Raw values for PostgreSQL
io.github.antonorlov/mcp-postgres-server · Registry status: active
What the source declared verbatim, unchanged and uninterpreted. The derived values on the overview page are computed from these.
Evidence for this page · Source: MCP-Register · collected on 2026-09-15
Every value below comes from it. Where one differs, its origin is stated on its row.
| Description (raw) | MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion. |
|---|---|
| Environment variables (raw) | DATABASE_URL, PG_HOST, PG_PORT, PG_USER, PG_PASSWORD, PG_DATABASE, PG_ALLOW_WRITE, PG_SSLMODE, PG_SSL_CA, PG_ENABLE_RUNTIME_CONNECT, PG_MAX_RESULT_BYTES, PG_STATEMENT_TIMEOUT, PG_CONNECT_TIMEOUT, PG_SSH_HOST, PG_SSH_PORT, PG_SSH_USER, PG_SSH_PRIVATE_KEY, PG_SSH_PASSPHRASE, PG_SSH_AGENT, PG_SSH_PASSWORD, PG_SSH_FINGERPRINT, PG_SSH_KEEPALIVE_INTERVAL |
| Required secret variables (raw) | confirmed absent |
| Transports (raw) | stdio |
| Path arguments (raw) | confirmed absent |
| Repository (raw) | https://github.com/antonorlov/mcp-postgres-server |
| Package registries (raw) | npm |
| Required secret headers (raw) | confirmed absent |
| Path environment variables (raw) | PG_SSH_PRIVATE_KEY, PG_SSL_CA |
| Remote URLs (raw) | confirmed absent |
| Remote hosts (raw) | confirmed absent |
| Registry status message (raw) | confirmed absent |
| First listed in the registry (raw) | 2026-09-14 |
| Last changed in the registry (raw) | 2026-09-14 |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json |
| Delivery form (raw) | package |
| Repository platform (raw) | github |
| Repository subfolder (raw) | confirmed absent |
| Package identifiers (raw) | mcp-postgres-server |
| Package versions (raw) | 0.3.1 |
| Runtime hints (raw) | npx |
| Environment variable formats (raw) | boolean, filepath, number, string |
| Environment variable descriptions (raw) | DATABASE_URL=Full connection string (preferred). Supports sslmode in the URL. · PG_ALLOW_WRITE=When true, execute performs writes and reads are sent directly. Off (default) is read-only: execute refuses writes and each read runs in a READ ONLY transaction. · PG_CONNECT_TIMEOUT=Timeout in milliseconds for a single connect attempt (raise it for slow links or SSH tunnels). · PG_DATABASE=Database name. · PG_ENABLE_RUNTIME_CONNECT=Register the connect_db tool (runtime credential switching). · PG_HOST=Database host (fallback when DATABASE_URL is not set). · PG_MAX_RESULT_BYTES=Byte budget for a query result sent to the model. Whole rows are kept while they fit; over the budget returnedRows < rowCount and truncated is true. · PG_PASSWORD=Database password. · PG_PORT=Database port. · PG_SSH_AGENT=true to use the ambient agent (SSH_AUTH_SOCK), or an explicit socket path / Windows named pipe. · PG_SSH_FINGERPRINT=Pinned host-key fingerprint (SHA256:...). Host-key verification is mandatory and set only this way: without it the tunnel refuses to connect. Get it with ssh-keygen -lF host. · PG_SSH_HOST=SSH bastion host. Setting it enables tunneling: the server reaches the database only through an SSH tunnel to this host. Needs the ssh2 optional dependency. · PG_SSH_KEEPALIVE_INTERVAL=SSH keepalive interval in ms; the tunnel drops after 3 unanswered keepalives, and the next call reconnects. · PG_SSH_PASSPHRASE=Passphrase for the private key, if encrypted. · PG_SSH_PASSWORD=SSH login password. Opt-in; a key or agent takes precedence. Prefer keys, a bastion often disables password auth. · PG_SSH_PORT=SSH bastion port. · PG_SSH_PRIVATE_KEY=Path to a private key file. If unset, auth falls back like ssh: a running agent (SSH_AUTH_SOCK), then a default key (~/.ssh/id_ed25519, id_rsa, id_ecdsa). · PG_SSH_USER=SSH username. · PG_SSLMODE=TLS mode. require/allow/prefer encrypt without verifying the certificate; verify-ca/verify-full verify it (supply a CA via PG_SSL_CA). Unlike libpq, allow/prefer do not fall back to plaintext, so a server without TLS needs disable. · PG_SSL_CA=Path to a CA certificate file. Setting it by itself implies verify-full. · PG_STATEMENT_TIMEOUT=Statement timeout in milliseconds, applied to every session. · PG_USER=Database user. |
