pgops
Local package path declaredCredentials listedRepository declared by sourceUpdated 2026-09-01
io.github.arzharch/pgops-mcp · Registry status: active
At a glance
Safe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers
Vendor's own description, untranslated and unverified
- Execution location
- Local package path declaredMCP-Register · 2026-08-27
- Required secrets declared
- Credentials listedMCP-Register · 2026-08-27
- Declared version and change
0.1.9· Source-reported change date 2026-09-01MCP-Register · 2026-09-02- Repository as declared
- github.com/arzharch/pgops-mcpMCP-Register · 2026-08-27
- Configuration
- can be built from the disclosed start template
Inspect connection paths and prerequisites
Related categories
- MCP servers for databases343
- MCP servers with declared required secrets6,113
- Locally executed MCP servers17,143
- MCP servers with a repository URL30,309
- Local MCP servers with a repository URL16,232
- Local MCP servers with declared required secrets3,840
6 of 10 categories. All categories in the segment catalogue
Page last changed:
Sources and collection
- Runs
- Local package path declared
- Credentials
- Credentials listed
- Registry record changed
- 2026-09-01
- Setup
- Template available
- Registry name
io.github.arzharch/pgops-mcp- Package coordinate
pypi:pgops-mcp- Declared version
0.1.9- Source-reported listing date
- 2026-09-01
- Source-reported change date
- 2026-09-01
- First seen by tracevero
- 2026-08-27
- Vendor's website
- https://github.com/arzharch/pgops-mcp
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin. What the confidence levels mean
Measured values
| Required secrets declared | Credentials listed yes Original data – Required secret variables (raw): PGOPS_DSN, PGOPS_DSN Original data – Required secret headers (raw): confirmed absent Source: MCP-Register · collected on 2026-08-27 · derived |
|---|---|
| Execution location | Local package path declared local Original data – Transports (raw): stdio, stdio Source: MCP-Register · collected on 2026-08-27 · derived |
| Path argument present | no Original data – Path arguments (raw): confirmed absent Original data – Path environment variables (raw): confirmed absent Source: MCP-Register · collected on 2026-08-27 · derived |
| Repository URL listed | Repository declared by source yes Original data – Repository (raw): https://github.com/arzharch/pgops-mcp Source: MCP-Register · collected on 2026-08-27 · derived |
| Field of use, derived from the vendor description | Databases Original data – Description (raw): Safe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers Source: MCP-Register · collected on 2026-08-27 · derived |
| Declared version | 0.1.9 Source: MCP-Register · collected on 2026-09-02 · self-declared |
What is measured is what a manifest declares, not what a piece of software does. This registry fetches no repository URL, no endpoint and no package index; nothing here is verified. Which value comes from which source, and by which rule it was formed, is set out in the Methodology.
Source data25
Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin.
| Description (raw) | Safe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers Source: MCP-Register · collected on 2026-08-27 · self-declared |
|---|---|
| Environment variables (raw) | PGOPS_DSN, PGOPS_READONLY_DSN, PGOPS_READ_ONLY, PGOPS_APPROVAL_MODE, PGOPS_AUDIT_LOG, PGOPS_DEFAULT_TIMEOUT_MS, PGOPS_MAX_TIMEOUT_MS, PGOPS_DEFAULT_ROW_LIMIT, PGOPS_DSN, PGOPS_READ_ONLY, PGOPS_AUDIT_LOG Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Required secret variables (raw) | PGOPS_DSN, PGOPS_DSN Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Transports (raw) | stdio, stdio Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Path arguments (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Repository (raw) | https://github.com/arzharch/pgops-mcp Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Package registries (raw) | oci, pypi Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Required secret headers (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Path environment variables (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Remote URLs (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Remote hosts (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Registry status message (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| First listed in the registry (raw) | 2026-09-01 Source: MCP-Register · collected on 2026-09-02 · self-declared |
| Last changed in the registry (raw) | 2026-09-01 Source: MCP-Register · collected on 2026-09-02 · self-declared |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Delivery form (raw) | package Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Repository platform (raw) | github Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Repository subfolder (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Package identifiers (raw) | ghcr.io/arzharch/pgops-mcp:0.1.9, pgops-mcp Source: MCP-Register · collected on 2026-09-02 · self-declared |
| Package versions (raw) | 0.1.9 Source: MCP-Register · collected on 2026-09-02 · self-declared |
