Skip to main content
Glama
seotarek

MCP Postgres Guard

by seotarek
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

MCP Postgres Guard 🐘🛡️

License: MIT Python 3.8+ MCP Protocol

A security-first Model Context Protocol (MCP) server for PostgreSQL: query auditing, destructive command interception, and SQL injection prevention for autonomous AI agents.

Developed by Tarek Mohamed (@seotarek)

📌 Why MCP Postgres Guard?

Allowing AI agents (Claude, Cursor, LangChain agents) direct SQL access creates severe operational risks: accidental table dropping, unbounded deletions, or SQL injection. MCP Postgres Guard intercepts and audits all agent-generated SQL queries before they reach your database:

[ AI Agent / Claude / Cursor ]
               │
               ▼
 ┌──────────────────────────────────────────────┐
 │           MCP Postgres Guard Server          │
 │  • Destructive Query Blocker (DROP/TRUNCATE) │
 │  • Unbounded DELETE/UPDATE Prevention        │
 │  • Stacked Query & RCE Probe Detection       │
 └──────────────────────┬───────────────────────┘
                        │ (Only If Verified Safe)
                        ▼
             [ Production Database ]

Related MCP server: Midplane

🛠️ MCP Tools

  • pg_validate_query: Validates whether a SQL statement is safe to execute for an autonomous agent.

  • pg_check_read_only: Enforces a strict read-only policy (SELECT / EXPLAIN only).

🚀 Claude Desktop Configuration

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "postgres-guard": {
      "command": "python",
      "args": ["-m", "mcp_postgres_guard.server"],
      "cwd": "/path/to/mcp-postgres-guard"
    }
  }
}

📜 License

Licensed under the MIT License.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • Postgres Scout MCP

    bluwork
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables AI assistants to safely explore, analyze, and maintain PostgreSQL databases with read-only mode by default, SQL injection prevention, query performance analysis, and optional write operations.
    37 npm
    Apache 2.0
  • Midplane by midplaneai

    Midplaneofficial

    midplaneai
    A
    license
    Not graded
    quality
    A
    maintenance
    SQL guardrails for AI agents, sitting between the agent and Postgres to enforce policies, block destructive queries, and audit all access.
    5
    MIT

  • Postgres MCP Pro

    sparta2025
    A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to analyze, optimize, and safely interact with PostgreSQL databases, including health checks, index recommendations, query planning, and SQL execution with read-only and production protection modes.
    15
    MIT

  • SQL Insights MCP Server

    divyankmalik
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to query Postgres databases read-only over the Model Context Protocol through three narrow tools, validating every statement as a single SELECT with an enforced row limit before it reaches the database. Guards against destructive statements, banned functions, system catalogs, and runaway queries via AST parsing plus a SELECT-only Postgres role.
    MIT