Skip to main content
Glama
117,987 servers. Updated
20 Best PostgreSQL MCP Servers: compared and ranked, November 2026Ranked from 1,584 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"A guide to PostgreSQL architecture and internals" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.
    Apache 2.0
  • F
    license
    Not graded
    quality
    C
    maintenance
    This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.
    12
    476 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A stateless remote MCP server that lets AI agents anonymously submit encrypted reports of alignment and safety failures to leaks.md (what others did) and confession.md (what the agent itself did), returning a receipt without accounts or keys. It exposes public tools such as submit_leak and submit_confession over Streamable HTTP.
    MIT
  • F
    license
    A
    quality
    A
    maintenance
    An MCP server that sends plain-text Gmail messages only to a predefined allowlist, using generated recipient IDs instead of email addresses to enforce security.
    2
    1
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables authenticated, role-scoped MCP clients to read the caller's synthetic employee profile and support requests, with Operator-only creation of support requests. Access is enforced through Entra roles, fixed parameterised SQL, row-level security, and private PostgreSQL connectivity without arbitrary SQL exposure.
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to safely execute privileged commands by routing them to a human approver, who runs them outside the agent's context and returns the output to the model.
    5
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for PostgreSQL with typed tools (list, describe, read, aggregate, insert, update, delete), catalog SQL served as named tools, and free SQL that runs under the grants of each login. Each caller is limited to its own tools, databases and tables, and start checks refuse unsafe setups, such as a superuser login with free SQL on. Serves stdio and Streamable HTTP. Written in Go, Apache-2.0
    12
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides agent certification and trust verification tools for AI agents, enabling certification checks, trust score calculations, audit ticket issuance, and emergency kill switch activation through the A-SOC trust network.
    1 npm
    1
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to securely reach enterprise tools and other agents through a governed gateway with pinned tool definitions, delegated authorization, content inspection, human approval, and signed audit trails.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables authenticated MCP clients to list, read, prepare, and create support tickets through the existing HTTP API, with OAuth verification, company isolation, and safe write retries.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A secure MCP server that enables querying PostgreSQL databases through an SSH tunnel with enforced read-only access, connection pooling, and comprehensive data exploration tools.
    ISC
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables named, authenticated callers to run read-only introspection of a Google Cloud project and to read and write per-tenant notes that stay isolated between callers. Every request is scope-checked against a reviewed policy, rate-limited per caller, and audited without ever logging argument values.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables chatting with PostgreSQL databases through secure GitHub OAuth authentication, supporting read operations for all users and write operations for privileged users. Deployable as a production-ready remote MCP server on Cloudflare Workers with automatic schema discovery and SQL injection protection.
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.
    4
    1
    BSD 3-Clause
  • A
    license
    C
    quality
    D
    maintenance
    Implements a secure MCP server with API Key and JWT authentication, providing tools like echo, login, secure_action, and admin_action. Includes MCP Inspector integration for testing and debugging.
    1
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to triage SOC alerts while enforcing a trust firewall across retrieval, memory, and privileged actions. It exposes tools for alerts, logs, memory, and alert actions, with defenses that refuse risky operations in the presence of attacker-controllable content.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to discover and invoke backend tools over MCP JSON-RPC while enforcing 3-legged OAuth 2.0 identity propagation, role-based access control, and protocol transcoding to REST APIs.
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to read and report, and to carry human-authored updates into systems of record after human consent, while structurally preventing autonomous writes of commitments like owners, due dates, or statuses.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables executing arbitrary Joern/CPGQL queries against a loaded Code Property Graph, loading source code in multiple languages (PHP, Java, JavaScript, Python, C/C++) to build new CPGs, and inspecting loaded projects and the active workspace. It communicates with a running Joern server over its synchronous HTTP query endpoint, so no state polling is required.
    GPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables enterprise MCP clients and partner agents to execute tenant-isolated underwriting, claims, and compliance workflows with durable step checkpointing, evidence-grounded tool calls, and deterministic PDF citation receipts. It supports A2A task dispatch and MCP JSON-RPC operations while blocking cross-tenant access and ungrounded deliverables.
    MIT