pgedge-postgres-mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pgedge-postgres-mcp (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The pgEdge Postgres Model Context Protocol (MCP) server enables SQL queries against PostgreSQL databases through MCP-compatible clients. The Natural Language Agent provides supporting functionality that allows you to use natural language to form SQL queries.
Supported Versions: PostgreSQL 14 and higher.
NOT FOR PUBLIC-FACING APPLICATIONS: This MCP server provides LLMs with read access to your entire database schema and data. It should only be used for internal tools, developer workflows, or environments where all users are trusted. For public-facing applications, consider the pgEdge RAG Server instead. See the Choosing the Right Solution guide for details.
The Quick Start guide covers installation and setup for all supported clients:
| Client | Transport | Best For |
|---|---|---|
| CLI (Stdio) | Stdio | Local single-user development |
| CLI (HTTP) | HTTP | Multi-user or remote access |
| Web UI | HTTP | Browser-based chat interface |
| Claude Code | Stdio | Anthropic CLI agent |
| Claude Desktop | Stdio | Anthropic desktop app |
| Cursor | Stdio | AI code editor |
| Windsurf | Stdio | Codeium code editor |
| VS Code Copilot | Stdio | GitHub Copilot agent |
For a guided demo with sample data, see the Quickstart Demo with Northwind.
transactions by default
search (BM25+MMR), embedding generation, resource reading, and more
database exploration, query diagnostics, and more
Anthropic prompt caching (90% cost reduction)
authentication
for natural language database interaction
GitHub Container Registry with Docker Compose deployment
enforcement
without server restart
The project uses golangci-lint v1.x. Install it with:
go install github.com/golangci/golangci-lint/cmd/golangci-lint@latestNote: The configuration file .golangci.yml is compatible with golangci-lint v1.x (not v2).
git clone https://github.com/pgEdge/pgedge-postgres-mcp.git
cd pgedge-postgres-mcp
make build# Run all tests
make test
# Run server tests with a database
export TEST_PGEDGE_POSTGRES_CONNECTION_STRING=\
"postgres://localhost/postgres?sslmode=disable"
go test ./...
# Run with coverage
go test -v -cover ./...
# Run linting
make lint#### Web UI Tests
The web UI has a comprehensive test suite. See web/TEST_SUMMARY.md for details.
cd web
npm test # Run all tests
npm run test:watch # Watch mode
npm run test:coverage # With coverageSee the Security Guide for comprehensive security documentation.
Tools not visible in Claude Desktop?
Database connection errors?
server (via config file, environment variables, or command-line flags)
pg_isreadySee the Troubleshooting Guide for detailed solutions.
To report an issue with the software, visit: GitHub Issues
For more information, visit docs.pgedge.com
This project is licensed under the PostgreSQL License.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.