PostgreSQL (hardened, read-only)
io.github.Eszetael/postgres-mcp-hardened · Status: active
If you find your own account name here: write informally to German.saas@web.de, stating the identifier concerned. No reason has to be given. How to object
- Registry name
io.github.Eszetael/postgres-mcp-hardened- Package coordinate
npm:postgres-mcp-hardened- Version
0.1.6- Listed in the registry
- 2026-08-15
- Changed in the registry
- 2026-08-15
- First seen by tracevero
- 2026-08-10
- Vendor's website
- https://github.com/Eszetael/postgres-mcp-hardened
Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
Vendor's own description, untranslated and unverified
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin. What the confidence levels mean
Measured values
| Credentials required | yes Raw declaration – Required secret variables (raw): DATABASE_URL, DATABASE_URL Raw declaration – Required secret headers (raw): confirmed absent Source: MCP-Register · collected on 2026-08-10 · derived |
|---|---|
| Execution location | local Raw declaration – Transports (raw): stdio, streamable-http Source: MCP-Register · collected on 2026-08-10 · derived |
| Path argument present | no Raw declaration – Path arguments (raw): confirmed absent Raw declaration – Path environment variables (raw): confirmed absent Source: MCP-Register · collected on 2026-08-10 · derived |
| Repository URL listed | yes Raw declaration – Repository (raw): https://github.com/Eszetael/postgres-mcp-hardened Source: MCP-Register · collected on 2026-08-10 · derived |
| Version | 0.1.6 Source: MCP-Register · collected on 2026-08-16 · self-declared |
Position within the holdings
How many of the 21,996 published entries carry the same measured value. A reference figure, not an assessment.
- Credentials requiredyes1,144 of 21,996 carry this value (5.2 %)View these entries
- Execution locationlocal1,283 of 21,996 carry this value (5.8 %)View these entries
- Path argument presentno6,510 of 21,996 carry this value (30 %)View these entries
- Repository URL listedyes3,217 of 21,996 carry this value (15 %)View these entries
All 4 values together are carried by 366 of 21,996 entries.
The source's raw values23
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin.
| Environment variables (raw) | DATABASE_URL, MCP_STATEMENT_TIMEOUT, MCP_ALLOW_TABLES, MCP_AUDIT_LOG, DATABASE_URL, MCP_ADDR Source: MCP-Register · collected on 2026-08-10 · self-declared |
|---|---|
| Required secret variables (raw) | DATABASE_URL, DATABASE_URL Source: MCP-Register · collected on 2026-08-10 · self-declared |
| Transports (raw) | stdio, streamable-http Source: MCP-Register · collected on 2026-08-10 · self-declared |
| Path arguments (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-10 · self-declared |
| Repository (raw) | https://github.com/Eszetael/postgres-mcp-hardened Source: MCP-Register · collected on 2026-08-10 · self-declared |
| Package registries (raw) | npm, oci Source: MCP-Register · collected on 2026-08-10 · self-declared |
| Required secret headers (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Path environment variables (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Remote URLs (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Remote hosts (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Registry status message (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| First listed in the registry (raw) | 2026-08-15 Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Last changed in the registry (raw) | 2026-08-15 Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Delivery form (raw) | paket Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Repository platform (raw) | github Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Repository subfolder (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Package identifiers (raw) | ghcr.io/eszetael/postgres-mcp-hardened:0.1.6, postgres-mcp-hardened Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Package versions (raw) | 0.1.6 Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Runtime hints (raw) | npx Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Environment variable formats (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Environment variable descriptions (raw) | DATABASE_URL=Connection string for a role that cannot write. · DATABASE_URL=Connection string for the role the server connects as. Use a role that cannot write — the server refuses writes twice, but a read-only role is the layer that does not depend on us being correct. `--print-setup-sql` prints the SQL that creates one. · MCP_ADDR=Address to bind, default 127.0.0.1:8080. · MCP_ALLOW_TABLES=Comma-separated allowlist. A table off the list is refused by name, and hiding it inside a CTE, a view or a join does not help. · MCP_AUDIT_LOG=Path to the tamper-evident audit log. Entries are chained by hash and survive a restart; `--verify-audit` checks the chain against an off-host anchor. · MCP_STATEMENT_TIMEOUT=Server-side statement timeout, e.g. `5s`. A question that would pin the database is cancelled by PostgreSQL, not by hope. Source: MCP-Register · collected on 2026-08-16 · self-declared |
| Icon formats (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-16 · self-declared |
Changes
| 2026-08-16 | Version: 0.1.5 → 0.1.6 |
|---|---|
| 2026-08-16 | Last changed in the registry (raw): – → 2026-08-15 |
| 2026-08-16 | First listed in the registry (raw): – → 2026-08-15 |
| 2026-08-16 | Registry status message (raw): – → – |
| 2026-08-16 | Schema version of the raw record (raw): – → https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json |
| 2026-08-16 | Icon formats (raw): – → – |
| 2026-08-16 | Environment variable descriptions (raw): – → DATABASE_URL=Connection string for a role that cannot write. · DATABASE_URL=Connection string for the role the server connects as. Use a role that cannot write — the server refuses writes twice, but a read-only role is the layer that does not depend on us being correct. `--print-setup-sql` prints the SQL that creates one. · MCP_ADDR=Address to bind, default 127.0.0.1:8080. · MCP_ALLOW_TABLES=Comma-separated allowlist. A table off the list is refused by name, and hiding it inside a CTE, a view or a join does not help. · MCP_AUDIT_LOG=Path to the tamper-evident audit log. Entries are chained by hash and survive a restart; `--verify-audit` checks the chain against an off-host anchor. · MCP_STATEMENT_TIMEOUT=Server-side statement timeout, e.g. `5s`. A question that would pin the database is cancelled by PostgreSQL, not by hope. |
| 2026-08-16 | Environment variable formats (raw): – → – |
| 2026-08-16 | Delivery form (raw): – → paket |
| 2026-08-16 | Remote hosts (raw): – → – |
These are the 10 most recent changes to this entry. Full history
tracevero · https://tracevero.com/en/mcp/io-github-eszetael-postgres-mcp-hardened