Loading
PostgreSQL (hardened, Read Only)
Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
接入你的智能体
添加此服务器
The publisher's own command. Not a PlugMCP endpoint.
Local command
npx -y [email protected]
Credentials from the publisher
- DATABASE_URL — Connection string for the role the server connects as. Use a role that cannot write — the server refuses writes twice, but a read-only role is the layer that does not depend on us being correct. `--print-setup-sql` prints the SQL that creates one.
- MCP_STATEMENT_TIMEOUT — Server-side statement timeout, e.g. `5s`. A question that would pin the database is cancelled by PostgreSQL, not by hope.
- MCP_ALLOW_TABLES — Comma-separated allowlist. A table off the list is refused by name, and hiding it inside a CTE, a view or a join does not help.
- MCP_AUDIT_LOG — Path to the tamper-evident audit log. Entries are chained by hash and survive a restart; `--verify-audit` checks the chain against an off-host anchor.
Provider
Claude Code
DATABASE_URL=<secret> MCP_STATEMENT_TIMEOUT=<value> MCP_ALLOW_TABLES=<value> MCP_AUDIT_LOG=<value> claude mcp add io.github.eszetael-postgres-mcp-hardened -- npx -y [email protected]
Run in a terminal.
Claude Desktop
{
"mcpServers": {
"io.github.eszetael-postgres-mcp-hardened": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"DATABASE_URL": "<secret>",
"MCP_STATEMENT_TIMEOUT": "<value>",
"MCP_ALLOW_TABLES": "<value>",
"MCP_AUDIT_LOG": "<value>"
}
}
}
}claude_desktop_config.json
Remote URL or a command on your machine? How the two installs differ
Related MCP
View more- Firecrawl🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.
- NNotionToken-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
- Context7Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
Related skills
View all- reaReverse engineer anything with agents, from app behavior down to native binaries.
- rea-changelog-updatePrepare or rewrite REA release changelogs and GitHub release notes from pinned Git history, with verified contributor thanks and Release Please synchronization.
- rea-tool-designDesign or change REA investigation tools, CLI/MCP contracts, provider capabilities, and Evidence semantics.
Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
README is not crawled yet. Open the repository
- How do I install PostgreSQL (hardened, Read Only)?
- Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.
- Does PostgreSQL (hardened, Read Only) need an API key?
- The publisher lists these environment variables: DATABASE_URL, MCP_STATEMENT_TIMEOUT, MCP_ALLOW_TABLES, MCP_AUDIT_LOG, MCP_ADDR.
- What transport does PostgreSQL (hardened, Read Only) use?
- PostgreSQL (hardened, Read Only) runs locally over stdio.
- When was PostgreSQL (hardened, Read Only) last checked?
- Last checked 2026-10-16. Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
No tool list yet. Remote servers get one after the first health check.