One-install MongoDB Atlas Admin API v2 front door over 8 bounded capability packs and 31 non-chat, uncached, read-only workflows. It admits all 429 nondeprecated operations across 306 official paths and excludes exactly 58 provider-deprecated operations. Organizations, projects, users, billing, credentials, identity, clusters, networking, backups, observability, Search, Data Federation, and Streams are covered. The mutable official OpenAPI URL must retain 4,590,007 bytes and SHA-256 5040b0d3973e891f9e9048f6c305ed54977d0d69153ad073b232a39d90a50c77 before regeneration. Calls stay on cloud.mongodb.com and carry the exact per-resource versioned media types. The supported credential path is MongoDB's recommended OAuth2 service-account bearer token; Atlas documents a one-hour token lifetime, this pack does not claim automatic token exchange, and legacy HTTP Digest API keys are unsupported. Seventy-one exact page-number collections are automatic; one correlated multi-array response remains explicitly manual. Six non-JSON downloads become private file_refs. Six validation, verification, report, or download POSTs are read-tier; disruptive restores, resets, cutovers, migrations, access removals, and infrastructure reconfiguration are destructive. JSON bodies remain verbatim and unsafe response integers remain exact strings. Reads are uncached and not approval-gated; every mutation requires approval. No task, note, or user-work project Source is claimed for infrastructure tenancy containers.