PostgreSQL MCP servers
MCP servers that connect an AI agent to PostgreSQL: querying schemas, tables and rows in a PostgreSQL database. We have classified 193 so far, listed below and ranked by their independent trust score.
193 catalogued · how we score
PostgreSQL at a glance
- Highest score
- 96 Postgres (read-only)
- Median score
- 48
- Scored
- 193 of 193
- Rescanned in 7 days
- 192
npm 72 · remote 66 · pypi 38 · oci 25 · mcpb 7 · nuget 3 · figures as of 2026-11-05 02:39 UTC · how we score
Top 100 by trust score Trust score 0–100
- npm 96
Read-only Postgres: drop-in for the archived server-postgres, with schema context.
- npm 95
Validate compact backend specs and generate tested NestJS, Prisma, and PostgreSQL repositories.
- npm 94
io.github.dockndevai/mcp-percona-pg
Manage Percona PostgreSQL + PgBouncer on Kubernetes — safe-by-default access modes and guards.
- npm 94
Schema, database, document, user and dev-server tools for a Rebase backend project.
- npm 93
PostgreSQL schema intelligence from a committed snapshot. No connection, no credentials.
- npm 93
Offline, deterministic cause and fix for Node, npm, Next.js, CORS and Postgres URL errors.
- remote · npm 93
Generate realistic, FK-consistent synthetic test data for your databases from your AI assistant.
- pypi 91
io.github.renanlido/custom-mcp-database
Run alias-based queries against PostgreSQL, MySQL, MongoDB and Oracle without exposing credentials.
- pypi 90
io.github.cdeust/hypermnesia-mcp-viz
Read-only visualization for Cortex memory, knowledge, sessions, traces, and codebase graphs.
- remote · npm 90
EU-native PaaS for AI agents — deploy web apps with one sentence, managed Postgres, GDPR by default.
- npm 90
Check, test, prove and review a rowstile policy: access rules for Postgres row-level security
- remote 89
SQLGuard — Execution Certificate Firewall
Permission before writes. Gravity→DENYs→Session $0.25. Pilot $100; Gateway $299. Probe free.
- remote 89
SQLGuard — permission before production writes
AI agents need permission before production SQL writes. Pilot $100 · Gateway $299. Lint≠authorize.
- npm 89
io.github.orifisher2/sqlike-mcp
Lints SQL and checks rewrites return the same rows. Postgres, MySQL, MariaDB, SQLite, MSSQL, DuckDB
- remote 88
Create, test, publish, and manage Dreamlit notification workflows from AI clients.
- remote · npm 86
x402 pay-per-call infra for agents: $0.03 image generation, Postgres, auth, storage, functions.
- remote 86
Search and compare AI tools, build AI workflows, find tools that state EU hosting. No API key.
- pypi 86
Lineage-gated agent memory tools on Postgres + pgvector, enforced by row-level security.
- remote · npm · oci 86
io.github.timescale/pg-aiguide
Comprehensive PostgreSQL documentation and best practices, including ecosystem tools
- npm 85
capital.hove/read-only-local-postgres-mcp-server
MCP server for read-only PostgreSQL database queries in Claude Desktop
- npm 84
io.github.AkaciaNL/basicdeploy-mcp
The runtime your agent deploys to — DB, storage, and a public URL in one MCP call.
- npm 84
Provision Postgres databases + webhooks from AI coding agents in one HTTP call.
- npm 84
io.github.Rheopyrin/db-access-mcp
MCP server for Postgres/MySQL/Redshift/SQL Server over SSH/SSM tunnels with secret providers.
- nuget 82
Database MCP server for schema discovery, comments, and SQL queries.
- npm 81
MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.
- remote 81
Veto — SQL Safety & Cost Oracle
Deterministic safety, correctness & cost gate that vets Postgres SQL before your AI agent runs it.
- npm 81
Lints PostgreSQL migrations for dangerous locking operations and suggests safe rewrites.
- npm 81
Deedglass lets rules decide each AI agent tool call, checks what really changed and seals a record.
- npm · oci 81
SQL database to MCP tools and REST API: PostgreSQL, MySQL, SQL Server, Oracle, SQLite, Snowflake.
- nuget 81
Execute raw SQL queries against SQL Server, SQLite, PostgreSQL, MySQL, and MariaDB.
- npm 80
Offline PostgreSQL query, migration and EXPLAIN diagnostics for AI agents.
- npm 79
io.github.cocaxcode/database-mcp
MCP server for database connectivity. Multi-DB (PostgreSQL, MySQL, SQLite), 19 tools.
