MongoDB

Overview

Umbrella's MongoDB Atlas integration pulls daily cost data from your Atlas invoices and breaks it down by project and cluster - giving you visibility into database spend alongside your cloud infrastructure costs. One connection covers spend across all projects and clusters in a single Atlas organization.

Umbrella reads cost and usage through the Atlas Admin API with a read-only Programmatic API key. No access to cluster data, queries, or user accounts is granted.

Prerequisites

Before you start, make sure you have:

• Organization Owner role on the Atlas organization - required to create Programmatic API keys.
• Your Organization ID - a 24-character hex ID found under Organization Settings in the Atlas console (at the top of the page).

What Umbrella reads

Umbrella ingests daily cost from Atlas invoice line items, split by project and cluster. No region-level breakdown is available in this release.

Organization Billing Viewer reads invoices and line items. Organization Read Only adds project and cluster metadata - with Billing Viewer alone those calls come back empty. Neither role can read database contents, run queries, or change settings.

Connect MongoDB Atlas

The onboarding wizard walks you through four steps: name the connection, create an API key in Atlas, paste the credentials, and done.

Step 1: Connection details

Enter a name for the connection and your Atlas Organization ID.

Click Continue to proceed.

Step 2: Set up in Atlas

This step walks you through creating a Programmatic API key in the MongoDB Atlas console.

1. Open the Atlas console. Sign in at cloud.mongodb.com as an Organization Owner and switch to the organization you entered in step 1.

2. Open the API Keys tab. In the left navigation open Applications, then the API Keys tab. Do not use the Service Accounts tab next to it - that creates a different credential, which does not work with this connection.

3. Create a key with both roles. Click Create API Key and give it a recognizable description (e.g., umbrella-cost-reader). Under Organization Permissions, select both of these:

   • Organization Billing Viewer
   • Organization Read Only

   They are required together: Billing Viewer alone does not grant project or cluster visibility. Leave every other role unchecked, including Organization Owner.

4. Copy the public and private keys. Atlas shows both halves once. Copy them now and paste them on the next screen.

   • Public key: eight lowercase letters, like abcdwxyz.

   • Private key: a UUID, shown only this once.

     🚧

     The private key cannot be retrieved later. If you lose it, delete the key and create a new one - the public key changes too.

5. Restrict by IP access list (optional). If your organization enforces an API access list, open the new key's row under Applications > API Keys, click Add Access List Entry and add these addresses:

   54.144.167.4
   50.17.26.79
   54.209.134.151
   52.54.17.32
   34.233.95.115
   3.66.114.227

   The same list is on the Allow list Umbrella Servers page.

Come back to the Umbrella wizard and click Continue.

Step 3: Enter credentials

Paste both halves of the Programmatic API key you created in Atlas.

When you click Complete connection, Umbrella checks the key pair against your organization. That takes about two minutes. If the check fails, the reason shows here and you can correct the keys.

What to expect

After you connect, Umbrella begins pulling invoice data.

Cost appears in the Explorer broken down by Atlas project and cluster.