| Runtime hints (raw) | uvx Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Environment variable formats (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Environment variable descriptions (raw) | PGOPS_APPROVAL_MODE=Set to 1 to register container.restart and container.exec. Off by default: Docker socket access is root-equivalent on the host. · PGOPS_AUDIT_LOG=Path to the append-only JSONL audit log. · PGOPS_AUDIT_LOG=Path to the audit log inside the container. Mount a volume at this path or the log dies with the container. · PGOPS_DEFAULT_ROW_LIMIT=Rows returned by query.read when the caller does not specify a limit. · PGOPS_DEFAULT_TIMEOUT_MS=Statement timeout applied to every query unless a tool call overrides it. · PGOPS_DSN=PostgreSQL connection string for the database to operate on. · PGOPS_DSN=PostgreSQL connection string. From inside a container, localhost is the container itself — use host.docker.internal or the compose service name. · PGOPS_MAX_TIMEOUT_MS=Ceiling a caller-supplied timeout is clamped to. · PGOPS_READONLY_DSN=Optional separate DSN for the read-only pool. Use a role with no write grants to enforce read-only at the database rather than only in the server. · PGOPS_READ_ONLY=Set to 1 to withhold every mutating tool. · PGOPS_READ_ONLY=Set to 1 to withhold every mutating tool. Write tools are not registered at all, so an agent cannot call them. Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Icon formats (raw) | confirmed absent Source: MCP-Register · collected on 2026-08-27 · self-declared |
| Connection paths (source structure) | {"packages":[{"registryType":"pypi","identifier":"pgops-mcp","version":"0.1.9","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"PGOPS_DSN","description":"PostgreSQL connection string for the database to operate on.","required":true,"secret":true},{"name":"PGOPS_READONLY_DSN","description":"Optional separate DSN for the read-only pool. Use a role with no write grants to enforce read-only at the database rather than only in the server.","required":false,"secret":true},{"name":"PGOPS_READ_ONLY","description":"Set to 1 to withhold every mutating tool. Write tools are not registered at all, so an agent cannot call them.","required":false,"secret":false},{"name":"PGOPS_APPROVAL_MODE","description":"Set to 1 to register container.restart and container.exec. Off by default: Docker socket access is root-equivalent on the host.","required":false,"secret":false},{"name":"PGOPS_AUDIT_LOG","description":"Path to the append-only JSONL audit log.","required":false,"secret":false},{"name":"PGOPS_DEFAULT_TIMEOUT_MS","description":"Statement timeout applied to every query unless a tool call overrides it.","required":false,"secret":false},{"name":"PGOPS_MAX_TIMEOUT_MS","description":"Ceiling a caller-supplied timeout is clamped to.","required":false,"secret":false},{"name":"PGOPS_DEFAULT_ROW_LIMIT","description":"Rows returned by query.read when the caller does not specify a limit.","required":false,"secret":false}],"additional_arguments_declared":false},{"registryType":"oci","identifier":"ghcr.io/arzharch/pgops-mcp:0.1.9","transport":"stdio","environment":[{"name":"PGOPS_DSN","description":"PostgreSQL connection string. From inside a container, localhost is the container itself — use host.docker.internal or the compose service name.","required":true,"secret":true},{"name":"PGOPS_READ_ONLY","description":"Set to 1 to withhold every mutating tool.","required":false,"secret":false},{"name":"PGOPS_AUDIT_LOG","description":"Path to the audit log inside the container. Mount a volume at this path or the log dies with the container.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} Source: MCP-Register · collected on 2026-09-08 · self-declared |
Embed this badge
Paste this line into a README of your own. The badge states how many values the registry holds for the entry and when it last looked, and it links back to this page.
[](https://tracevero.com/mcp/io-github-arzharch-pgops-mcp)
The image is drawn again on every request, so it always reports the current state while the pasted line stays as it is. It carries no rating and no traffic light – only the two measured figures.
Changes
| 2026-09-08 | Connection paths (source structure): – → {"packages":[{"registryType":"pypi","identifier":"pgops-mcp","version":"0.1.9","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"PGOPS_DSN","description":"PostgreSQL connection string for the database to operate on.","required":true,"secret":true},{"name":"PGOPS_READONLY_DSN","description":"Optional separate DSN for the read-only pool. Use a role with no write grants to enforce read-only at the database rather than only in the server.","required":false,"secret":true},{"name":"PGOPS_READ_ONLY","description":"Set to 1 to withhold every mutating tool. Write tools are not registered at all, so an agent cannot call them.","required":false,"secret":false},{"name":"PGOPS_APPROVAL_MODE","description":"Set to 1 to register container.restart and container.exec. Off by default: Docker socket access is root-equivalent on the host.","required":false,"secret":false},{"name":"PGOPS_AUDIT_LOG","description":"Path to the append-only JSONL audit log.","required":false,"secret":false},{"name":"PGOPS_DEFAULT_TIMEOUT_MS","description":"Statement timeout applied to every query unless a tool call overrides it.","required":false,"secret":false},{"name":"PGOPS_MAX_TIMEOUT_MS","description":"Ceiling a caller-supplied timeout is clamped to.","required":false,"secret":false},{"name":"PGOPS_DEFAULT_ROW_LIMIT","description":"Rows returned by query.read when the caller does not specify a limit.","required":false,"secret":false}],"additional_arguments_declared":false},{"registryType":"oci","identifier":"ghcr.io/arzharch/pgops-mcp:0.1.9","transport":"stdio","environment":[{"name":"PGOPS_DSN","description":"PostgreSQL connection string. From inside a container, localhost is the container itself — use host.docker.internal or the compose service name.","required":true,"secret":true},{"name":"PGOPS_READ_ONLY","description":"Set to 1 to withhold every mutating tool.","required":false,"secret":false},{"name":"PGOPS_AUDIT_LOG","description":"Path to the audit log inside the container. Mount a volume at this path or the log dies with the container.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} |
|---|---|
| 2026-09-02 | Declared version: 0.1.7 → 0.1.9 |
| 2026-09-02 | Last changed in the registry (raw): 2026-08-28 → 2026-09-01 |
These are the 3 most recent changes to this entry. Full history
tracevero · https://tracevero.com/mcp/io-github-arzharch-pgops-mcp