Postgresql Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Postgresql Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides AI assistants (like Claude) with tools to directly interact with PostgreSQL databases securely.
<img src="./demo.png"/> <img src="./pgadmin.png"/>
You can install and run this package easily using uv:
# Run without installing globally
uvx postgresql-mcp
# Or install globally for easy access
uv tool install postgresql-mcpThis project requires an API Key mapped to your PostgreSQL database URL. To easily set this up, we provide a built-in Web Configurator.
Run the web configurator:
postgresql-mcp-webOr, if running without global installation:
uvx --from . postgresql-mcp-webOpen your browser to http://localhost:8000. Enter your database URL (postgresql://user:pass@host/db) and click "Generate API Key".
The application securely stores your credentials in ~/.sql-mcp/keys.json and outputs a configuration snippet.
Copy the generated snippet and add it to your Claude Desktop configuration file (typically located at %APPDATA%\Claude\claude_desktop_config.json on Windows or ~/Library/Application Support/Claude/claude_desktop_config.json on macOS).
{
"mcpServers": {
"postgresql-mcp": {
"command": "uvx",
"args": [
"postgresql-mcp"
],
"env": {
"API_KEY": "postgresql-mcp-your-generated-key"
}
}
}
}Restart Claude Desktop, and your AI assistant will now be able to interact with your database!
The server automatically tracks how many times each API key is utilized. You can view this data locally in ~/.sql-mcp/usage.json.
We welcome contributions! Please see CONTRIBUTING.md for details on how to get started.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.