30,000 installs a week: agents got write authority before anyone got an audit trail

The figure is MongoDB's own: its MCP server already sees more than 30,000 installs a week ^[2], disclosed in the August 13, 2026 announcement at MongoDB.local Build Fest that made the Atlas Managed MCP Server a fully hosted service with nothing for a team to install, operate or upgrade ^[1]. At that weekly rate the annualised number is above 1.5 million ^[19]. It is a vendor number and a count of installs, not of active agents, but it is the only sizing anyone has published for the layer that now holds write access.

What it turns on is the permission model underneath. Atlas App Connections is an OAuth 2.1 flow in which the app acts on behalf of the authorizing user, not as a separate entity, with the same permissions that user holds ^[6]. Users always delegate all of their access, which can be more than the client needs for the task at hand ^[7]. Effective access is the more restrictive of the user's roles and the read-only or read-write mode an Organization Owner sets ^[8]. In read-write, a connected tool can query and aggregate, and with the right permissions create collections and manage indexes ^[3]. Setup is a marketplace click and an authorization, with no connection string and no infrastructure ^[5].

So the write is real and the identity is borrowed. The audit side is where the asymmetry sits: database auditing is available on M10+ clusters ^[11], custom JSON filters are checked only for valid syntax and are not validated or tested for function ^[12], and MongoDB notes auditing increases cluster resource usage and operational expense, recommending it be limited to essential users and turned off in development where not required ^[13].

The same pattern shows up in Anthropic's Gmail connector, which can send, reply to and forward mail, asking approval by default, with Team and Enterprise owners deciding whether members may let those actions run without asking each time ^[15]. Send authority is a toggle. Attribution is a project.