_BASE_URL }}
-        run: npm test -- --testPathIgnorePatterns "tests/unit" --testPathIgnorePatterns "tests/integration/tools/mongodb" --testPathIgnorePatterns "tests/integration/[^/]+\.ts"
+        run: npm test -- --exclude "tests/unit/**" --exclude "tests/integration/tools/mongodb/**" --exclude "tests/integration/*.ts"
       - name: Upload test results
         uses: actions/upload-artifact@v4
         if: always()
@@ -64,7 +64,7 @@ jobs:
 
   coverage:
     name: Report Coverage
-    if: always() && github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository
+    if: always() && (github.event_name == 'push' || (github.event.pull_request.user.login != 'dependabot[bot]' && github.event.pull_request.head.repo.full_name == github.repository))
     runs-on: ubuntu-latest
     needs: [run-tests, run-atlas-tests]
     steps:

package/.github/workflows/code_health_fork.yaml

@@ -34,17 +34,3 @@ jobs:
         with:
           name: test-results
           path: coverage/lcov.info
-
-  merge-dependabot-pr:
-    name: Merge Dependabot PR
-    if: github.event.pull_request.user.login == 'dependabot[bot]'
-    runs-on: ubuntu-latest
-    permissions:
-      pull-requests: write
-      contents: write
-    steps:
-      - name: Enable auto-merge for Dependabot PRs
-        run: gh pr merge --auto --squash "$PR_URL"
-        env:
-          PR_URL: ${{github.event.pull_request.html_url}}
-          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}

package/.github/workflows/dependabot_pr.yaml

@@ -0,0 +1,26 @@
+---
+name: Dependabot PR
+on:
+  pull_request:
+    types: [opened]
+    branches:
+      - main
+
+permissions: {}
+
+jobs:
+  merge-dependabot-pr:
+    name: Merge Dependabot PR
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: mongodb-js/devtools-shared/actions/setup-bot-token@main
+        id: app-token
+        with:
+          app-id: ${{ vars.DEVTOOLS_BOT_APP_ID }}
+          private-key: ${{ secrets.DEVTOOLS_BOT_PRIVATE_KEY }}
+      - name: Enable auto-merge for Dependabot PRs
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}

package/.github/workflows/docker.yaml

@@ -16,7 +16,7 @@ jobs:
       - name: Check out code
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@18ce135bb5112fa8ce4ed6c17ab05699d7f3a5e0
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435
       - name: Login to Docker Hub
         uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772
         with:

package/.github/workflows/jira-issue.yml

@@ -0,0 +1,72 @@
+---
+name: Create JIRA ticket for new issues
+
+on:
+  issues:
+    types: [opened, labeled]
+
+permissions:
+  issues: write
+  contents: read
+
+jobs:
+  jira_task:
+    name: Create Jira issue
+    runs-on: ubuntu-latest
+    if: github.event.action == 'opened' || github.event.label.name == 'create-jira'
+    steps:
+      - uses: GitHubSecurityLab/actions-permissions/monitor@v1
+        with:
+          config: ${{ vars.PERMISSIONS_CONFIG }}
+
+      - name: Create JIRA ticket
+        uses: mongodb/apix-action/create-jira@v8
+        id: create
+        continue-on-error: true
+        with:
+          token: ${{ secrets.JIRA_API_TOKEN }}
+          project-key: MCP
+          summary: "HELP: GitHub Issue n. ${{ github.event.issue.number }}"
+          issuetype: Bug
+          description: "This ticket tracks the following GitHub issue: ${{ github.event.issue.html_url }}."
+          extra-data: |
+            {
+              "fields": {
+                "customfield_12751": [
+                  {
+                    "id": "22223"
+                  },
+                  {
+                    "id": "27326"
+                  }
+                ]
+              }
+            }
+      - name: Show result
+        run: |
+          echo "JIRA action result: ${{ steps.create.outputs.issue-key || 'FAILED' }}"
+
+      - name: Add comment
+        if: steps.create.outputs.issue-key
+        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043
+        with:
+          issue-number: ${{ github.event.issue.number }}
+          body: |
+            Thanks for opening this issue. The ticket [${{ steps.create.outputs.issue-key }}](https://jira.mongodb.org/browse/${{ steps.create.outputs.issue-key }}) was created for internal tracking.
+
+      - name: Remove create-jira label
+        if: github.event.action == 'labeled' && github.event.label.name == 'create-jira'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            try {
+              await github.rest.issues.removeLabel({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                name: 'create-jira'
+              });
+              console.log('✅ Removed create-jira label');
+            } catch (error) {
+              console.log('⚠️ Could not remove create-jira label:', error.message);
+            }

