What can your AI assistant really reach in your database? Five short steps. Nothing leaves this computer.
1. Where is your AI's server?
The address your AI assistant is set up with. It usually ends in /mcp. If a gateway sits in front, give the gateway's address here. Servers your AI app starts as a program on this computer have no address: pick them from "Found on this computer".
Where do I find it?
Claude Code: the .mcp.json file in the project folder, or ~/.claude.json: look for "url".
Claude Desktop: Settings → Developer → Edit Config (claude_desktop_config.json).
Cursor, Codex, other apps: their MCP settings page or config file; the entry has a name and a URL.
Or ask whoever set the AI up: "what address does the AI use to reach our data?"
Found on this computer
2. Do you have a login token?
Optional. With a token for one role (say, sales) the scanner can check whether that role is shown tools it may not use, and whether the token is accepted at all. Leave empty to skip.
Optional. If you gave a gateway in step 1, this lets the scanner try to go round it.
3. Database login
Optional. The login your MCP server uses to reach MongoDB. With it the scanner can check whether that user can write, run code inside the database, or read other collections. It only reads.
Where do I find it?
Ask whoever runs the MCP server for "the database login the AI uses". Use that exact user, not an admin login: the point is to test what the AI's user can do.
On the server machine it is usually one line starting with mongodb://; you can paste that whole line under "Advanced" instead of filling the boxes.
No login to hand? Skip this step. The other checks still run.
Advanced
If this is filled in, the boxes above are ignored.
Kept in memory for this run only. Never saved, never sent anywhere.
4. The server's config file
Optional. The MCP server that connects your AI to the database is set up by one text file that lists every question the AI may ask. If you can get that file, the scanner reads how each question is written: write tools, free-form queries, missing row caps, whole records.
Where do I find it?
It is a .yaml file, usually called tools.yaml, on the machine where the MCP server runs (the server is started with toolbox --config tools.yaml or similar).
Whoever set up the AI connection has it; ask for "the Toolbox config file".
Open it in any text editor, copy everything, and paste it below. Passwords are not in it; they come from environment variables.
No file to hand? Skip this step. The other checks still run.
5. Ready to scan
This is what the scanner will check. Nothing is changed on your server or in your database.
Leave this unticked to check only the settings file. Nothing is started then.