v1.14.0

What's New

You can now create, pause, resume, and upgrade Atlas clusters directly through the AI assistant, as well as load sample data into clusters with a dedicated tool. Sensitive information is now automatically redacted from configuration outputs and logs by default, and MQL validation has been extended to cover projections in find, export, and explain operations. Additionally, a new maxSessions configuration option lets you control how many sessions the server can create, and administrators can now disable automatic IP access list creation when connecting to Atlas clusters.

What's Changed

🚀 Features

• feat: add Braintrust-based single-turn LLM-as-judge eval framework CLOUDP-367319 by @nima-taheri-mongodb in #1141
• feat: pass allow-listed headers (x-request-id) in atlas tool calls to apiClient and from there to the API CLOUDP-415674 by @lerouxb in #1279
• feat: log x-request-id MCP-560 by @lerouxb in #1280
• feat: add structured content for response in mongodb tools - MCP-374 by @dudaschar in #1249
• feat: add structured content for response in atlas-local tools - MCP-374 by @dudaschar in #1256
• feat: add structured content for response in atlas tools - MCP-374 by @dudaschar in #1288
• feat: pass the request headers down when calling addSession() MCP-570 by @lerouxb in #1298
• feat: enhance validation when creating new db user - MCP-577 by @dudaschar in #1307
• feat: add health-check in documentation and enrich response - MCP-517 by @gusanthiago in #1267
• feat: implement redaction of sensitive information in config resource output - MCP-589 by @dudaschar in #1337
• feat: allow consumers to disable automatic IP access list creation CLOUDP-422265 by @nirinchev in #1343
• feat: add maxSessions config to control session creation - MCP-587 by @dudaschar in #1336
• feat: enhance MQL validation to include projection in find, export, and explain tools - MCP-583 by @dudaschar in #1318

🐛 Bug Fixes

• fix: wait for connection string when creating a deployment by @nirinchev in #1291
• fix: mongot healtcheck failures by @nirinchev in #1292
• fix: make requestIdAttr case-insensitive CLOUDP-418875 by @lerouxb in #1301
• fix: enforce redaction of sensitive information in mcp logger by default - MCP-574 by @dudaschar in #1303
• fix: use commit messages for release notes generation MCP-573 by @nirinchev in #1304
• fix: update cluster listing output to include project name inside untrusted tag - MCP-576 by @dudaschar in #1306
• fix: update messages to use "requested collection" and keep collection name along with other parsed content - MCP-580 by @dudaschar in #1314
• fix: do not interpolate names in note for StreamsDiscoverTool output - MCP-578 by @dudaschar in #1308
• fix: update output messages to use "requested collection" and "requested database" - MCP-581 by @dudaschar in #1316
• fix: update error handling output to include untrusted data formatting MCP-582 by @dudaschar in #1317

📖 Documentation

• docs(atlas): clarify atlas-list-alerts returns triggered alerts, not configurations MCP-543 by @blva in #1260

📦 Dependencies

• chore(deps-dev): bump esbuild from 0.27.1 to 0.28.1 by @dependabot[bot] in #1259
• chore(deps): bump github/gh-aw-actions from cc81570b4572ee3ccd62613812c2505f13160de5 to c20f9e750acfb2da7ce8698626ebeb65efb33300 by @dependabot[bot] in #1262
• chore(deps-dev): bump eslint-plugin-prettier from 5.5.5 to 5.5.6 by @dependabot[bot] in #1264
• chore(deps): bump zod from 4.4.2 to 4.4.3 by @dependabot[bot] in #1266
• chore(deps-dev): bump uuid from 14.0.0 to 14.0.1 by @dependabot[bot] in #1273
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1261
• chore(deps): bump github/gh-aw-actions/setup-cli from 0.80.6 to 0.81.4 by @dependabot[bot] in #1289
• chore(deps-dev): bump the vitest group with 5 updates by @dependabot[bot] in #1328
• chore(deps-dev): bump @modelcontextprotocol/inspector from 0.21.2 to 0.22.0 by @dependabot[bot] in #1331
• chore(deps-dev): bump @vitejs/plugin-react from 6.0.1 to 6.0.3 by @dependabot[bot] in #1329
• chore(deps-dev): bump testcontainers from 11.14.0 to 12.0.3 by @dependabot[bot] in #1330
• chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1325
• chore(deps): bump github/gh-aw-actions/setup-cli from 0.81.4 to 0.82.2 by @dependabot[bot] in #1324
• chore(deps): bump docker/login-action from 4.2.0 to 4.4.0 by @dependabot[bot] in #1323
• chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #1322
• chore(deps): bump marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5 by @dependabot[bot] in #1344
• chore(deps): bump mongodb-js/devtools-shared/actions/setup-bot-token from 04e390e1e6157b3edbc120f3d9359d3fb47ab839 to c0821f61558402d9e6384de1b2caacce1d6695dd by @dependabot[bot] in #1345

New Contributors

• @arekborucki made their first contribution in #1252
• @maastha made their first contribution in #1297
• @gribnoysup made their first contribution in #1313
• @gusanthiago made their first contribution in #1267

Full Changelog: v1.13.0...v1.14.0