Pg Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Pg Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A lightweight MCP server for read-only PostgreSQL access. Maintains a persistent connection pool and exposes query tools for use with Claude Code or any MCP client.
| Tool | Description |
|---|---|
query | Run a read-only SQL query (SELECT, WITH, EXPLAIN) |
list_tables | List all tables in a schema |
describe_table | Show columns and types for a table |
npx (no install)Add to your .mcp.json:
{
"mcpServers": {
"db": {
"command": "npx",
"args": ["github:NeuroviaLabs/pg-mcp"],
"env": {
"DATABASE_URL": "postgresql://user:pass@host:5432/dbname"
}
}
}
}git clone [email protected]:NeuroviaLabs/pg-mcp.git
cd pg-mcp
npm installAdd to your .mcp.json:
{
"mcpServers": {
"db": {
"command": "node",
"args": ["db-server.js"],
"env": {
"DATABASE_URL": "postgresql://user:pass@host:5432/dbname"
}
}
}
}The connection URL can also be passed as a CLI argument:
node db-server.js postgresql://user:pass@host:5432/dbnameISC
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.