pluginagentmarketplace/custom-plugin-mongodb
Overview
This skill teaches practical MongoDB authentication: SCRAM, X.509 certificates, LDAP, and Kerberos. It covers creating users, assigning built-in and custom roles, enforcing password policies, and securing deployments with TLS and network controls. Followable examples and connection patterns for shell, Node.js, and Python are included.
How this skill works
The skill inspects common authentication flows and configuration points: enabling authorization in mongod, creating admin and application users, and choosing an auth mechanism (SCRAM, X.509, LDAP, Kerberos). It explains role-based access control (built-in and custom roles), password lifecycle actions (create, change, rotate), and secure connection setup for clients. Practical connection string and driver examples show how authentication is applied in real apps.
When to use it
- Onboard a new MongoDB deployment and enable authentication
- Secure production clusters with TLS and least-privilege access
- Integrate MongoDB with enterprise identity stores (LDAP/Kerberos)
- Create service accounts and custom roles for applications
- Audit and rotate credentials regularly to meet compliance
Best practices
- Always enable authorization (authorization: enabled or --auth) and bind mongod to specific IPs
- Use strong, unique passwords (≥12 chars, mixed character types) and rotate frequently
- Apply least privilege: grant only the roles necessary for each account
- Use TLS/SSL for client and inter-node encryption; prefer X.509 for mutual auth in sensitive environments
- Avoid hardcoding credentials; use environment variables, secret stores, or managed service accounts
Example use cases
- Create an initial admin user, then restart mongod with authorization enabled
- Provision an app service account with readWrite on a specific database for production
- Configure X.509 authentication for mutual TLS between clients and cluster in an enterprise
- Integrate MongoDB with corporate LDAP for centralized user management
- Define a custom role that grants read access to reporting collections and assign it to analysts
FAQ
Use SCRAM with strong passwords for most apps; enable TLS. For higher security or mutual auth, use X.509 certificates.
When should I use custom roles instead of built-in roles?
Create custom roles when built-in roles are too broad. Define precise privileges to enforce least privilege on specific DBs/collections.
8 skills
This skill helps you master MongoDB authentication methods including SCRAM, X.509, LDAP and Kerberos, and manage users, roles, and security best practices.
This skill helps you master MongoDB CRUD operations, insert, query, update, and delete documents efficiently across collections.
This skill guides you through deploying a production-ready MongoDB Atlas cluster, securing access, backups, monitoring, and cost optimization.
This skill helps you master MongoDB multi-document ACID transactions, manage sessions, handle errors, and ensure data consistency across operations.
This skill helps you optimize MongoDB performance by mastering indexes, explain plans, and ESR-compliant designs to speed queries.
This skill helps you master MongoDB find queries with filters, projections, sorting, and pagination to retrieve data efficiently.
This skill helps you design MongoDB schemas and choose embedding or referencing to optimize queries and scalability.
This skill helps you master MongoDB index creation and types to dramatically boost query performance through proper single-field, compound, text, and
