agent-mongo

Read-only by design — there are no write operations, and aggregation rejects $out and $merge rather than trusting the pipeline

Schema inference — sample documents to discover a collection's real structure, with configurable sample size and nesting depth

Full read surface — find, get by id, count, sample, distinct and aggregate, over databases, collections, indexes and stats

Extended JSON everywhere — every JSON argument accepts EJSON, so $date and $oid work in filters, sorts, projections and pipelines

Passwords never sit in config — a user:pass embedded in a URI is moved into a keychain credential named for the connection, and connection list redacts even connections saved before that existed

Refuses to silently overwrite — a conflicting credential alias errors with a hint about rotating versus referencing, rather than clobbering the stored value

LLM-safe credential entry — credential add --form uses a native OS dialog, so the secret never touches argv or the model's context

--echo-query shows exactly what ran — emitted verbatim, with real field order and nulls kept, because there the shape is the data

Honest output shaping — empty fields pruned and keys sorted, so a missing key means no value; index specs and query echoes are exempt

Truncation you can undo — long strings are cut with a companion length field, and --expand or --full brings them back

@meta and @pagination trailers — command context and has_more / total_items / next_cursor, rather than a silent cut-off

MCP server — the read-only data commands as MCP tools, over stdio or HTTP with optional local OAuth

Zero runtime dependencies — a single static Go binary