Last Updated October 9, 2025 - Production/Stable v1.1.1
Enterprise-grade PostgreSQL MCP server with enhanced security, comprehensive testing, AI-native database operations, intelligent meta-awareness, and guided workflows.
Can't find what you're looking for? Use our AI-powered search interface to search both PostgreSQL and SQLite MCP Server documentation:
- π€ Natural Language Queries - Ask questions in plain English
- β‘ Instant Results - AI-enhanced answers with source attribution
- π Comprehensive Coverage - Searches all 63 PostgreSQL tools + 73 SQLite tools
- π― Smart Context - Understands technical questions and provides relevant examples
Example queries: "How do I optimize PostgreSQL query performance?", "What PostGIS features are available?", "How do I use pgvector for semantic search?"
For detailed documentation, examples, and guides, visit our comprehensive wiki:
- Quick Start Guide - Get running in 30 seconds
- Installation & Configuration - Detailed setup
- All Tool Categories - 63 specialized tools
- Security Best Practices - Production security
- Troubleshooting - Common issues
63 specialized MCP tools + 10 intelligent resources + 10 guided prompts for PostgreSQL operations:
- Core Database (9): Schema management, SQL execution, health monitoring
- JSON Operations (11): JSONB operations, validation, security scanning
- Text Processing (5): Similarity search, full-text search, fuzzy matching
- Statistical Analysis (8): Descriptive stats, correlation, regression, time series
- Performance Intelligence (6): Query optimization, index tuning, workload analysis
- Vector/Semantic Search (8): Embeddings, similarity search, clustering
- Geospatial (7): Distance calculation, spatial queries, GIS operations
- Backup & Recovery (4): Backup planning, restore validation, scheduling
- Monitoring & Alerting (5): Real-time monitoring, capacity planning, alerting
- database://schema: Complete schema with tables, columns, indexes
- database://capabilities: Server capabilities and installed extensions
- database://performance: Query performance metrics from pg_stat_statements
- database://health: Comprehensive health status
- database://extensions: Installed extensions with versions
- database://indexes: Index usage statistics and recommendations
- database://connections: Active connections and pool status
- database://replication: Replication status and lag
- database://vacuum: Vacuum status and transaction ID wraparound
- database://locks: Current lock information
- database://statistics: Table statistics quality
- optimize_query: Step-by-step query optimization
- index_tuning: Comprehensive index analysis
- database_health_check: Full health assessment
- setup_pgvector: Complete pgvector setup guide
- json_operations: JSONB best practices
- performance_baseline: Establish performance baselines
- backup_strategy: Design backup strategy
- setup_postgis: PostGIS setup and usage
- explain_analyze_workflow: Deep dive into EXPLAIN plans
- extension_setup: Extension installation guide
Enhanced with pg_stat_statements, hypopg, pgvector, and PostGIS extensions.
- PostgreSQL Database (version 13-18)
- Environment Variable:
DATABASE_URI="postgresql://user:pass@host:5432/db"
- MCP Client: Claude Desktop, Cursor, or compatible client
See Installation Guide for detailed setup instructions.
