I
io.github.Eszetael/postgres-mcp-hardened
postgres-mcp-hardened
Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
No known CVEs
MIT license
Actively maintained
Last commit 4d ago
Works with most clients
Transport: stdio, http
11 tools · ~389 tok
Grade A · 0.2% of 200K ctx
MCPpedia last refreshed this data
io.github.Eszetael/postgres-mcp-hardened is an MCP server that read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction. Its tool list has not been published yet over stdio and http, requires no API key, and scores 89/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"postgres": {
"env": {
"DATABASE_URL": "postgres://readonly_user:YOUR_PASSWORD@localhost:5432/mydb"
},
"args": [
"--stdio"
],
"command": "postgres-mcp-hardened"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/io-github-eszetael-postgres-mcp-hardened)
Read me
What io.github.Eszetael/postgres-mcp-hardened does
The official Postgres MCP server was deprecated in 2024 and still gets ~440k downloads a month. Its entire defence is one database-level read-only transaction — and that alone does not stop every write. This is a maintained Rust replacement with defence in depth.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y 'postgres-mcp-hardened' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
89/100across 5 weighted dimensions
0255075100
30
14
20
15
10
−11
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.devNo known CVEs.
Checked postgres-mcp-hardened against OSV.dev.
Inventory
Tools (11)
Click any tool to inspect its schema.
~389 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is io.github.Eszetael/postgres-mcp-hardened safe to use?
- io.github.Eszetael/postgres-mcp-hardened has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install io.github.Eszetael/postgres-mcp-hardened?
- io.github.Eszetael/postgres-mcp-hardened supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can io.github.Eszetael/postgres-mcp-hardened do?
- io.github.Eszetael/postgres-mcp-hardened provides 11 tools: summary, EXPLAIN, Why, Install, Testing and 6 more. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with io.github.Eszetael/postgres-mcp-hardened?
- io.github.Eszetael/postgres-mcp-hardened is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
- Is io.github.Eszetael/postgres-mcp-hardened actively maintained?
- io.github.Eszetael/postgres-mcp-hardened is actively maintained — last commit was 4 days ago. It has 1 GitHub stars.
Related
Similar servers
Others in data / finance
Supabase MCP Server96Manage Supabase projects — databases, auth, storage, and edge functions
2.9k 4
Dbhub96Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.
3.4k 2
Firecrawl Mcp Server95🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.
7.3k 4
Mcp Server Typescript95DataForSEO API modelcontextprotocol server
242 9
MCP Security Weekly
Get CVE alerts and security updates for io.github.Eszetael/postgres-mcp-hardened and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.