Skip to main content
Glama
116,965 servers. Updated
20 Best PostgreSQL MCP Servers: compared and ranked, November 2026Ranked from 1,584 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"PostgreSQL" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables authenticated, role-scoped MCP clients to read the caller's synthetic employee profile and support requests, with Operator-only creation of support requests. Access is enforced through Entra roles, fixed parameterised SQL, row-level security, and private PostgreSQL connectivity without arbitrary SQL exposure.
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for PostgreSQL with typed tools (list, describe, read, aggregate, insert, update, delete), catalog SQL served as named tools, and free SQL that runs under the grants of each login. Each caller is limited to its own tools, databases and tables, and start checks refuse unsafe setups, such as a superuser login with free SQL on. Serves stdio and Streamable HTTP. Written in Go, Apache-2.0
    12
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A secure MCP server that enables querying PostgreSQL databases through an SSH tunnel with enforced read-only access, connection pooling, and comprehensive data exploration tools.
    ISC
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables chatting with PostgreSQL databases through secure GitHub OAuth authentication, supporting read operations for all users and write operations for privileged users. Deployable as a production-ready remote MCP server on Cloudflare Workers with automatic schema discovery and SQL injection protection.
    1
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI agents to securely interact with PostgreSQL databases with least-privilege scopes, PII masking, and human approval for writes.
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A drop-in Model Context Protocol (MCP) server that lets an AI agent query PostgreSQL — read-only, enforced at the database level, with real SQL validation, timeouts, cost limits, OAuth 2.1, and an audit trail.
    10
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables read-only PostgreSQL interaction through safe query execution, query planning, table and column inspection, and privilege checks, with multi-layer defenses against write operations and transaction-control exploits.
    5
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Turn PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite or Snowflake into MCP tools and a REST API, with API keys and per-table role-based access.
    8
    169
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Audits PostgreSQL/Supabase schemas for security issues like missing RLS, permissive policies, and sensitive data exposure during AI conversations.
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to query PostgreSQL databases securely with read-only defaults, PII masking, rate limiting, and human-approved, expiring mutation tokens.
    9
    1
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for secure read-only PostgreSQL queries with automatic PII masking, pseudonymization, and strict SQL guards to enforce data privacy compliance.
    3
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI assistants to discover allowed PostgreSQL schemas, run parameterized SELECT queries, and inspect query plans safely through parser-checked read-only transactions, timeouts, row caps, and role-based access controls.
    4
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Query CVEs, yanked releases, known exploits, and upgrade paths for any PostgreSQL version directly from your AI assistant.
    8
    23 PyPI
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    A multi-database MCP server with OAuth 2.0 authentication and granular access control, enabling secure connections to multiple database types (SQLite, MySQL, PostgreSQL, MongoDB, Redis) with configurable read/write permissions and tool filtering.
    3
    102 npm
    13
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to inspect database schemas and run strictly read-only SQL queries with guardrails against destructive statements, multi-statement chaining, and unbounded scans. Supports SQLite natively and PostgreSQL optionally.
    4
    363 PyPI
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables Claude to answer questions from PostgreSQL databases using read-only SQL queries, with row caps, column masking, and an audit log while preventing data changes.
    3
    MIT
  • F
    license
    A
    quality
    C
    maintenance
    A small MCP server that lets an LLM query PostgreSQL, MySQL, MariaDB, SQL Server, or SQLite databases safely — read-only, role-restricted, and with sensitive data blacked out.
    4
    -
  • A
    license
    B
    quality
    C
    maintenance
    AI-powered bug bounty hunting platform that integrates security tools (OWASP ZAP, Caido, Burp Suite) for automated reconnaissance, vulnerability testing, JavaScript analysis, and finding management with PostgreSQL storage.
    47
    50
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides governed, read-only PostgreSQL access for AI agents via MCP. Enforces schema/table allowlists, query limits, and audit events.
    1
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI agents to safely operate on PostgreSQL data through typed MCP tools with per-identity RBAC, guardrails, and immutable audit logging.
    131 npm
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables LLM clients to read and modify MS-SQL, PostgreSQL, MySQL/MariaDB and SQLite databases through 38 MCP tools, with every table, view, function and procedure gated by explicit permission rules that deny by default. Ships with a desktop GUI for authoring rules, approving destructive operations and auditing what the model did.
    GPL 3.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables MCP clients to inspect and query PostgreSQL databases through per-endpoint bearer-token authentication, SQL guarding, and comprehensive audit logging, while a web UI manages connections, endpoints, roles, and audit records.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    A governed SQL gateway for untrusted AI agents, providing controlled access to PostgreSQL, MySQL, and OceanBase with RBAC, field ACLs, row policies, and cost controls.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A starter template for deploying a remote MCP server with OAuth 2.1 authorization, dynamic client registration, and a PostgreSQL database. Includes example tools for notes and whoami.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to query and inspect multiple self-hosted PostgreSQL projects through a single gateway using read-only credentials by default, with writes permitted only via a separately privileged role and explicit client confirmation. It blocks DDL, privilege changes, and multi-statement writes, and records structured audit events for every operation.
    27 npm
    1
    MIT