Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y postgres-mcp-hardened
MCP client config
{
"mcpServers": {
"postgresql-hardened-read-only": {
"command": "npx",
"args": [
"-y",
"postgres-mcp-hardened"
]
}
}
}Run
docker run -i --rm ghcr.io/eszetael/postgres-mcp-hardened:0.1.10
MCP client config
{
"mcpServers": {
"postgresql-hardened-read-only": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eszetael/postgres-mcp-hardened:0.1.10"
]
}
}
}