PG Airman MCP
by edb-korea
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| OPENAI_API_KEY | No | OpenAI API key for experimental LLM-based index tuning | |
| AIRMAN_MCP_PURPOSE | No | Static purpose label for governance logging | |
| AIRMAN_MCP_TRACING | No | Enable session token tracing via application_name | false |
| AIRMAN_MCP_SSE_HOST | No | SSE server host | localhost |
| AIRMAN_MCP_SSE_PORT | No | SSE server port | 8000 |
| AIRMAN_MCP_AUTH_TYPE | No | Authentication type: introspection or jwt | introspection |
| AIRMAN_MCP_TRANSPORT | No | MCP transport: stdio, sse, or streamable-http | stdio |
| AIRMAN_MCP_JWT_ISSUER | No | Expected JWT iss claim (required for JWT mode) | |
| AIRMAN_MCP_SERVER_URL | No | This server's URL (required for stdio with auth) | |
| AIRMAN_MCP_ACCESS_MODE | No | SQL access mode: unrestricted or restricted | unrestricted |
| AIRMAN_MCP_AUTH_ENABLED | No | Enable OAuth authentication | false |
| AIRMAN_MCP_DATABASE_URL | Yes | PostgreSQL connection URL (required) | |
| AIRMAN_MCP_JWT_AUDIENCE | No | Expected JWT aud claim | {server URL} |
| AIRMAN_MCP_JWT_JWKS_URL | No | JWKS endpoint URL | {auth-server-url}/.well-known/jwks.json |
| AIRMAN_MCP_ALLOWED_HOSTS | No | Comma-separated allowed Host header values | |
| AIRMAN_MCP_JWT_ALGORITHMS | No | Comma-separated signing algorithms | RS256 |
| AIRMAN_MCP_JWT_CLOCK_SKEW | No | Clock skew tolerance in seconds | 30 |
| AIRMAN_MCP_ALLOWED_ORIGINS | No | Comma-separated allowed Origin header values | |
| AIRMAN_MCP_AUTH_SERVER_URL | No | Authorization server base URL | http://localhost:9000 |
| ALLOW_COMMENT_IN_RESTRICTED | No | Allow COMMENT ON writes in restricted mode | true |
| AIRMAN_MCP_JWT_JWKS_CACHE_TTL | No | JWKS cache TTL in seconds | 300 |
| AIRMAN_MCP_AUTH_REQUIRED_SCOPES | No | Comma-separated required OAuth scopes | mcp:postgres:access |
| AIRMAN_MCP_STREAMABLE_HTTP_HOST | No | Streamable HTTP server host | localhost |
| AIRMAN_MCP_STREAMABLE_HTTP_PORT | No | Streamable HTTP server port | 8001 |
| ALLOW_ALIAS_WRITE_IN_RESTRICTED | No | Allow semantic alias create/delete in restricted mode | false |
| AIRMAN_MCP_AUTH_VALIDATE_RESOURCE | No | Enable RFC 8707 resource validation | false |
| AIRMAN_MCP_DNS_REBINDING_PROTECTION | No | Enable DNS rebinding protection | false |
| AIRMAN_MCP_AUTH_INTROSPECTION_ENDPOINT | No | Token introspection endpoint URL | {auth-server-url}/introspect |
| AIRMAN_MCP_AUTH_INTROSPECTION_CLIENT_ID | No | Client ID for introspection endpoint auth | |
| AIRMAN_MCP_AUTH_INTROSPECTION_CLIENT_SECRET | No | Client secret for introspection endpoint auth |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues