The Connect dialog box for a cluster provides the details to connect to a cluster via the MongoDB shell, mongosh.
Prerequisites
mongosh
You must have mongosh installed on your machine to follow this tutorial. For instructions, see Install mongosh.
TLS
Clients must support TLS to connect to an Atlas cluster.
Clients must support the SNI TLS extension to connect to an Atlas Free cluster (formerly known as M0) or a Flex cluster. MongoDB shell supports the SNI TLS extension.
IP Access List
To access a cluster, you must connect from an IP address on the Atlas project's IP access list. If you need to add an IP address to the IP access list, you can do so in the Connect dialog box. You can also add the IP address from the Network Access tab.
Database User
To access a cluster, you must have a database user with access to the desired databases on your Atlas cluster. Database users are separate from Atlas users. Database users have access to MongoDB databases, while Atlas users have access to the Atlas application itself.
You can create a database user to access your Atlas cluster in the Connect dialog box. You can also add the database user from the Cluster view. Atlas creates a database user when you create your first cluster.
Connect to Your Cluster
In Atlas, go to the Clusters page for your project.
If it's not already displayed, select the organization that contains your desired project from the Organizations menu in the navigation bar.
If it's not already displayed, select your desired project from the Projects menu in the navigation bar.
In the sidebar, click Clusters under the Database heading.
The Clusters page displays.
Choose your Connection Security.
Choose Connection Type from the set of available buttons.
Note
Options Display if Feature Enabled
Atlas displays the connection type options after you enable Private IP for Peering, Private Endpoint, or both. If you haven't enabled either feature, no buttons display and Connection Type defaults to Standard.
Use this connection type for allowed public IP addresses.
Use this connection type if you enabled peering:
For Google Cloud or Azure and are connecting with {{connChoice}} from a peered network, or
For AWS and are connecting with {{connChoice}} from a peered network which uses a custom DNS service.
If neither of these apply, add your IP address to your IP access list and use the Standard Connection string. If you are connecting directly to Atlas from an office or home network, this might be the preferred option.
Note
Peer must be available
You can't select this option unless one of your peers is marked as AVAILABLE. To learn how to check the status of your peers, see View Atlas Network Peering Connections.
Note
Multi-Cloud Clusters
If your application isn't hosted on the same cloud service provider as your cluster's primary, the application can only perform secondary reads.
With multi-cloud clusters, consider adding the readPreference connection option to your connection string. Use one of the following values:
Use the connection string for the appropriate interface endpoint if you are connecting with {{connChoice}} over a Private Endpoint connection either because {{connChoice}}:
Runs inside your cloud provider network, or
Has transitive network access to your cloud provider network.
You want to use an optimized connection string.
If none of these apply, add your IP address to your IP access list and use the Standard Connection string. If you are connecting directly to Atlas from an office or home network, this might be the preferred option.
Note
You can't select this option unless your configured PrivateLink connection is ready to use. To learn how to check the status of your AWS PrivateLink, see Troubleshoot Private Endpoint Connection Issues.
Choose how you want to limit connections to your cluster.
Add a Connection IP Address
Important
Skip this step if Atlas indicates in the Setup connection security step that you have already configured an IP access list entry in your cluster. To manage the IP access list, see Add Entries to the Access List.
Atlas allows standard client connections to the cluster from entries in the project's IP access list. The project IP access list differs from the API access list, which restricts API access to specific IP or CIDR addresses.
If the IP access list is empty, Atlas prompts you to add an IP address to the project's IP access list. You can either:
Click Add Your Current IP Address to allow access from your current IP address.
Click Add an IP Address to add a single IP address or a CIDR-notated range of addresses.
Provide an optional description for the newly added IP address or CIDR range. Click Add IP Address to add the address to the IP access list.
Add a Connection IP Address
Important
Skip this step if Atlas indicates in the Setup connection security step that you have already configured an IP access list entry in your cluster. To manage the IP access list, see Add Entries to the IP access list.
Atlas allows standard client connections to the cluster from entries in the project's IP access list. The project IP access list differs from the API access list, which restricts API access to specific IP or CIDR addresses.
If the IP access list is empty, Atlas prompts you to add an IP address to the project's IP access list. Click Add a Different IP Address to add a single IP address or a CIDR-notated range of addresses.
Provide an optional description for the newly added IP address or CIDR range. Click Add IP Address to add the address to the IP access list.
Under Choose Connection Type, select Private Endpoint.
If you see the Private Link Type options, select one of the following options:
Optimized SRV Connection for load-balanced connections.
Legacy SRV Connection for non-load-balanced connections.
To learn more, see How can I optimize connection performance for sharded clusters using private endpoints?.
Under Choose Private Endpoint, select the endpoint you want to use.
Create a Database User.
Important
Skip this step if Atlas indicates in the Setup connection security step that you have at least one database user configured in your project. To manage existing database users, see Configure Database Users.
To access the cluster, you need a MongoDB user with access to the desired database or databases on the cluster in your project. If your project has no MongoDB users, Atlas prompts you to create a new user with the Atlas Admin role.
Enter the new user's Username.
Enter a Password for this new user or click Autogenerate Secure Password.
Click Create Database User to save the user.
Use this user to connect to your cluster in the following step.
Once you have added an IP address to your IP access list and added a database user, click Choose Your Connection Method.
Connect to your Atlas cluster with mongosh.
Select Shell.
Select
mongoshfrom the dropdown menu. We recommend that you upgrade to the latest version of the shell. To check the installed version of themongosh, run:mongosh --version Step 2 of the Atlas modal displays a copyable connection string that includes the name of the MongoDB user that can authenticate with the cluster. Copy this string. To connect as a different MongoDB user, change the --username option.
Troubleshooting
If you are experiencing issues connecting to your cluster, see Troubleshoot Connection Issues.