Atlas SQL Schema Builder
Parent: Atlas SQL Interface MongoSQL · Published reference · snapshot 2026-10-24 · viability 3.15 / 5 (skip)
↓ Facts as markdownall context files
Source-anchored research for Atlas SQL Schema Builder. Run status: COMPLETED.
These notes link each claim to its source. Some citations identify archived research reports that are no longer hosted on this site. A published reference means the content is available; it does not certify independent review or accuracy.Read the editorial policy and follow the sources before relying on a claim.
Structure and components
- SQL Interface schemas describe document structure, including polymorphism, sparse fields and nested data, and provide metadata for SQL-to-MongoDB translation. (high confidence) [source]
How it works
- Schemas reside in each database's reserved __sql_schemas collection; the mongosql CLI can read this collection when translating queries. (high confidence) [source]
- The broad no-sampling description has a view-specific exception: the CLI derives view schemas from pipelines and source schemas, but executes and samples view output when derivation is unavailable. (low confidence) [source]
- The default action is merge; overwrite replaces existing schemas, while clear removes the schema field. Unstable schemas require overwrite because merge leaves them unchanged. (low confidence) [source]
Problems, failure modes and limitations
- CLI-generated schemas and Atlas Data Federation schemas are separate and cannot be reused across those deployment paths. (low confidence) [source]
Comparisons and alternatives
Facts and statements
- Atlas dedicated clusters M10 and above use the MongoDB SQL Schema Builder CLI for schema management; the same CLI also serves self-managed Enterprise Advanced deployments. (high confidence) (verified as of 2026-09-29) [source]
- Schema refresh is user-initiated. Regenerate after data-shape changes; periodic refresh requires external scheduling such as cron. (low confidence) [source]
- Highly polymorphic collections can produce unstable schemas with capped fields and additionalProperties=true; default merge skips them, so refresh requires overwrite. (low confidence) [source]
- The binary is mongodb-schema-manager. Namespace include/exclude flags select work; dry-run checks those patterns without schema analysis or database writes. (low confidence) [source]
- Atlas dedicated-cluster generation requires SQL Interface enablement and read access to __mdb_internal_sqlinterface; schema writes additionally require find, insert and update on __sql_schemas. (medium confidence) (verified as of 2026-10-14) [source]
- CVE-2026-19502 concerns plaintext authentication settings in CLI diagnostic output. MongoDB lists versions 1.0.0 through versions below 1.2.1 as affected. (medium confidence) (verified as of 2026-08-12) [source]
- The July 9, 2026 changelog says CLI 1.2.1 redacts connection strings and passwords and fixes unchecked protocol-handler launch. (low confidence) (verified as of 2026-07-09) [source]
- MongoDB's security alerts separately identify unchecked OIDC endpoint schemes as CVE-2026-19503, affecting CLI 1.0.1 through versions below 1.2.1. (low confidence) (verified as of 2026-08-12) [source]
- The binary is mongodb-schema-manager. It writes one schema document per namespace to each database's __sql_schemas collection, which the documentation reserves for CLI management. (low confidence) [source]
- Highly polymorphic documents can yield unstable schemas with capped field capture and additionalProperties=true; those schemas may incompletely represent their namespace. (low confidence) [source]
- Namespace include and exclude flags accept glob patterns, exclusion wins, and --dry-run checks namespace selection without analyzing schemas or writing to the database. (low confidence) [source]
- The CLI needs read access to processed databases plus find, insert and update on __sql_schemas; dedicated-cluster use additionally needs read access to __mdb_internal_sqlinterface. (low confidence) [source]
- MongoDB's security alerts identify CVE-2026-19502 as plaintext diagnostic disclosure affecting Schema Builder CLI versions from 1.0.0 before 1.2.1. MongoDB's July 9, 2026 changelog records credential redaction in 1.2.1, and CERT-In also lists pre-1.2.1 versions as affected. (high confidence) (verified as of 2026-08-17) [source]
- MongoDB's security alerts assign the OIDC endpoint-validation defect to CVE-2026-19503 and list Schema Builder CLI versions from 1.0.1 before 1.2.1 as affected. The changelog instead groups the protocol-handler and credential-redaction fixes under CVE-2026-19502, so the CVE attribution needs care. (high confidence) (verified as of 2026-08-12) [source]
Children
- No children recorded.