PostgreSQL

Official

REPOmodelcontextprotocol/server-postgresNPM@modelcontextprotocol/server-postgres

FRisk gradecritical blast radius

Last checked 22 days ago·seed·Watched hourly for changes

Auth postureNot probedno remote endpoint probed yet

Tools11 Read

Worst categoryReadgrade tracks the peak, not the average

Capability mix

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Tools 1

queryReadLow

Change history

No change history on record for this server. Watched servers surface a diff within the hour.

Recommended policy

Read-only toolsallow

The upstream implementation is archived but remains widely installed. The classifications and policies here still apply to deployed copies.

This record as markdown: /tools/postgres.md — append .md to any tool or server page.

// RUNNING THIS SERVER

DIRECT INSTALL npx -y @modelcontextprotocol/server-postgres

Installed this way, nothing enforces the recommended policy above — calls run exactly as the agent makes them.

// LOOK UP ANOTHER SERVER

Every MCP server has a record like this.

Type a name, get the same breakdown: verified identity, auth posture, risk grade, capabilities, recommended policy.

Teams ship this data inside their own products. See what a licence covers →