mcp_create_collection

What mcp_create_collection does on Mongo-MCP

AI agents use mcp_create_collection to create or update resources in Mongo-MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mongo-MCP environment.

Why mcp_create_collection is rated Medium

Creating a collection is a reversible write operation—it adds a new data structure but can be undone by dropping the collection. While the description is empty, the tool name is unambiguous and the server context confirms this is a MongoDB collection creation tool. Severity is medium because creating unwanted collections consumes resources and can clutter the database, but the operation is fully reversible.

From the tool's definition Tool name 'mcp_create_collection' indicates creation of a new MongoDB collection. Sibling tools on this server include destructive operations like 'mcp_drop_database' and 'mcp_delete_document', establishing this is a database manipulation interface.

The rule that runs mcp_create_collection safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mongo-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mcp_create_collection, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mcp_create_collection": {
      "limits": [
        {
          "counter": "mcp_create_collection_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about mcp_create_collection