- remote 79
pg.ddx.io: the PostgreSQL community's memory
Every PostgreSQL mailing list since 1991, linked to the commits, code, commitfest and docs.
- npm 79
Record a flow through your app, check it after every change, and attack a copy of your database.
- npm 79
Managed Postgres and Valkey hosted in Germany. Agents can create a trial database with no signup.
- npm 79
io.github.marcelo-ochoa/postgres
MCP server for interacting with PostgreSQL databases
- npm 79
Generates relationally valid test data in a PostgreSQL database from its live schema.
- npm 79
PostgreSQL MCP server - query, schema introspection, explain, and health checks for AI assistants
- npm 78
Read-only SQL querying + schema introspection over Postgres & SQLite, with a gated write mode.
- remote 78
ai.getvda/kafka-and-postgres-monitoring-stack
Kafka and Postgres Monitoring Stack
- remote 78
ai.getvda/memcached-mongodb-redis-compose-generator
Memcached + MongoDB + Redis Compose Generator
- remote 78
ai.getvda/mysql-redis-compose-generator
MySQL + Redis Compose Generator
- remote 78
ai.getvda/mysql-redis-compose-generator-adminer
MySQL + Redis Compose Generator (Adminer)
- remote 78
ai.getvda/postgres-grafana-stack-generator
Postgres + Grafana Stack Generator
- remote 78
ai.getvda/postgres-kafka-prometheus-stack-generator
Postgres + Kafka + Prometheus Stack Generator
- remote 78
ai.getvda/postgres-kafka-stack-generator
Postgres + Kafka Stack Generator
- remote 78
ai.getvda/postgres-redis-compose-generator
Postgres + Redis Compose Generator
- remote 78
ai.getvda/redis-minio-postgres-stack-generator
Redis + MinIO + Postgres Stack Generator
- remote 78
AI visibility audits, llms.txt and schema generators, instant quotes, missed-call and ROI tools.
- npm 78
io.github.cybeleri/database-admin
Database admin MCP: schema inspection, query optimization for PostgreSQL and MySQL
- pypi 78
Safe, read-only-by-default MySQL, PostgreSQL & SQLite access for AI agents. TOON output.
- pypi 78
io.github.Fashad-Ahmed/universal-db-mcp
Security-first MCP server for PostgreSQL, SQLite, MySQL, DuckDB with SQL injection prevention.
- npm 78
io.github.jmshinhwa/pg-migration-lock-lint
Names every statement in a Rails, Django or raw SQL migration that takes a table-blocking Postgres l
- pypi 78
Predict query cost, explain the plan, and rewrite it before you run it — 12 DB engines.
- pypi 77
Local long-term memory shared by all your AI agents, kept word for word on your own PC.
- npm 76
io.github.amol21p/interactive-terminal
MCP server for real interactive terminal sessions — REPLs, SSH, databases, Docker
- pypi 76
io.github.atarkowska/fastmcp-sqltools
A MCP server provides SQL database access with support for PostgreSQL, MySQL, and SQLite.
- pypi 75
Read-only SQL for PostgreSQL, MySQL and SQLite: schema, safe SELECTs, EXPLAIN, index advice
- remote 75
Bilingual dual memory with SSC for AI agents. Semantic search, embeddings, profiles.
- remote · pypi 75
RationalBloks deprecated
Deploy production REST APIs from JSON schemas in seconds. Manage projects, schemas, and deployments.
- remote 73
Find kids' enrichment providers (sports, swim, dance, arts, STEM, camps) in 39 US regions.
- npm 73
PostgreSQL MCP Server — 27 tools for queries, schema, CRUD, DBA, HA & server management
- pypi 73
The agent never writes SQL: queries compile from a semantic layer you control, PII refused first.
- remote 72
Pay-per-call agent tools over x402 (USDC on Base) — no signup or API key.
- pypi 72
Read-only Postgres bloat verdicts: blockers, timelines, REINDEX proof.
- npm 72
io.github.vpatser1/mcp-schema-designer
Design database schemas from natural language, validate SQL, generate migrations and types
- remote 71
Machine-native capabilities with explicit contracts and machine-readable commerce.
- pypi 71
io.github.Wangggym/quarry deprecated
Safety-railed database access for agents: Postgres, MySQL, Redis. Read-only by default.
- pypi 71
Safety-railed database access: Postgres, MySQL, SQLite, Redis. Read-only by default.
