Custom HTTPS Endpoints (EOL)
Parent: MongoDB Atlas App Services · Published reference · snapshot 2026-10-24 · skill mongodb-cohort-a337172ad861
↓ Facts as markdownall context files
Source-anchored research for Custom HTTPS Endpoints (EOL). Run status: COMPLETED.
These notes link each claim to its source. Some citations identify archived research reports that are no longer hosted on this site. A published reference means the content is available; it does not certify independent review or accuracy.Read the editorial policy and follow the sources before relying on a claim.
Structure and components
- RESTHeart's maintainer presents it as an alternative HTTP service over MongoDB, with authentication, authorization and plugins for custom logic. This supplies an alternative execution layer, but the article does not establish automatic compatibility with arbitrary App Services function code. (low confidence) [source]
- A migration can keep MongoDB Atlas as the database while replacing the retired HTTP layer: AWS demonstrates this architecture, and RESTHeart's maintainer describes an API service over MongoDB. Endpoint EOL therefore does not itself require moving the stored database to another engine. (high confidence) [source]
- Migration should explicitly inventory route/method bindings, validation secrets and response serialization before implementing a replacement. This is an engineering inference from the historical endpoint schema and AWS's example, which implements authorization and ingestion as separate components. (medium confidence) [source]
Problems, failure modes and limitations
- MongoDB deprecated HTTPS Endpoints in September 2024 and scheduled their removal for September 30, 2025; its retained Admin API notice states that HTTPS Endpoints reached EOL on that date. (high confidence) [source]
Comparisons and alternatives
- The historical endpoint configuration accepted GET, POST, PUT, PATCH, DELETE or the wildcard *. A migration inventory should preserve each route's configured method rather than assume every endpoint was POST-only. (low confidence) [source]
- A retained Get an endpoint reference is marked Deprecated. Its presence should be treated as migration documentation rather than evidence that custom HTTPS endpoint execution remains supported after EOL. (high confidence) [source]
Facts and statements
- Historically, a custom endpoint configuration bound a route and HTTP method to a function_id. The documented method choices were GET, POST, PUT, PATCH, DELETE, or the wildcard *. (high confidence) [source]
- MongoDB's current Admin API notice states that HTTPS Endpoints reached end of life on September 30, 2025. SoftInstigate's earlier announcement identified the same removal date. The retained endpoint reference should not be interpreted as proof of continued service availability. (high confidence) (verified as of 2026-10-23) [source]
- Historical endpoint validation modes were NO_VALIDATION, SECRET_AS_QUERY_PARAM and VERIFY_PAYLOAD. The latter two referred to a secret_id; return_type selected JSON or EJSON. These fields identify request-validation and serialization behavior to reproduce in a replacement. (low confidence) [source]
- AWS's September 2025 revision describes replacing MongoDB HTTPS endpoints with Amazon API Gateway and AWS Lambda while continuing to write to MongoDB Atlas. In that Firehose-specific example, a custom Lambda authorizer validates incoming requests before an ingestion Lambda decodes and writes their data. (low confidence) [source]
- MetaDesign's January 15, 2025 guide recommends recreating HTTPS endpoints with Atlas Functions as a direct replacement. This conflicts with MongoDB's later notice that HTTPS Endpoints themselves reached EOL; treat that recommendation as unsuitable evidence of a supported post-EOL HTTP deployment path. (medium confidence) [source]
- The historical endpoint schema supported NO_VALIDATION, SECRET_AS_QUERY_PARAM and VERIFY_PAYLOAD. In either secret-based mode, secret_id identified the secret authorizing requests. (low confidence) [source]
- The historical return_type field selected JSON or EJSON; configuration also exposed respond_result, disabled, fetch_custom_user_data and create_user_on_auth. (low confidence) [source]
- Supabase's March 20, 2025 migration guide acknowledges HTTPS Endpoints EOL, but its worked migration exports MongoDB data into PostgreSQL and changes calls to generated PostgREST APIs. Inference: its near-drop-in marketing claim for a generated CRUD interface does not demonstrate compatibility with arbitrary custom endpoint functions. (medium confidence) [source]
Children
- Endpoint request-contract inventory (frontier)
- Webhook migration to API Gateway and Lambda (frontier)
- RESTHeart custom logic plugins (frontier)
Frontier under this node: Endpoint request-contract inventory, RESTHeart custom logic plugins, Webhook migration to API Gateway and Lambda