PostgreSQL (hardened, read-only)

MCP server · by Eszetael

Databases npmDocker v0.1.10

Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.

View source ↗ Website ↗ Generate config for multiple servers More servers

Install

Pin version registry version 0.1.10

npm
npx -y postgres-mcp-hardened

npm
npx -y postgres-mcp-hardened@0.1.10

Docker
docker run -i --rm ghcr.io/eszetael/postgres-mcp-hardened:0.1.10

Setup by client

Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.

claude_desktop_config.json

{
  "mcpServers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

{
  "mcpServers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened@0.1.10"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

Format verified against the official Claude Desktop docs ↗.

terminal

claude mcp add --env DATABASE_URL=<YOUR_DATABASE_URL> postgres-mcp-hardened -- npx -y postgres-mcp-hardened

claude mcp add --env DATABASE_URL=<YOUR_DATABASE_URL> postgres-mcp-hardened -- npx -y postgres-mcp-hardened@0.1.10

Format verified against the official Claude Code docs ↗.

.cursor/mcp.json

{
  "mcpServers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

{
  "mcpServers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened@0.1.10"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

Format verified against the official Cursor docs ↗.

.vscode/mcp.json

{
  "servers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

{
  "servers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened@0.1.10"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

Format verified against the official VS Code docs ↗.

mcp_config.json

{
  "mcpServers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

{
  "mcpServers": {
    "postgres-mcp-hardened": {
      "command": "npx",
      "args": [
        "-y",
        "postgres-mcp-hardened@0.1.10"
      ],
      "env": {
        "DATABASE_URL": "<YOUR_DATABASE_URL>"
      }
    }
  }
}

Format verified against the official Windsurf docs ↗.

Environment variables

Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.

DATABASE_URL required secret — Connection string for the role the server connects as. Use a role that cannot write — the server refuses writes twice, but a read-only role is the layer that does not depend on us being correct. `--print-setup-sql` print
MCP_STATEMENT_TIMEOUT — Server-side statement timeout, e.g. `5s`. A question that would pin the database is cancelled by PostgreSQL, not by hope.
MCP_ALLOW_TABLES — Comma-separated allowlist. A table off the list is refused by name, and hiding it inside a CTE, a view or a join does not help.
MCP_AUDIT_LOG — Path to the tamper-evident audit log. Entries are chained by hash and survive a restart; `--verify-audit` checks the chain against an off-host anchor.
MCP_ADDR — Address to bind, default 127.0.0.1:8080.

GitHub

⭐ 3 stars · 最近更新于 18 天前 · MIT license

About this server

postgres mcp hardened 🚧 Version 0.1.10 — the rest of an outside review, and a fix that was too blunt Published: binaries for five platforms with checksums, Sigstore signatures and build provenance; .mcpb bundles for one click install; an image on ghcr.io for amd64 and arm64; a package on npm; and a…

Summary from the project README — github.com/Eszetael/postgres-mcp-hardened

Distributed as npm, Docker, listed under Databases. Review our MCP security guide before granting access to real data.

Frequently asked questions

What does the PostgreSQL (hardened, read-only) MCP server do?

How do I install PostgreSQL (hardened, read-only)?

Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.

Is PostgreSQL (hardened, read-only) free to use?

The MCP server itself is free to install. The source is public on https://github.com/Eszetael/postgres-mcp-hardened. Any third-party service it calls may require its own API key and account.

Which clients support PostgreSQL (hardened, read-only)?

Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.

Add this badge

Publish this server? Link back with a badge on your README or site — copy either snippet.

Markdown

[![Listed on MCPNav](https://mcpnav.net/badge/postgres-mcp-hardened.svg)](https://mcpnav.net/server/postgres-mcp-hardened/)

HTML

<a href="https://mcpnav.net/server/postgres-mcp-hardened/"><img src="https://mcpnav.net/badge/postgres-mcp-hardened.svg" alt="Listed on MCPNav" height="20"></a>