package/.smithery/smithery.yaml

@@ -24,11 +24,17 @@ startCommand:
         title: Read-only
         description: When set to true, only allows read and metadata operation types, disabling create/update/delete operations.
         default: false
+      indexCheck:
+        type: boolean
+        title: Index Check
+        description: When set to true, enforces that query operations must use an index, rejecting queries that would perform a collection scan.
+        default: false
   exampleConfig:
     atlasClientId: YOUR_ATLAS_CLIENT_ID
     atlasClientSecret: YOUR_ATLAS_CLIENT_SECRET
     connectionString: mongodb+srv://USERNAME:PASSWORD@YOUR_CLUSTER.mongodb.net
     readOnly: true
+    indexCheck: false
 
   commandFunction:
     # A function that produces the CLI command to start the MCP on stdio.
@@ -54,6 +60,10 @@ startCommand:
           args.push('--connectionString');
           args.push(config.connectionString);
         }
+
+        if (config.indexCheck) {
+          args.push('--indexCheck');
+        }
       }
 
       return {

package/.vscode/extensions.json

@@ -3,7 +3,7 @@
   // Extension identifier format: ${publisher}.${name}. Example: vscode.csharp
 
   // List of extensions which should be recommended for users of this workspace.
-  "recommendations": ["firsttris.vscode-jest-runner", "orta.vscode-jest"],
+  "recommendations": ["vitest.explorer"],
   // List of extensions recommended by VS Code that should not be recommended for users of this workspace.
   "unwantedRecommendations": []
 }

package/.vscode/launch.json

@@ -4,12 +4,22 @@
   // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
   "version": "0.2.0",
   "configurations": [
+    {
+      "type": "node",
+      "request": "launch",
+      "name": "Launch Tests",
+      "runtimeExecutable": "npm",
+      "runtimeArgs": ["test"],
+      "cwd": "${workspaceFolder}",
+      "envFile": "${workspaceFolder}/.env"
+    },
     {
       "type": "node",
       "request": "launch",
       "name": "Launch Program",
       "skipFiles": ["<node_internals>/**"],
-      "program": "${workspaceFolder}/dist/index.js",
+      "runtimeExecutable": "npm",
+      "runtimeArgs": ["start"],
       "preLaunchTask": "tsc: build - tsconfig.build.json",
       "outFiles": ["${workspaceFolder}/dist/**/*.js"]
     }

package/.vscode/settings.json

@@ -1,11 +1 @@
-{
-  "jestrunner.jestCommand": "npm test --",
-  "jestrunner.debugOptions": {
-    "runtimeExecutable": "node",
-    "runtimeArgs": [
-      "--experimental-vm-modules",
-      "node_modules/jest/bin/jest.js",
-      "--coverage"
-    ]
-  }
-}
+{}

package/Dockerfile

@@ -4,6 +4,7 @@ RUN addgroup -S mcp && adduser -S mcp -G mcp
 RUN npm install -g mongodb-mcp-server@${VERSION}
 USER mcp
 WORKDIR /home/mcp
+ENV MDB_MCP_LOGGERS=stderr,mcp
 ENTRYPOINT ["mongodb-mcp-server"]
 LABEL maintainer="MongoDB Inc <info@mongodb.com>"
 LABEL description="MongoDB MCP Server"