MongoDB · OAuth Scopes

MongoDB OAuth Scopes

OAuth 2.0 derived

MongoDB uses OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (e.g. client-credentials or role-based authorization) rather than per-scope consent.

Tokens are issued from https://cloud.mongodb.com/api/oauth/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

Cloud DatabaseDatabaseDocument DatabaseNoSQL
Scopes: 0 Flows: clientCredentials Method: derived

OAuth endpoints

Token URL
https://cloud.mongodb.com/api/oauth/token
Flows
clientCredentials

Scopes (0)

MongoDB implements OAuth 2.0 but publishes no discrete scopes — access is governed by the grant itself (client-credentials or role-based authorization) rather than per-scope consent.

MongoDB Atlas Service Accounts use the OAuth 2.0 client_credentials flow without scopes; permissions are governed by Atlas roles assigned to the service account (https://www.mongodb.com/docs/atlas/api/api-authentication/).

📄 Provider scope reference: https://www.mongodb.com/docs/atlas/api/api-authentication/

Source

OAuth Scopes

mongodb-scopes.yml Raw ↑ 
generated: '2026-07-11'
method: derived
source: openapi/mongodb-atlas-openapi.yaml
docs: https://www.mongodb.com/docs/atlas/api/api-authentication/
note: MongoDB Atlas Service Accounts use the OAuth 2.0 client_credentials flow without
  scopes; permissions are governed by Atlas roles assigned to the service account
  (https://www.mongodb.com/docs/atlas/api/api-authentication/).
schemes:
- name: ServiceAccounts
  source: openapi/mongodb-atlas-openapi.yaml
  flows:
  - flow: clientCredentials
    tokenUrl: https://cloud.mongodb.com/api/oauth/token
  description: Learn more about [Service Accounts](https://www.mongodb.com/docs/atlas/api/service-accounts-overview).
scopes: []