Atlas / MCP servers / henkdz / PostgreSQL

PostgreSQLCAUTION

Name: PostgreSQL
Author: henkdz

mcp/henkdz/postgresql-1

MCP server by henkdz · Audited 2026-10-06

⚑ Report / re-scan Source ↗

A Powerful PostgreSQL MCP server with 14 consolidated database management tools for AI assistants.

Verdict

CAUTION

Grade

Trust score

67 /100

Exposed tools

57 22r · 18w · 17d

Transport

stdio

License

AGPL-3.0

Stars

200

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://smithery.ai/server/@HenkDz/postgresql-mcp-server)

A Model Context Protocol (MCP) server that provides comprehensive PostgreSQL database management capabilities for AI assistants.

🚀 What's New: This server has been completely redesigned from 46 individual tools to 18 intelligent tools through consolidation (34→8 meta-tools) and enhancement (+4 new tools), providing better AI discovery while adding powerful data manipulation and comment management capabilities.

Breaking Changes in 2.0.0

Version 2.0.0 introduces security boundaries that intentionally change default behavior from the 1.x line:

The server starts in readonly mode. Mutations, DDL, role administration, filesystem import/export, and arbitrary SQL require --security-mode write, --security-mode admin, or --security-mode unsafe as appropriate.
Destructive operations such as drops, resets, broad role grants, and arbitrary SQL require --allow-destructive.
Per-tool connectionString, sourceConnectionString, and targetConnectionString arguments are disabled by default. Use server-level --connection-string or POSTGRES_CONNECTION_STRING, or explicitly opt in with --allow-tool-connection-string.
Legacy string where clauses are rejected for mutation, index, export, and copy filters. Use structured where predicates, or rawWhere only with --security-mode unsafe --allow-destructive.
Multi-statement pg_execute_sql calls must use transactional: true, expectRows: false, and no bind parameters.
Tool schemas reject unknown fields, so misspelled or unintended inputs fail before connection resolution.
User and target identifiers are restricted to

Read from source at commit 820487637aa9OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add postgres-mcp-server -- npx -y @henkey/[email protected]

claude-desktop

{
  "mcpServers": {
    "postgres-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@henkey/[email protected]"
      ]
    }
  }
}

Exposed tools (57)

22 read · 18 write · 17 destructive. Blast radius: 17 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`pg_alter_table`	destructive	Alter an existing table (add/modify/drop columns)
`pg_alter_user`	read	Alter an existing PostgreSQL user/role
`pg_analyze_database`	read	Analyze PostgreSQL database configuration and performance
`pg_analyze_index_usage`	read	Find unused, duplicate, and low-usage indexes to optimize database performance
`pg_copy_between_databases`	read	Copy data between two databases
`pg_create_constraint`	write	Create a constraint (unique, check, or primary key)
`pg_create_enum`	write	Create a new ENUM type in the database
`pg_create_foreign_key`	write	Create a foreign key constraint
`pg_create_function`	write	Create or replace a PostgreSQL function
`pg_create_index`	write	Create a new index on a table
`pg_create_rls_policy`	write	Create a Row-Level Security policy
`pg_create_table`	write	Create a new table in the database
`pg_create_trigger`	write	Create a PostgreSQL trigger
`pg_create_user`	write	Create a new PostgreSQL user/role
`pg_debug_database`	read	Debug common PostgreSQL issues
`pg_disable_rls`	write	Disable Row-Level Security on a table
`pg_drop_constraint`	destructive	Drop a constraint
`pg_drop_foreign_key`	destructive	Drop a foreign key constraint
`pg_drop_function`	destructive	Drop a PostgreSQL function
`pg_drop_index`	destructive	Drop an existing index
`pg_drop_rls_policy`	destructive	Drop a Row-Level Security policy
`pg_drop_trigger`	destructive	Drop a PostgreSQL trigger
`pg_drop_user`	destructive	Drop a PostgreSQL user/role
`pg_edit_rls_policy`	write	Edit an existing Row-Level Security policy
`pg_enable_rls`	write	Enable Row-Level Security on a table
`pg_execute_mutation`	destructive	Execute data modification operations (INSERT/UPDATE/DELETE/UPSERT) - operation=
`pg_execute_query`	write	Execute SELECT queries and data retrieval operations - operation=
`pg_execute_sql`	write	Execute arbitrary SQL statements - sql=
`pg_explain_query`	read	EXPLAIN/EXPLAIN ANALYZE for queries to understand execution plans
`pg_export_table_data`	read	Export table data to JSON or CSV format
`pg_get_constraints`	read	List all constraints (primary keys, foreign keys, unique, check)
`pg_get_enums`	read	Get information about PostgreSQL ENUM types
`pg_get_functions`	read	Get information about PostgreSQL functions
`pg_get_indexes`	read	List indexes with size and usage statistics
`pg_get_query_stats`	read	Query statistics from pg_stat_statements with cache hit ratios
`pg_get_rls_policies`	read	Get Row-Level Security policies
`pg_get_schema_info`	read	Get schema information for a database or specific table
`pg_get_slow_queries`	read	Find slow running queries using pg_stat_statements
`pg_get_triggers`	read	Get information about PostgreSQL triggers
`pg_get_user_permissions`	read	Get permissions for a user/role or all users
`pg_grant_permissions`	read	Grant permissions to a user/role
`pg_import_table_data`	write	Import data from JSON or CSV file into a table
`pg_list_users`	read	List all users/roles in the database
`pg_manage_comments`	destructive	Manage PostgreSQL object comments - get, set, remove comments on tables, columns, functions, and other database objects. Examples: operation=
`pg_manage_constraints`	destructive	Manage PostgreSQL constraints - get, create foreign keys, drop foreign keys, create constraints, drop constraints. Examples: operation=
`pg_manage_functions`	destructive	Manage PostgreSQL functions - get, create, or drop functions with a single tool. Examples: operation=
`pg_manage_indexes`	destructive	Manage PostgreSQL indexes - get, create, drop, reindex, and analyze usage with a single tool. Examples: operation=
`pg_manage_query`	read	Manage PostgreSQL query analysis and performance - operation=
`pg_manage_rls`	write	Manage PostgreSQL Row-Level Security - enable/disable RLS and manage policies. Examples: operation=
`pg_manage_schema`	write	Manage PostgreSQL schema - get schema info, create/alter tables, manage enums. Examples: operation=
`pg_manage_triggers`	destructive	Manage PostgreSQL triggers - get, create, drop, and enable/disable triggers. Examples: operation=
`pg_manage_users`	destructive	Manage PostgreSQL users and permissions - create, drop, alter users, grant/revoke permissions. Examples: operation=
`pg_monitor_database`	read	Get real-time monitoring information for a PostgreSQL database
`pg_reindex`	read	Rebuild indexes to improve performance and reclaim space
`pg_reset_query_stats`	destructive	Reset pg_stat_statements statistics (all or specific query)
`pg_revoke_permissions`	destructive	Revoke permissions from a user/role
`pg_set_trigger_state`	write	Enable or disable a PostgreSQL trigger

Trust audit

CAUTIONgrade D · trust 67/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED