mcp_insert_document

What mcp_insert_document does on Mongo-MCP

AI agents use mcp_insert_document to create or update resources in Mongo-MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Mongo-MCP environment.

Why mcp_insert_document is rated Medium

insert_document creates or adds new data records reversibly—characteristic of Write category. While data could theoretically be deleted later (reversible), an LLM agent could insert large volumes of malicious data, corrupt database integrity, or cause resource exhaustion. Severity is high due to potential impact on data integrity and system resources, though not financial or permanently destructive.

From the tool's definition Tool name 'mcp_insert_document' and MongoDB context (CRUD operations server). No description provided, but the naming convention and sibling tools (mcp_create_collection, mcp_delete_document, mcp_create_index) confirm this is a Write operation that adds data…

The rule that runs mcp_insert_document safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mongo-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mcp_insert_document, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mcp_insert_document": {
      "limits": [
        {
          "counter": "mcp_insert_document_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about mcp_insert_document