MongoDB Atlas

Connect MongoDB Atlas to bring your cluster and database inventory into Cortex.

Overview


Auth method	Atlas Admin API key pair (public + private key)
Setup time	~10 minutes
Access level	Read-only metadata

Looking to query your data? This connector ingests metadata — project, cluster, database, and collection inventory. To let agents read documents, install the MongoDB MCP instead. The two are separate integrations with different credentials, and they can run side by side. Admin API keys do not work for the MCP, and a connection string does not work here.

How to connect

In Atlas, go to Organization → Access Manager → API Keys (or Project → Access Manager) and click Create API Key
Give it a description and grant a read-only project role such as Project Read Only
Copy the Public Key and Private Key — the private key is shown only once
If your organisation enforces an API Access List for API keys, add Cendriix’s egress addresses to it (see Network access)
In Cendriix, go to Settings → Integrations → Connectors and click Connect on MongoDB Atlas
Paste the public and private keys

Cendriix authenticates to the Atlas Administration API v2 using HTTP Digest, as required by Atlas for programmatic API keys.

Capabilities

Once connected, Cendriix ingests:

Projects (Atlas groups) visible to the API key
Clusters and their configuration
Processes (cluster nodes)
Databases and collection inventory per process

This inventory becomes searchable context in Cortex.

Not included: document contents. This connector reads structural metadata only — it records that a collection exists, not what is inside it. Use the MongoDB MCP for document-level reads.

Network access

Atlas API keys may be restricted by an API Access List. If your organisation enforces one, Cendriix’s egress addresses must be added or metadata ingestion will fail with an authentication or connection error.

Contact Cendriix support or your account representative for the current address list — we provide it directly so you always receive up-to-date values, and every address supplied must be added.

Security notes

Grant the API key a read-only project role — Cendriix needs no write access
Use a dedicated API key so it can be audited and revoked independently
The private key is displayed once at creation; store it in a password manager
Credentials are encrypted at rest in a secrets vault scoped to your tenant, and are never written to logs
Revoke instantly by deleting the API key in Atlas, or disconnect from Settings → Integrations → Connectors

Troubleshooting

Symptom	Cause	Fix
Authentication fails immediately	Wrong key pair, or keys swapped	Re-copy from Atlas; the public key is the shorter one
`401` despite correct keys	API Access List is blocking Cendriix	Add the addresses from Network access
Connects, but no clusters appear	The key’s role has no project visibility	Grant Project Read Only on the relevant projects
Agents cannot read documents	Expected — this connector is metadata only	Install the MongoDB MCP