MongoDB Connection

    ```bash
    use [TARGET-DATABASE]
    db.createUser({
      user: "infisical_manager",
      pwd: "[ENTER-YOUR-USER-PASSWORD]",
      roles: []
    })
    ```
</Step>

<Step title="Grant Relevant Permissions">
    Depending on how you intend to use your MongoDB connection, you'll need to grant one or more of the following permissions.

    <Tip>
        To learn more about MongoDB's permission system, please visit their [documentation](https://www.mongodb.com/docs/manual/core/security-built-in-roles/).
    </Tip>

    <Tabs>
        <Tab title="Secret Rotation">
            For Secret Rotations, your Infisical user will require the ability to create, update, and delete users in the target database:

            ```bash
            use [TARGET-DATABASE]
            db.grantRolesToUser("infisical_manager", [
              { role: "userAdmin", db: "[TARGET-DATABASE]" }
            ])
            ```

            <Note>
                The `userAdmin` role allows managing users (create, update passwords, delete) within the specified database.
            </Note>
        </Tab>
    </Tabs>
</Step>

            ![App Connections Tab](/images/app-connections/general/add-connection.png)
        </Step>
        <Step title="Select MongoDB Connection">
            Click the **+ Add Connection** button and select the **MongoDB Connection** option from the available integrations.

            ![Select MongoDB Connection](/images/app-connections/mongodb/mongodb-app-connection-option.png)
        </Step>
        <Step title="Fill out the MongoDB Connection Modal">
            Complete the MongoDB Connection form by entering:
            - A descriptive name for the connection
            - An optional description for future reference
            - The MongoDB host URL for your database
            - The MongoDB port for your database
            - The MongoDB username for your database
            - The MongoDB password for your database
            - The MongoDB database name to connect to

            You can optionally configure SSL/TLS for your MongoDB connection in the **SSL** section.

            ![MongoDB Connection Modal](/images/app-connections/mongodb/mongodb-app-connection-form.png)
        </Step>
        <Step title="Connection Created">
            After clicking Create, your **MongoDB Connection** is established and ready to use with your Infisical project.

            ![MongoDB Connection Created](/images/app-connections/mongodb/mongodb-app-connection-generated.png)
        </Step>
    </Steps>
</Tab>
<Tab title="API">
    To create a MongoDB Connection, make an API request to the [Create MongoDB Connection](/api-reference/endpoints/app-connections/mongodb/create) API endpoint.

    ### Sample request

    ```bash Request
    curl    --request POST \
            --url https://app.infisical.com/api/v1/app-connections/mongodb \
            --header 'Content-Type: application/json' \
            --data '{
                "name": "my-mongodb-connection",
                "method": "username-and-password",
                "projectId": "7ffbb072-2575-495a-b5b0-127f88caef78",
                "credentials": {
                    "host": "[MONGODB HOST]",
                    "port": 27017,
                    "username": "[MONGODB USERNAME]",
                    "password": "[MONGODB PASSWORD]",
                    "database": "[MONGODB DATABASE]"
                }
            }'
    ```

    ### Sample response

    ```bash Response
    {
      "appConnection": {
          "id": "e5d18aca-86f7-4026-a95e-efb8aeb0d8e6",
          "name": "my-mongodb-connection",
          "projectId": "7ffbb072-2575-495a-b5b0-127f88caef78",
          "description": null,
          "version": 1,
          "orgId": "6f03caa1-a5de-43ce-b127-95a145d3464c",
          "createdAt": "2025-04-23T19:46:34.831Z",
          "updatedAt": "2025-04-23T19:46:34.831Z",
          "isPlatformManagedCredentials": false,
          "credentialsHash": "d41d8cd98f00b204e9800998ecf8427e",
          "app": "mongodb",
          "method": "username-and-password",
          "credentials": {
            "host": "[MONGODB HOST]",
            "port": 27017,
            "username": "[MONGODB USERNAME]",
            "database": "[MONGODB DATABASE]",
            "sslEnabled": false,
            "sslRejectUnauthorized": false,
            "sslCertificate": ""
          }
      }
    }
    ```
</Tab>