RunLocalAI
server
Open source
free (OSS, MIT)

MCP PostgreSQL Server

Reference MCP server that exposes a Postgres database as a query surface. Read-only by default — but worth flagging that early versions had a SQL-injection class issue where the read-only wrapper could be bypassed by stacking statements. Production deployments should pin a current version and run with a least-privilege role on top of any wrapper guarantees.

By Fredoline Eruo·Last verified May 6, 2026·60,000 GitHub stars

Overview

Reference MCP server that exposes a Postgres database as a query surface. Read-only by default — but worth flagging that early versions had a SQL-injection class issue where the read-only wrapper could be bypassed by stacking statements. Production deployments should pin a current version and run with a least-privilege role on top of any wrapper guarantees.

Stack & relationships

How MCP PostgreSQL Server relates to other entries in the catalog — recommended pairings, alternatives, dependencies, and edges to avoid. Each edge carries a one-line operator note from our editorial team.

MCP PostgreSQL Server ↔ ecosystem

Avoid pairing with

  • Works poorly with
    Model Context Protocol (MCP)

    Older Postgres MCP versions had a statement-stacking SQL injection that bypassed the read-only wrapper. Pin a current version AND run with a least-privilege DB role.

Featured in this stack

The L3 execution stacks that pick this tool as a recommended component, with the one-line note explaining the role it plays in each.

  • Stack · L3·Workstation tier·Role: MCP postgres (structured-knowledge memory)
    Build a memory-enabled local agent stack (May 2026)

    Postgres MCP exposes a structured-knowledge database to the agent — complements vector-based memory (Mem0) by holding facts that need exact lookup. Pin to the current version and run with a least-privilege role; older versions had a SQL-injection escape on the read-only wrapper.

Pros

  • Drop-in Postgres exposure for any MCP client
  • Schema introspection out of the box
  • Read-only mode the default

Cons

  • Historic statement-stacking SQLi escape — pin to current versions
  • Defense-in-depth requires a least-privilege DB role on top of the wrapper
  • Long-running queries can saturate the client side

Compatibility

Operating systems
macOS
Linux
Windows
GPU backends
n/a
LicenseOpen source · free (OSS, MIT)

Get MCP PostgreSQL Server

Official site
https://modelcontextprotocol.io
GitHub
https://github.com/modelcontextprotocol/servers

Frequently asked

Is MCP PostgreSQL Server free?

MCP PostgreSQL Server has a paid tier (free (OSS, MIT)). Check the pricing page for current terms.

What operating systems does MCP PostgreSQL Server support?

MCP PostgreSQL Server supports macOS, Linux, Windows.

Which GPUs work with MCP PostgreSQL Server?

MCP PostgreSQL Server supports n/a. CPU-only inference is also possible but slow.

Reviewed by RunLocalAI Editorial. See our editorial policy for how we evaluate tools.