docker pull neverinfamous/postgres-mcp:latest
docker run -i --rm \
-e DATABASE_URI="postgresql://user:pass@localhost:5432/db" \
neverinfamous/postgres-mcp:latest \
--access-mode=restricted
pip install postgres-mcp-enhanced
postgres-mcp --access-mode=restricted
git clone https://github.com/neverinfamous/postgres-mcp.git
cd postgres-mcp
uv sync
uv run pytest -v
π See Full Installation Guide β
Zero known vulnerabilities - Comprehensive security audit passed:
- β SQL injection prevention with parameter binding
- β 20+ security test cases covering all attack vectors
- β Dual security modes (restricted/unrestricted)
- β Advanced query validation
- β CodeQL security scanning passing
- β Pyright strict mode - 2,000+ type issues resolved, 100% type-safe codebase
Security Modes:
- Restricted (Production): Read-only, query validation, resource limits
- Unrestricted (Development): Full access with parameter binding protection
π Security Best Practices β
- Database health monitoring (indexes, connections, vacuum, buffer cache)
- Query performance tracking via pg_stat_statements
- Capacity planning and growth forecasting
- Replication lag monitoring
- AI-powered index tuning with DTA algorithms
- Hypothetical index testing via hypopg (zero-risk)
- Query plan analysis and optimization
- Workload analysis and slow query detection
- Vector similarity search via pgvector
- Geospatial operations via PostGIS
- Semantic search and clustering
- Natural language database interactions
Explore comprehensive documentation for each category:
Category | Tools | Documentation |
---|---|---|
Core Database | 9 | Core Tools β |
JSON Operations | 11 | JSON Tools β |
Text Processing | 5 | Text Tools β |
Statistical Analysis | 8 | Stats Tools β |
Performance Intelligence | 6 | Performance β |
Vector/Semantic Search | 8 | Vector Search β |
Geospatial | 7 | GIS Tools β |
Backup & Recovery | 4 | Backup Tools β |
Monitoring & Alerting | 5 | Monitoring β |
Resources provide real-time database meta-awareness - AI can access these automatically without explicit tool calls:
Resource | Purpose | When to Use |
---|---|---|
database://schema | Complete database structure | Understanding database layout before queries |
database://capabilities | Server features and extensions | Checking what operations are available |
database://performance | Query performance metrics | Identifying slow queries proactively |
database://health | Database health status | Proactive monitoring and issue detection |
database://extensions | Extension inventory | Verifying required features are installed |
database://indexes | Index usage statistics | Finding unused or missing indexes |
database://connections | Connection pool status | Monitoring connection utilization |
database://replication | Replication lag and status | Ensuring replica consistency |
database://vacuum | Vacuum and wraparound status | Preventing transaction ID exhaustion |
database://locks | Lock contention information | Diagnosing deadlocks and blocking |
database://statistics | Statistics quality | Ensuring accurate query planning |
π‘ Key Benefit: Resources reduce token usage by providing cached context vs. repeated queries!
Prompts provide guided workflows for complex operations - step-by-step instructions with examples:
Prompt | Purpose | Use Case |
---|---|---|
optimize_query | Query optimization workflow | Analyzing and improving slow queries |
index_tuning | Index analysis and recommendations | Finding unused/missing/duplicate indexes |
database_health_check | Comprehensive health assessment | Regular maintenance and monitoring |
setup_pgvector | pgvector installation and setup | Implementing semantic search |
json_operations | JSONB best practices | Optimizing JSON queries and indexes |
performance_baseline | Baseline establishment | Setting up performance monitoring |
backup_strategy | Backup planning and design | Designing enterprise backup strategy |
setup_postgis | PostGIS installation and usage | Implementing geospatial features |
explain_analyze_workflow | Deep plan analysis | Understanding query execution |
extension_setup | Extension installation guide | Installing and configuring extensions |
π‘ Key Benefit: Prompts guide users through complex multi-step operations with PostgreSQL best practices!
π View Complete Documentation β
Required extensions for full functionality:
- pg_stat_statements (built-in) - Query performance tracking
- pg_trgm & fuzzystrmatch (built-in) - Text similarity
- hypopg (optional) - Hypothetical index testing
- pgvector (optional) - Vector similarity search
- PostGIS (optional) - Geospatial operations
Quick Setup:
CREATE EXTENSION IF NOT EXISTS pg_stat_statements;
CREATE EXTENSION IF NOT EXISTS pg_trgm;
CREATE EXTENSION IF NOT EXISTS fuzzystrmatch;
π Extension Setup Guide β
- π NEW: MCP Resources (10): Real-time database meta-awareness
- Instant access to schema, capabilities, performance, health
- Reduces token usage by providing cached context
