PostgreSQL MCP server

by antonorlov·io.github.antonorlov/mcp-postgres-server·v0.3.1

No reviews yet

MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.

B83/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B83/100

full report

Adoption

Established

22 stars2.9k downloads/wk

Reviews

Write one

Nobody has reviewed PostgreSQL yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

PostgreSQL tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings

Code scan4 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 3 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

Runs npx -y mcp-postgres-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-postgres-server -- npx -y mcp-postgres-server

Add to Cursor

PostgreSQL: common questions

Is PostgreSQL MCP server safe?: Mostly: it is graded B (83/100). Read the PostgreSQL safety report
How do I install PostgreSQL?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does PostgreSQL need an API key?: Yes. The registry entry asks for DATABASE_URL, PG_PASSWORD, PG_SSH_PASSPHRASE, PG_SSH_PASSWORD.
Is PostgreSQL maintained?: The last commit was 3 days ago (2026-09-16). The latest release is v0.3.1.
What can I use instead of PostgreSQL?: Servers from other publishers that do the same job: Dataset to Postgres, Supabase & MySQL (Database Push) MCP server, Neon MCP server and PostgreSQL MCP Server. Compare all PostgreSQL alternatives.

Alternatives to PostgreSQL

Same job from other publishers: the closest match first, then the best rated.

All PostgreSQL alternatives →

Dataset to Postgres, Supabase & MySQL (Database Push)
Push rows from a dataset, file or Google Sheet into a Postgres, Supabase, Neon or MySQL table.
not reviewed
New
C
Neon
Official Neon MCP server for managing Neon projects and Lakebase Postgres databases.
not reviewed
Established
A
PostgreSQL MCP Server
PostgreSQL MCP server - query, schema introspection, explain, and health checks for AI assistants
not reviewed
Growing
B
Postgres AIops
Governed PostgreSQL DBA ops: slow-query RCA, bloat/vacuum & blocking-lock analysis; 35 MCP tools.
not reviewed
New
A
Supabase
MCP server for interacting with the Supabase platform
not reviewed
Widely used
A

PostgreSQL vs Dataset to Postgres, Supabase & MySQL (Database Push)PostgreSQL vs Neon PostgreSQL vs PostgreSQL MCP Server

Run it through the gateway

Local package. It runs on your machine, not through the gateway.

Rating: —
Safety grade: B · 83/100
Stars: 22
Downloads/wk: 2.9k
Price: Free
Licence: MIT
Transport: Local · npm
Version: 0.3.1
Category: Databases
Last release: 2026-09-16

Credentials it needs

DATABASE_URLsecretFull connection string (preferred). Supports sslmode in the URL.
PG_HOSTDatabase host (fallback when DATABASE_URL is not set).
PG_PORTDatabase port.
PG_USERDatabase user.
PG_PASSWORDsecretDatabase password.
PG_DATABASEDatabase name.
PG_ALLOW_WRITEWhen true, execute performs writes and reads are sent directly. Off (default) is read-only: execute refuses writes and each read runs in a READ ONLY transaction.
PG_SSLMODETLS mode. require/allow/prefer encrypt without verifying the certificate; verify-ca/verify-full verify it (supply a CA via PG_SSL_CA). Unlike libpq, allow/prefer do not fall back to plaintext, so a server without TLS needs disable.
PG_SSL_CAPath to a CA certificate file. Setting it by itself implies verify-full.
PG_ENABLE_RUNTIME_CONNECTRegister the connect_db tool (runtime credential switching).
PG_MAX_RESULT_BYTESByte budget for a query result sent to the model. Whole rows are kept while they fit; over the budget returnedRows < rowCount and truncated is true.
PG_STATEMENT_TIMEOUTStatement timeout in milliseconds, applied to every session.
PG_CONNECT_TIMEOUTTimeout in milliseconds for a single connect attempt (raise it for slow links or SSH tunnels).
PG_SSH_HOSTSSH bastion host. Setting it enables tunneling: the server reaches the database only through an SSH tunnel to this host. Needs the ssh2 optional dependency.
PG_SSH_PORTSSH bastion port.
PG_SSH_USERSSH username.
PG_SSH_PRIVATE_KEYPath to a private key file. If unset, auth falls back like ssh: a running agent (SSH_AUTH_SOCK), then a default key (~/.ssh/id_ed25519, id_rsa, id_ecdsa).
PG_SSH_PASSPHRASEsecretPassphrase for the private key, if encrypted.
PG_SSH_AGENTtrue to use the ambient agent (SSH_AUTH_SOCK), or an explicit socket path / Windows named pipe.
PG_SSH_PASSWORDsecretSSH login password. Opt-in; a key or agent takes precedence. Prefer keys, a bastion often disables password auth.
PG_SSH_FINGERPRINTPinned host-key fingerprint (SHA256:...). Host-key verification is mandatory and set only this way: without it the tunnel refuses to connect. Get it with ssh-keygen -lF host.
PG_SSH_KEEPALIVE_INTERVALSSH keepalive interval in ms; the tunnel drops after 3 unanswered keepalives, and the next call reconnects.

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/antonorlov-mcp-postgres-server.svg)](https://mcp.market/server/antonorlov-mcp-postgres-server)

How the badge works