mcp_list_collections

What mcp_list_collections does on Mongo-MCP

AI agents call mcp_list_collections to retrieve information from Mongo-MCP without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why mcp_list_collections is rated Low

This tool performs a read-only operation that retrieves structural information about a MongoDB database. It has no side effects, does not execute code, and does not modify or delete data. The blast radius of misuse is minimal—an attacker could only enumerate database structure to inform further attacks, but the tool itself causes no damage. This is a straightforward Read category operation.

From the tool's definition Tool name 'list_collections' and description 'List all collections in the specified database' indicate a query operation that retrieves metadata about existing collections without modifying or deleting data.

The rule that runs mcp_list_collections safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Mongo-MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For mcp_list_collections, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "mcp_list_collections": {}
  }
}

Questions about mcp_list_collections