- remote 69
Guard AI agents' PostgreSQL/MySQL access via MCP: SQL audit, auth, masking, write approval
- npm 68
Self-hosted long-term memory for AI agents over MCP — hierarchical recall backed by pgvector
- npm 67
Read-only diagnostics: Loki, Prometheus, PostgreSQL, Redis, BullMQ, Docker and GitHub.
- npm 67
145+ tools across 8 databases: MySQL, PostgreSQL, Redshift, MongoDB, Redis, Kafka, and more
- npm 66
io.github.martymarkenson/postgres-connector
MCP server for querying PostgreSQL databases
- pypi 66
PostgreSQL CVE & Release Intelligence
PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths
- remote 65
PostgreSQL bigserial band, value discarded
PostgreSQL bigserial band, value discarded
- remote 65
Check a Postgres URL shape. Credentials discarded.
- oci 57
Read-only health and screen time history from the Postgres of a self-hosted Life Dashboard Stack
- oci 55
CLI-first remote runtimes for validation and offload tasks, exposed over MCP stdio.
- mcpb · npm · oci 53
DBConvert Streams (Federated SQL)
Read-only SQL across your PostgreSQL, MySQL, S3 buckets and local data files, in one query.
- oci · pypi 50
Safe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers
- npm 50
Share a folder of data files read-only over MCP, and fill it from PostgreSQL under a read-only role.
- pypi 50
A label property graph on SQLite/Postgres with multi-ontology routing and a gated MCP server.
- npm 50
io.github.mickelsamuel/migrationpilot
112 rules that catch dangerous PostgreSQL migrations, plus a pass/fail gate to call before any DDL.
- pypi 50
Python MCP server for PostgreSQL database inspection and querying
- npm 50
Standalone Postgres MCP server — schema-aware, read-only by default, installable everywhere.
- pypi 50
Zero-config MCP server for searchable documentation. SQLite or PostgreSQL.
- pypi 50
Multi-database MCP server for PostgreSQL, MySQL, and ClickHouse
- npm · pypi 49
io.github.arifulislamat/database-mcp-postgres
MCP server for PostgreSQL. Read-only by default, row caps, timeouts, secrets never logged.
- npm 49
Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
- pypi 49
io.github.daedalus/mcp-psycopg2
MCP server exposing psycopg2 PostgreSQL database adapter functionality
- npm 49
io.github.iamvirul/wso2-docs-mcp-server
Semantic search over WSO2 docs (APIM, IS, MI, Choreo, Ballerina) via RAG and pgvector.
- npm 49
MCP server for secure database access (PostgreSQL, MySQL, SQLite)
- npm 49
Safe PostgreSQL migrations: schema drift, lock analysis, safe rewrites, data checksums. Read-only.
- pypi 49
Persistent semantic memory for SQL databases. Postgres, MySQL, MSSQL, SQLite.
- npm 49
dbt MCP — manifest/run_results/sources/catalog parsing + DQ result tables (BigQuery/Postgres)
- npm · oci 48
PostgreSQL (hardened, read-only)
Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
- oci 48
Local-first AI memory layer with hybrid search. Postgres + pgvector. Self-hosted, MIT.
- remote 48
Dataset to Postgres, Supabase & MySQL (Database Push)
Push rows from a dataset, file or Google Sheet into a Postgres, Supabase, Neon or MySQL table.
- oci 48
Run SQL on 30+ databases through saved, encrypted connections; credentials stay local.
Every server here has been scored. A server is listed here because its description and tool definitions say it is built for PostgreSQL. That is what the server declares about itself, not an integration we have tested, so check the score breakdown before you trust one. This classification currently runs only over servers that publish a hosted endpoint, so a PostgreSQL server distributed solely as an installable package will not appear here yet, however clearly it belongs. Treat the ranking as a partial field rather than the whole one.
Common questions
What is a PostgreSQL MCP server?
A PostgreSQL MCP server exposes querying schemas, tables and rows in a PostgreSQL database to an AI assistant over the Model Context Protocol, so the assistant can work with PostgreSQL directly instead of you moving data in and out by hand. These come from the public MCP registry, and being listed there is not a review of the code, so the publisher is worth checking as closely as the feature list.
How do I get started with a PostgreSQL MCP server?
Start from the ranked list on this page, then open a server's own page and read its score breakdown before you install anything. Every server listed here is a hosted endpoint, so that breakdown covers Endpoint Security, Transport & Reachability, Schema Quality & AI Usability, Stability & Change Management, Tool Coverage, Tool Safety and Capabilities. A PostgreSQL server acts on your PostgreSQL data, so check what access it asks for before you connect it. The same page carries install snippets for the common MCP clients.