MCP PostgreSQL Server

Reference MCP server that exposes a Postgres database as a query surface. Read-only by default — but worth flagging that early versions had a SQL-injection class issue where the read-only wrapper could be bypassed by stacking statements. Production deployments should pin a current version and run with a least-privilege role on top of any wrapper guarantees.

By Fredoline Eruo·Last verified May 6, 2026·60,000 GitHub stars

Overview

Stack & relationships

How MCP PostgreSQL Server relates to other entries in the catalog — recommended pairings, alternatives, dependencies, and edges to avoid. Each edge carries a one-line operator note from our editorial team.

MCP PostgreSQL Server ↔ ecosystem

Avoid pairing with

Works poorly with
Model Context Protocol (MCP)
Older Postgres MCP versions had a statement-stacking SQL injection that bypassed the read-only wrapper. Pin a current version AND run with a least-privilege DB role.

Pros

Drop-in Postgres exposure for any MCP client
Schema introspection out of the box
Read-only mode the default

Cons

Historic statement-stacking SQLi escape — pin to current versions
Defense-in-depth requires a least-privilege DB role on top of the wrapper
Long-running queries can saturate the client side

Compatibility

Operating systems	macOS Linux Windows
GPU backends	n/a
License	Open source · free (OSS, MIT)

Get MCP PostgreSQL Server

Official site

https://modelcontextprotocol.io

GitHub

https://github.com/modelcontextprotocol/servers

Frequently asked

Is MCP PostgreSQL Server free?

MCP PostgreSQL Server has a paid tier (free (OSS, MIT)). Check the pricing page for current terms.

What operating systems does MCP PostgreSQL Server support?

MCP PostgreSQL Server supports macOS, Linux, Windows.

Which GPUs work with MCP PostgreSQL Server?

MCP PostgreSQL Server supports n/a. CPU-only inference is also possible but slow.

Reviewed by RunLocalAI Editorial. See our editorial policy for how we evaluate tools.