74
/ 100
29 days ago
glama
YawLabs/postgres-mcp
Query and manage PostgreSQL databases from Claude Code, Cursor, and any MCP client, with read-only by default and built-in schema introspection, EXPLAIN, and performance diagnostics.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
ALLOW_WRITES— EXPLAIN as a first-class tool - text or JSON format, with optional ANALYZE. ANALYZE for non-SELECT statements requires =1 and always rolls back, so the plan is real but the write doesn't persist.config
DATABASE_URL— "": "postgres://user:password@host:5432/dbname"config
POSTGRES_CONNECTION_TIMEOUT_MS— 10000 TCP connect timeout. Without this, a dead host hangs until the OS gives up (~2 minutes).config
POSTGRES_MAX_ROWS— Result truncation - large result sets are capped at (default 1000) with a truncated: true flag, so a stray SELECT FROM events doesn't blow out the model context.config
POSTGRES_MCP_INTEGRATION— DATABASE_URL='postgres://user:pass@host:5432/db' =1 npm run test:integrationconfig
POSTGRES_POOL_MAX— 5 Max pool connections. Set to 1 for single-threaded backends (pglite-socket, PgBouncer transaction mode).config
POSTGRES_SSL_REJECT_UNAUTHORIZED— unset Set to false to skip TLS cert verification (for managed DBs using private-CA certs). Connection is still encrypted.config
POSTGRES_STATEMENT_TIMEOUT_MS— 30000 Per-statement timeout.// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/yawlabs-postgres-mcp-10h055)commit: 3de2b31da1621fc1fb89acca92f6a6b103746177
code hash: e7116afe931c494ecea8455b9b477360f83537af3f4a9f47a9c5f0af73026491
verified: 6/11/2026, 12:09:45 PM