- AI can access database state without explicit queries
- π NEW: MCP Prompts (10): Guided workflows for complex operations
- Step-by-step query optimization workflow
- Comprehensive index tuning guide
- Complete database health assessment
- pgvector and PostGIS setup guides
- JSONB best practices and optimization
- β¨ Intelligent Assistant: Transforms from tool collection to database expert
- Proactive optimization suggestions
- Context-aware recommendations
- PostgreSQL-specific best practices
- π Code Quality: Pyright strict mode compliance
- Resolved 2,000+ type issues
- 100% type-safe codebase
- Enhanced reliability and maintainability
- π¦ Zero Breaking Changes: All existing tools work unchanged
- Production Ready: Enterprise-grade PostgreSQL MCP server
- 63 Specialized Tools: Complete feature set across 9 categories
- Zero Known Vulnerabilities: Comprehensive security audit passed
- Type Safety: Pyright strict mode compliance
- Multi-Platform: Windows, Linux, macOS (amd64, arm64)
- Backup & Recovery: 4 new tools for enterprise backup planning
- Monitoring & Alerting: 5 new tools for real-time monitoring
- All 63 Tools Ready: Complete Phase 5 implementation
- Vector Search: 8 tools with pgvector integration
- Geospatial: 7 tools with PostGIS integration
- Extension Support: pgvector v0.8.0, PostGIS v3.5.0
- Statistical Analysis: 8 advanced statistics tools
- Performance Intelligence: 6 optimization tools
{
"mcpServers": {
"postgres-mcp": {
"command": "docker",
"args": ["run", "-i", "--rm", "-e", "DATABASE_URI",
"neverinfamous/postgres-mcp:latest", "--access-mode=restricted"],
"env": {
"DATABASE_URI": "postgresql://user:pass@localhost:5432/db"
}
}
}
}
{
"mcpServers": {
"postgres-mcp": {
"command": "postgres-mcp",
"args": ["--access-mode=restricted"],
"env": {
"DATABASE_URI": "postgresql://user:pass@localhost:5432/db"
}
}
}
}
π MCP Configuration Guide β
Common Issues:
- Connection Refused: Verify PostgreSQL is running with
pg_isready
- Extension Not Found: Install required extensions (see Extension Setup)
- Permission Denied: Check database user permissions
- MCP Server Not Found: Validate MCP client configuration
π Full Troubleshooting Guide β
# Run all tests
uv run pytest -v
# Security tests
python security/run_security_test.py
# With coverage
uv run pytest --cov=src tests/
Test Results:
- β Security: 20/20 passed (100% protection)
- β SQL Injection: All vectors blocked
- β Integration: All operations validated
- β Type Safety: Pyright strict mode (2,000+ issues resolved)
- β Compatibility: PostgreSQL 13-18 supported
- β Zero Known Vulnerabilities - Comprehensive security audit passed
- β Pyright Strict Mode - 2,000+ type issues resolved, 100% type-safe codebase
- β Enterprise-Grade - Production-ready with advanced features
- β 63 Specialized Tools - Complete database operation coverage
- β 10 Intelligent Resources - Real-time database meta-awareness (NEW in v1.1.0!)
- β 10 Guided Prompts - Step-by-step workflows for complex operations (NEW in v1.1.0!)
- β AI Assistant Capabilities - Proactive optimization and recommendations
- β Real-Time Analytics - pg_stat_statements integration
- β AI-Native - Vector search, semantic operations, ML-ready
- β Active Maintenance - Regular updates and security patches
- β Comprehensive Documentation - 16-page wiki with examples
π v1.1.0 Differentiation: Only PostgreSQL MCP server with intelligent meta-awareness and guided workflows!
- π Complete Wiki - Full documentation
- π GitHub Gists - 7 practical examples and use cases
- π‘οΈ Security Policy - Vulnerability reporting
- π€ Contributing - Development guidelines
- π³ Docker Hub - Container images (coming soon)
- π¦ PyPI Package - Python package
GitHub Gists - Practical Examples:
- Complete Feature Showcase - All 63 tools with comprehensive examples
- Security Best Practices - SQL injection prevention and production security
- Performance Intelligence - Query optimization and index tuning strategies
- Vector/Semantic Search - pgvector integration and AI-native operations
- Enterprise Monitoring - Real-time monitoring and alerting workflows
- Geospatial Operations - PostGIS integration and spatial queries
- JSON/JSONB Operations - Advanced JSONB operations and validation
- Version 1.1.0 - Intelligent assistant release (October 4, 2025)
- 63 MCP Tools across 9 categories
- 10 MCP Resources - Database meta-awareness (NEW!)
- 10 MCP Prompts - Guided workflows (NEW!)
- 100% Type Safe - Pyright strict mode (2,000+ issues resolved)
- Zero Known Vulnerabilities - Security audit passed
- Zero Linter Errors - Clean codebase with comprehensive type checking
- PostgreSQL 13-18 - Full compatibility
- Multi-platform - Windows, Linux, macOS (amd64, arm64)
- 7,500+ lines - 14 modules, comprehensive implementation
- License: MIT - see LICENSE file
- Security: Report vulnerabilities to admin@adamic.tech
- Contributing: See CONTRIBUTING.md
Enterprise-grade PostgreSQL MCP server with comprehensive security, real-time analytics, and AI-native operations.