pg_role_list

What pg_role_list does on PostgreSQL MCP Server

AI agents call pg_role_list to retrieve information from PostgreSQL MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why pg_role_list is rated Low

This tool retrieves and displays existing PostgreSQL role information without modifying, deleting, or executing any operations. It is a read-only query operation with minimal blast radius—the worst outcome is unauthorized disclosure of role metadata, which is typically non-sensitive administrative information. Low severity reflects the informational nature of the output.

From the tool's definition Tool name 'pg_role_list' and description 'List PostgreSQL roles with attributes' indicate a query/retrieval operation with 'optional name filtering' for search purposes. No create, modify, delete, or execute capabilities mentioned.

Risk signalsAdmin/system-level operation

The rule that runs pg_role_list safely

PolicyLayer is an MCP gateway: it sits between your AI agents and PostgreSQL MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For pg_role_list, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "pg_role_list": {}
  }
}

Questions about pg_role_list