mcp_get_connection_details

What mcp_get_connection_details does on Mongo-MCP

AI agents call mcp_get_connection_details to retrieve information from Mongo-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why mcp_get_connection_details is rated Low

This tool retrieves connection details (host, port, credentials, authentication settings, etc.) without creating, modifying, or deleting data. It is a read operation. Severity is high because exposed connection details could enable an attacker to directly access the MongoDB instance if credentials are included in the returned information, even though the tool itself performs no destructive action.

From the tool's definition Tool name 'mcp_get_connection_details' and description 'Get detailed MongoDB connection information' indicate retrieval of connection metadata without modification.

The rule that runs mcp_get_connection_details safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mongo-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mcp_get_connection_details, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mcp_get_connection_details": {}
  }
}

Questions about mcp_get_connection_details