| Icon formats (raw) | confirmed absent |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"mcp-postgres-server","version":"0.3.1","runtimeHint":"npx","transport":"stdio","environment":[{"name":"DATABASE_URL","description":"Full connection string (preferred). Supports sslmode in the URL.","format":"string","required":false,"secret":true},{"name":"PG_HOST","description":"Database host (fallback when DATABASE_URL is not set).","format":"string","required":false,"secret":false},{"name":"PG_PORT","description":"Database port.","format":"number","required":false,"secret":false},{"name":"PG_USER","description":"Database user.","format":"string","required":false,"secret":false},{"name":"PG_PASSWORD","description":"Database password.","format":"string","required":false,"secret":true},{"name":"PG_DATABASE","description":"Database name.","format":"string","required":false,"secret":false},{"name":"PG_ALLOW_WRITE","description":"When true, execute performs writes and reads are sent directly. Off (default) is read-only: execute refuses writes and each read runs in a READ ONLY transaction.","format":"boolean","required":false,"secret":false},{"name":"PG_SSLMODE","description":"TLS mode. require/allow/prefer encrypt without verifying the certificate; verify-ca/verify-full verify it (supply a CA via PG_SSL_CA). Unlike libpq, allow/prefer do not fall back to plaintext, so a server without TLS needs disable.","format":"string","required":false,"secret":false},{"name":"PG_SSL_CA","description":"Path to a CA certificate file. Setting it by itself implies verify-full.","format":"filepath","required":false,"secret":false},{"name":"PG_ENABLE_RUNTIME_CONNECT","description":"Register the connect_db tool (runtime credential switching).","format":"boolean","required":false,"secret":false},{"name":"PG_MAX_RESULT_BYTES","description":"Byte budget for a query result sent to the model. Whole rows are kept while they fit; over the budget returnedRows < rowCount and truncated is true.","format":"number","required":false,"secret":false},{"name":"PG_STATEMENT_TIMEOUT","description":"Statement timeout in milliseconds, applied to every session.","format":"number","required":false,"secret":false},{"name":"PG_CONNECT_TIMEOUT","description":"Timeout in milliseconds for a single connect attempt (raise it for slow links or SSH tunnels).","format":"number","required":false,"secret":false},{"name":"PG_SSH_HOST","description":"SSH bastion host. Setting it enables tunneling: the server reaches the database only through an SSH tunnel to this host. Needs the ssh2 optional dependency.","format":"string","required":false,"secret":false},{"name":"PG_SSH_PORT","description":"SSH bastion port.","format":"number","required":false,"secret":false},{"name":"PG_SSH_USER","description":"SSH username.","format":"string","required":false,"secret":false},{"name":"PG_SSH_PRIVATE_KEY","description":"Path to a private key file. If unset, auth falls back like ssh: a running agent (SSH_AUTH_SOCK), then a default key (~/.ssh/id_ed25519, id_rsa, id_ecdsa).","format":"filepath","required":false,"secret":false},{"name":"PG_SSH_PASSPHRASE","description":"Passphrase for the private key, if encrypted.","format":"string","required":false,"secret":true},{"name":"PG_SSH_AGENT","description":"true to use the ambient agent (SSH_AUTH_SOCK), or an explicit socket path / Windows named pipe.","format":"string","required":false,"secret":false},{"name":"PG_SSH_PASSWORD","description":"SSH login password. Opt-in; a key or agent takes precedence. Prefer keys, a bastion often disables password auth.","format":"string","required":false,"secret":true},{"name":"PG_SSH_FINGERPRINT","description":"Pinned host-key fingerprint (SHA256:...). Host-key verification is mandatory and set only this way: without it the tunnel refuses to connect. Get it with ssh-keygen -lF host.","format":"string","required":false,"secret":false},{"name":"PG_SSH_KEEPALIVE_INTERVAL","description":"SSH keepalive interval in ms; the tunnel drops after 3 unanswered keepalives, and the next call reconnects.","format":"number","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} |
Position within the directory
How many of the 41,867 published entries carry the same measured value. A reference figure, not an assessment.
- Required secrets declaredno35,800 of 41,867 carry this value (86 %)View these entries
- Execution locationlocal17,056 of 41,867 carry this value (41 %)View these entries
- Path argument presentyes498 of 41,867 carry this value (1.2 %)View these entries
- Repository URL listedyes30,107 of 41,867 carry this value (72 %)View these entries
- Field of use, derived from the vendor descriptionDatabases338 of 41,867 carry this value (0.8 %)View these entries
- Field of use, derived from the vendor descriptionInfrastructure382 of 41,867 carry this value (0.9 %)View these entries
All 5 values together are carried by 8 of 41,867 entries.
tracevero · https://tracevero.com/mcp/io-github-antonorlov-mcp-postgres-server/rohangaben