Ctrlk
Sprinto DashboardAPI Reference
For the complete documentation index, see llms.txt. This page is also available as Markdown.

MongoDB Atlas Integration

Connect MongoDB Atlas with Sprinto to automate access reviews, monitor database configurations, and ensure compliance using API-based integration.

The MongoDB Atlas integration enables Sprinto to monitor your database infrastructure and user access for compliance frameworks such as SOC 2 and ISO 27001.

Once connected, Sprinto automatically retrieves organisation, cluster, and user-level data from MongoDB Atlas to:

  • Track access across projects and databases

  • Monitor configuration and security posture

  • Support access reviews and audit readiness

This integration uses the MongoDB Atlas Administration API and authenticates using API keys.

Note

Sprinto currently uses API key-based authentication to connect to MongoDB Atlas. However, MongoDB now recommends using Service Accounts instead of API keys for production integrations, as API keys are considered a legacy authentication method.

To create an API key (current method):

  1. You must have Organization Owner access in MongoDB Atlas.

  2. Create an API key with the Organization Read Only role.

  3. Copy and securely store the Public Key and Private Key.

Future updates to this integration may migrate to Service Account authentication to align with MongoDB's recommendations.

How It Works

Sprinto connects to MongoDB Atlas using API key-based authentication and interacts with the Atlas Administration API to retrieve metadata required for compliance monitoring.

  • Sprinto uses the Atlas Administration API (https://cloud.mongodb.com/api/atlas/v2) to fetch data.

  • Authentication is performed using a Public Key and Private Key pair (HTTP Digest authentication).

  • Sprinto reads organisation-level and project-level information such as users, clusters, and roles.

  • The integration is read-only, ensuring no changes are made to your MongoDB Atlas environment.

This data is then used to power:

  • Access reviews

  • User activity tracking

  • Compliance checks and controls

Permissions and Data Access

Permissions Required

To integrate MongoDB Atlas with Sprinto, ensure:

  • Organisation Role: Organisation Owner (required to create API keys)

  • API Key Role: Organisation Read Only

The Organisation Read Only role ensures Sprinto can retrieve necessary data without modifying any resources.

Data Accessed by Sprinto

Sprinto collects the following metadata:

  • Organisations

  • Projects and clusters

  • Hosts and infrastructure details

  • User accounts and roles

  • Access groups and permissions

This data is used strictly for compliance monitoring and audit evidence generation.

Prerequisites

Before setting up the integration, ensure the following:

  • You have admin access (Organisation Owner) in MongoDB Atlas.

  • Multi-Factor Authentication (MFA) is enabled for all users.

  • You have access to create API keys in the Atlas console.

  • Atlas Admin API access is allowed (IP access restrictions configured appropriately).

Setup Instructions

Step 1: Navigate to MongoDB Atlas Integration

  1. Log in to the Sprinto dashboard.

  2. Go to Settings → Integrations.

  3. In the All tab, search for Mongo Atlas.

  4. Click Connect.

Step 2: Review Permissions and Data

  1. In the integration drawer, review:

    • Controls and checks automated

    • Permissions required

    • Data accessed by Sprinto

  2. Click Next.

Step 3: Generate API Keys in MongoDB Atlas

  1. Log in to the MongoDB Atlas console.

  2. Navigate to Identity & Access and click Applications.

  3. Go to the API Keys tab.

  4. Click Add new API Key.

  1. Provide a description for the key.

  2. Assign the role: Organization Read Only.

  3. Click Next.

  1. Copy and securely store the Public Key and the Private Key.

Step 4: Add API Keys in Sprinto

  1. Return to Sprinto.

  2. Enter:

    • Public Key

    • Private Key

  3. Click Connect Mongo Atlas.

Post-Connection Flow

Once the integration is successfully connected:

  • Sprinto initiates an initial data sync automatically.

  • Organisation, user, and cluster data are fetched.

  • Compliance checks and controls begin evaluating your setup.

  • Access review workflows can be configured using the synced data.

Note: It may take up to 24 hours for all data to fully reflect in Sprinto.

Troubleshooting

1. Insufficient Permissions (403 Error)

  • Ensure the API key has Organisation Read Only role.

  • Confirm the user creating the key has Organisation Owner access.

2. Authentication Failures (401 Error)

  • Verify that the Public and Private keys are correct.

  • Regenerate the API key if the private key was lost.

3. API Access Issues

  • Ensure Atlas Admin API access is not blocked by IP restrictions.

  • Confirm your IP Access List configuration allows API calls.

4. No Data Syncing

  • Wait up to 24 hours for initial sync.

  • Verify API key permissions and organisation scope.

Additional Notes

  • MongoDB Atlas also supports OAuth (Service Accounts) for authentication, which provides improved security and automatic token rotation.

  • Sprinto currently uses API key-based authentication for this integration.

  • The integration follows a read-only access model and does not modify any resources in your Atlas environment.

Support

Please contact Sprinto Support If you have any queries related to the integration or need any assistance.

PreviousMiro IntegrationNextMoneybird Integration

Last updated