Skip to main content
Glama
113,084 servers. Updated
20 Best PostgreSQL MCP Servers: compared and ranked, October 2026Ranked from 1,524 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that enables AI agents to securely interact with PostgreSQL databases with least-privilege scopes, PII masking, and human approval for writes.
    4
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    A drop-in Model Context Protocol (MCP) server that lets an AI agent query PostgreSQL — read-only, enforced at the database level, with real SQL validation, timeouts, cost limits, OAuth 2.1, and an audit trail.
    10
    3
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Orchestrates multiple AWS security services to provide comprehensive security assessments, threat analysis, and multi-framework compliance monitoring. It enables users to perform automated remediation recommendations and incident investigations through a unified Model Context Protocol interface.
    3
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables connecting Postgres databases to MCP clients with built-in query and inspection tools, custom parametrized SQL tools, scoped API keys, group permissions, and audit logging.
    6
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Lets MCP clients such as Claude ask questions of live Postgres data and build dashboards through a connection that cannot write, running single read-only statements that are always rolled back. Access is gated by Google sign-in and an email allowlist, so only the accounts you choose can query the databases you bind.
    10 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables Claude to query and safely write to a Postgres database, driven entirely by one policy file with read-only access by default, column-precise PII masking, and an append-only audit log. SQL is parsed and validated before execution, writes use parameterized queries with dry-run/confirm and transactions, and every call is rate-limited and audited so destructive or exfiltrating requests are refused.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI clients to safely inspect and query PostgreSQL databases in read-only mode through MCP, with single-statement SQL execution, table listing, table description, and schema resources.
    248 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to query a Postgres database read-only through a policy layer rather than a raw connection string. Enforces table and column allowlists, row limits, mandatory predicates, PII masking and append-only audit logging, while refusing writes, joins, subqueries and unlisted functions.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables AI assistants to explore and query PostgreSQL or SQLite databases read-only, with SQL allow-listing, automatic row limits, statement timeouts, column masking, per-tool rate limits and JSONL audit logging.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to safely query PostgreSQL by intercepting and auditing every generated SQL statement before it reaches the database, blocking destructive commands like DROP/TRUNCATE, unbounded DELETE/UPDATE statements, stacked queries, and SQL injection probes. It exposes tools for validating query safety and enforcing a strict read-only (SELECT/EXPLAIN) policy.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    A secure MCP server that enables querying PostgreSQL databases through an SSH tunnel with enforced read-only access, connection pooling, and comprehensive data exploration tools.
    ISC
  • A
    license
    Not graded
    quality
    C
    maintenance
    A read-only MCP server for PostgreSQL that serves multiple databases from one process, enforcing read-only access via PostgreSQL grants rather than SQL string matching, and supports both local stdio and remote HTTP transports.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables chatting with PostgreSQL databases through secure GitHub OAuth authentication, supporting read operations for all users and write operations for privileged users. Deployable as a production-ready remote MCP server on Cloudflare Workers with automatic schema discovery and SQL injection protection.
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables Claude and other MCP clients to safely query PostgreSQL data and perform limited order-status updates through scoped bearer tokens, read-only transactions, row caps, and an audit log.
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    A PostgreSQL MCP server that automatically detects and obfuscates personally identifiable information (PII) in query results using column-name heuristics and NLP analysis. It enables AI agents to interact securely with databases by masking sensitive data by default while allowing selective unmasking under user control.
    4
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    MCP server that provides secure PostgreSQL access with LIME agent identity verification, whitelist-based authorization, and audit events.
    -