Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | MongoDB MCPMCP100 Selected | Supabase MCPMCP100 Selected |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP MongoDB · Publisher source ↗ | First-party MCP Supabase · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Aug 14, 2026 Package: Aug 10, 2026 | Repo: Aug 14, 2026 Package: Not documented |
| Popularity evidence | ||
| GitHub stars | 1,098 GitHub stars · checked 2026-08-14T18:46:26.000Z | 2,863 GitHub stars · checked 2026-08-14T18:46:26.000Z |
| 30-day package downloads | 445,811 30-day package downloads · checked 2026-08-14T18:46:26.000Z | No reliable download data |
| External adoption evidence |
|
|
| Client coverage | ||
| Client coverage details | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Supports MongoDB connection strings and MongoDB authentication mechanisms, including enterprise OIDC, LDAP, Kerberos, and X.509 where supported. Atlas management tools use an appropriately permissioned Atlas service account. | Hosted MCP uses browser OAuth and grants organization access to the MCP client. Project scope, read-only mode, and feature groups are encoded in URL query parameters. |
| Cost | The official MCP server is open source and has no separately documented server fee. MongoDB Atlas, Enterprise Advanced, infrastructure, data transfer, and AI-client charges remain applicable. | The MCP server is open source; normal Supabase plan, database, branch, Edge Function, storage, and usage charges apply. Branching and some storage operations require a paid plan. |
| Permissions | Database operations run with the connected MongoDB user's roles; Atlas operations require an Atlas service account with the relevant project permissions. The server exposes database, collection, query, index, performance, and Atlas administration tools. Publisher examples recommend `--readOnly` for data access. | Without project_ref the hosted server can access all projects in the authorized organization. With project_ref it is limited to one project. read_only=true uses a read-only Postgres user for SQL and disables listed mutation tools. Feature groups can further narrow exposed tools. |
| Data handling | The local MCP process connects to the configured MongoDB deployment and returns query, schema, index, and Atlas results to the AI client. Export features can write query or aggregation results to local files. Telemetry collection can be configured or disabled; logs may contain operational metadata and must be handled appropriately. | Enabled tools may return schemas, table data from executed queries, logs, security/performance advisors, project metadata, publishable keys, types, and Edge Function source. Hosted mode sends tool requests through Supabase's MCP service. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | The main risks are disclosure or mutation of database records and over-broad Atlas administration. Start with `--readOnly`, a dedicated least-privilege database user, narrowly scoped Atlas service credentials, disabled unnecessary tools and telemetry, and non-production data. This review does not claim MCP100 execution testing. | Unscoped or write-enabled access can affect every project in an organization, execute SQL, apply migrations, deploy functions, or manage branches. Always set project_ref and read_only=true first, minimize feature groups, and avoid production data. |
| Evidence date | ||
| Editorial review | 2026-07-24 | 2026-07-24 |
| Candidate evidence | 2026-08-14T18:46:26.000Z | 2026-08-14T18:46:26.000Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →