Skip to content

Raw values for PostgreSQL (hardened, read-only)

io.github.Eszetael/postgres-mcp-hardened · Registry status: active

Report data on this entry

What the source declared verbatim, unchanged and uninterpreted. The derived values on the overview page are computed from these.

Evidence for this page: The values on this page come from several collections. Each row therefore states its own origin.

Raw values
Description (raw)Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
Source: MCP-Register · collected on 2026-08-26 · self-declared
Environment variables (raw)DATABASE_URL, MCP_STATEMENT_TIMEOUT, MCP_ALLOW_TABLES, MCP_AUDIT_LOG, DATABASE_URL, MCP_ADDR
Source: MCP-Register · collected on 2026-08-10 · self-declared
Required secret variables (raw)DATABASE_URL, DATABASE_URL
Source: MCP-Register · collected on 2026-08-10 · self-declared
Transports (raw)stdio, streamable-http
Source: MCP-Register · collected on 2026-08-10 · self-declared
Path arguments (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-10 · self-declared
Repository (raw)https://github.com/Eszetael/postgres-mcp-hardened
Source: MCP-Register · collected on 2026-08-10 · self-declared
Package registries (raw)npm, oci
Source: MCP-Register · collected on 2026-08-10 · self-declared
Required secret headers (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Path environment variables (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Remote URLs (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Remote hosts (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Registry status message (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
First listed in the registry (raw)2026-09-04
Source: MCP-Register · collected on 2026-09-05 · self-declared
Last changed in the registry (raw)2026-09-04
Source: MCP-Register · collected on 2026-09-05 · self-declared
Schema version of the raw record (raw)https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json
Source: MCP-Register · collected on 2026-08-16 · self-declared
Delivery form (raw)package
Source: MCP-Register · collected on 2026-08-16 · self-declared
Repository platform (raw)github
Source: MCP-Register · collected on 2026-08-16 · self-declared
Repository subfolder (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Package identifiers (raw)ghcr.io/eszetael/postgres-mcp-hardened:0.1.10, postgres-mcp-hardened
Source: MCP-Register · collected on 2026-09-05 · self-declared
Package versions (raw)0.1.10
Source: MCP-Register · collected on 2026-09-05 · self-declared
Runtime hints (raw)npx
Source: MCP-Register · collected on 2026-08-16 · self-declared
Environment variable formats (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Environment variable descriptions (raw)DATABASE_URL=Connection string for a role that cannot write. · DATABASE_URL=Connection string for the role the server connects as. Use a role that cannot write — the server refuses writes twice, but a read-only role is the layer that does not depend on us being correct. `--print-setup-sql` prints the SQL that creates one. · MCP_ADDR=Address to bind, default 127.0.0.1:8080. · MCP_ALLOW_TABLES=Comma-separated allowlist. A table off the list is refused by name, and hiding it inside a CTE, a view or a join does not help. · MCP_AUDIT_LOG=Path to the tamper-evident audit log. Entries are chained by hash and survive a restart; `--verify-audit` checks the chain against an off-host anchor. · MCP_STATEMENT_TIMEOUT=Server-side statement timeout, e.g. `5s`. A question that would pin the database is cancelled by PostgreSQL, not by hope.
Source: MCP-Register · collected on 2026-08-16 · self-declared
Icon formats (raw)confirmed absent
Source: MCP-Register · collected on 2026-08-16 · self-declared
Connection paths (source structure){"packages":[{"registryType":"npm","identifier":"postgres-mcp-hardened","version":"0.1.10","runtimeHint":"npx","transport":"stdio","environment":[{"name":"DATABASE_URL","description":"Connection string for the role the server connects as. Use a role that cannot write — the server refuses writes twice, but a read-only role is the layer that does not depend on us being correct. `--print-setup-sql` prints the SQL that creates one.","required":true,"secret":true},{"name":"MCP_STATEMENT_TIMEOUT","description":"Server-side statement timeout, e.g. `5s`. A question that would pin the database is cancelled by PostgreSQL, not by hope.","required":false,"secret":false},{"name":"MCP_ALLOW_TABLES","description":"Comma-separated allowlist. A table off the list is refused by name, and hiding it inside a CTE, a view or a join does not help.","required":false,"secret":false},{"name":"MCP_AUDIT_LOG","description":"Path to the tamper-evident audit log. Entries are chained by hash and survive a restart; `--verify-audit` checks the chain against an off-host anchor.","required":false,"secret":false}],"additional_arguments_declared":true},{"registryType":"oci","identifier":"ghcr.io/eszetael/postgres-mcp-hardened:0.1.10","transport":"streamable-http","environment":[{"name":"DATABASE_URL","description":"Connection string for a role that cannot write.","required":true,"secret":true},{"name":"MCP_ADDR","description":"Address to bind, default 127.0.0.1:8080.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]}
Source: MCP-Register · collected on 2026-09-08 · self-declared

Position within the directory

How many of the 42,239 published entries carry the same measured value. A reference figure, not an assessment.

All 5 values together are carried by 53 of 42,239 entries.

tracevero · https://tracevero.com/mcp/io-github-eszetael-postgres-mcp-hardened/rohangaben