广告合作
MCP.so
登录

MCP PostgreSQL Server

@antonorlov

代码仓库主页文档

基本信息

分类

数据库

许可证

MIT

传输方式

stdio

作者

antonorlov

提交者

Anton

关于 MCP PostgreSQL Server

MCP PostgreSQL Server

#postgres#postgresql#database#sql#mcp-server#ssh-tunnel

MCP PostgreSQL Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "postgres": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "mcp-postgres-server"
      ],
      "env": {
        "DATABASE_URL": "postgres://user:password@localhost:5432/mydb",
        "PG_ALLOW_WRITE": "false"
      }
    }
  }
}

MCP PostgreSQL Server 工具

5

Run one read-only SQL statement against the connected PostgreSQL database and get rows back as JSON. Send exactly one statement per call (SELECT, WITH, EXPLAIN, or SHOW). It runs inside an engine-enforced read-only transaction, so any write is refused by the database. Use this tool for all data reading, aggregation, and query planning. Returns {rows, rowCount, returnedRows, truncated}, plus hint when truncated is true. Prefer $1, $2 placeholders with the params array over interpolating values. Results are capped at ~32768 bytes; truncated:true means rows were dropped - add LIMIT/WHERE or select fewer columns.

Run a data-modifying SQL statement (INSERT/UPDATE/DELETE or DDL). Currently DISABLED: the server is read-only, so this returns an error and changes nothing. To enable writes, the operator must start the server with PG_ALLOW_WRITE=true.

List every schema in the connected database. Start here when exploring an unfamiliar database, then call list_tables for the schema you care about. Returns {schemas: [name, ...]}.

List all tables in a schema (default: 'public'). Use this before querying tables you have not seen yet, then call describe_table for column details. Returns {tables: [name, ...]}.

Show the structure of one table: column names, data types, nullability, defaults, and primary-key membership. Call this before writing non-trivial queries against a table. Returns {columns: [{column, type, nullable, default, is_primary_key}, ...]}.

概览

What is MCP PostgreSQL Server?

An MCP server that connects an AI agent to a PostgreSQL database over stdio. It reaches local and Docker databases, managed Postgres on RDS, Neon and Supabase, and a database that is only available through an SSH bastion. Writes are off by default.

How to use MCP PostgreSQL Server?

Run it with npx -y mcp-postgres-server and point it at a database with a single DATABASE_URL. It works in any MCP client that speaks stdio: VS Code, Cursor, Claude Code, Codex, Windsurf. Set PG_ALLOW_WRITE=true when the agent should be able to write.

Key features of MCP PostgreSQL Server

  • Read-only by default, enforced by PostgreSQL itself with a rolled back BEGIN READ ONLY transaction, not by client-side SQL parsing
  • SSH tunneling to a bastion, using the local port forwarding that PostgreSQL's own documentation describes, with mandatory host-key pinning
  • DATABASE_URL with full TLS control: sslmode from disable to verify-full, custom CA
  • Prepared-statement parameters $1, $2, bound by the driver, never spliced into SQL text
  • Result byte budget with an explicit truncated flag
  • Errors returned as readable tool results with a code and a hint
  • Four runtime dependencies, MIT

Use cases of MCP PostgreSQL Server

  • Letting an agent read a real schema instead of guessing it
  • Ad-hoc analysis over a replica or a snapshot
  • Reaching a database that is not routable from the laptop, through an SSH jump host
  • Inspecting rows and constraints while debugging a failing test

常见问题

1

Can it write to my database?

Only when you set `PG_ALLOW_WRITE=true`. With the default off, the `execute` tool is visible but refuses, and every read runs inside a read-only transaction that PostgreSQL rolls back.

2

What parameter placeholder styles are supported?

PostgreSQL-style `$1`, `$2` only. The legacy `?` style was removed in 0.2.0.

3

Does it work through an SSH bastion?

Yes. Set `PG_SSH_HOST` plus auth and a pinned `PG_SSH_FINGERPRINT`. Host-key verification is mandatory and the tunnel refuses to connect without it.

评论

数据库 分类下的更多 MCP 服务器

Database Gateway

centralmind

Universal MCP-Server for your Databases optimized for LLMs and AI-Agents.

531

Dbhub

bytebase

Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.

3.1K

Chroma MCP Server

chroma-core

A Model Context Protocol (MCP) server implementation that provides database capabilities for Chroma

569

Sqlite

modelcontextprotocol

Model Context Protocol Servers

88.1K

NPILayer

NPILayer

Healthcare provider data for AI assistants, from the official CMS NPPES dataset (updated weekly). Look up any NPI (active or deactivated), search providers and organizations by name, city, state, ZIP, taxonomy code or pl

广告合作