postgres-mcp-server

A read-only MCP server for PostgreSQL databases, built with .NET 10 and the official ModelContextProtocol C# SDK.

Connect any MCP-compatible AI agent to your PostgreSQL server and let it explore databases, schemas, tables, and run read-only queries — all through natural language.

Features

• Connect to any PostgreSQL server (host, port, username, password)

• List all databases on the server

• List schemas within a database

• List tables within a schema

• Describe table structure: columns, types, nullability, primary keys, foreign keys

• Execute read-only SELECT queries with output truncation

• Rejects non-SELECT statements and forbidden keywords (INSERT, UPDATE, DELETE, DROP, etc.)

• Lightweight Docker container — no persistent state, no configuration files

• Compatible with Claude Desktop, Claude Code, Cursor, Windsurf, and any MCP-compatible client

Related MCP server: mcp-db-server

Quick Start

git clone https://github.com/GuerthCastro/postgres-mcp-server.git
cd postgres-mcp-server
docker compose up -d

The server starts on port 3100 by default and exposes the MCP endpoint at /mcp.

MCP Tools

Configuration

No configuration is required at the container level. The connection is established at runtime via the Connect tool and held in memory for the lifetime of the process.

To change the exposed port, edit docker-compose.yml:

services:
  postgres-mcp:
    build: .
    ports:
      - "YOUR_PORT:80"
    restart: unless-stopped

Client Setup

Claude Desktop

Add the following to your claude_desktop_config.json:

{
  "mcpServers": {
    "postgresqlServer": {
      "url": "http://localhost:3100/mcp"
    }
  }
}

Claude Code

claude mcp add postgresqlServer http://localhost:3100/mcp

Generic MCP Client

Point your client to the SSE or HTTP endpoint:

http://localhost:3100/mcp

Example Conversation

You: Connect to my database at 192.168.1.10, user postgres, password secret

Claude: Connected to PostgreSQL 16.2 at 192.168.1.10:5432

You: What databases are available?

Claude: Found 3 databases:
- myapp
- analytics
- postgres

You: Show me the schemas in myapp

Claude: Found 2 schemas in myapp:
- audit
- public

You: List the tables in public

Claude: Found 4 tables in public:
- orders
- products
- users
- categories

You: Describe the users table

Claude: Table: public.users
--------------------------------------------------------------------------------
Column                         Type                 Nullable   PK    FK    References
--------------------------------------------------------------------------------
id                             bigint               NO         YES   NO
email                          character varying    NO         NO    NO
name                           character varying    YES        NO    NO
role_id                        integer              YES        NO    YES   roles.id
created_at                     timestamp with...    NO         NO    NO

You: How many users were created in the last 30 days?

Claude: SELECT COUNT(*) FROM users WHERE created_at >= NOW() - INTERVAL '30 days'

 count
--------
 142

1 row(s) returned.

Security

• Read-only by design. Only SELECT queries are accepted. Any statement containing INSERT, UPDATE, DELETE, DROP, TRUNCATE, ALTER, CREATE, GRANT, or REVOKE is rejected before reaching the database.

• No credentials stored. Connection parameters are held in memory only for the lifetime of the running process and are never written to disk or logs.

• Output is bounded. Query results are truncated at 50,000 characters to prevent unbounded memory usage.

• Local network recommended. Deploy on your internal network. Do not expose the container port to the public internet without additional authentication (e.g., a reverse proxy with TLS and auth).

Requirements

• Docker (for container deployment)

• Any MCP-compatible client (Claude Desktop, Claude Code, Cursor, Windsurf, etc.)

• A running PostgreSQL server accessible from the container

Building from source

• .NET 10 SDK

cd Mcp.PostgreSQL
dotnet run

The server starts on http://localhost:5000 by default when running locally.

Architecture

postgres-mcp-server/
└── Mcp.PostgreSQL/
    ├── Configuration/
    │   └── ServerConfiguration.cs   # Immutable record holding connection parameters
    ├── Services/
    │   ├── DatabaseService.cs       # Singleton managing the active connection config
    │   └── PostgreSQLQueries.cs     # SQL constants and security policy
    ├── Tools/
    │   ├── ConnectTool.cs           # MCP tool: connect
    │   ├── ListDatabasesTool.cs     # MCP tool: listDatabases
    │   ├── ListSchemasTool.cs       # MCP tool: listSchemas
    │   ├── ListTablesTool.cs        # MCP tool: listTables
    │   ├── DescribeTableTool.cs     # MCP tool: describeTable
    │   └── ExecuteQueryTool.cs      # MCP tool: executeQuery
    └── Program.cs                   # ASP.NET Core bootstrap

The DatabaseService is registered as a singleton so all MCP tool invocations within a session share the same connection configuration. The server uses ModelContextProtocol.AspNetCore with HTTP transport.

Stack

Contributing

Contributions are welcome. Please read CONTRIBUTING.md before submitting a pull request.

Changelog

See CHANGELOG.md for a history of changes.

License

This project is licensed under the MIT License.

Built by Guerth Castro