A secure PostgreSQL MCP server with built-in SSH tunneling that enables AI assistants to connect to databases through bastion hosts automatically, supporting both STDIO and Streamable HTTP transports.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
process.env. You'll be asked to provide them before it can run.AUTH0_AUDIENCE— Yes Auth0 API identifier / audienceAUTH0_DOMAIN— Yes Auth0 tenant domain (e.g., tenant.us.auth0.com)DATABASE_HOST— Yes — Database hostnameDATABASE_NAME— Yes — Database nameDATABASE_PASSWORD— Yes — Database passwordDATABASE_PORT— No 5432 Database portDATABASE_SSL— Auto true or false. Auto-enabled for non-localhost.DATABASE_SSL_CA— Path to CA certificate bundleDATABASE_SSL_REJECT_UNAUTHORIZED— true Set false to allow self-signed certificatesDATABASE_URI— "": "postgresql://user:password@localhost:5432/mydb"DATABASE_USER— Yes — Database usernameMAX_CONCURRENT_QUERIES— 10 Maximum concurrent queriesMAX_ROWS— execute_query Execute SQL with parameterized queries. Results capped by .MCP_ALLOWED_HOSTS— Comma-separated allowed Host headersMCP_ALLOWED_ORIGINS— Comma-separated allowed CORS origins ( for any)MCP_AUTH_MODE— none Authentication mode: none or oauthMCP_HOST— 0.0.0.0 HTTP server bind addressMCP_RESOURCE_DOCUMENTATION— No URL to API documentation (RFC 9728)MCP_SERVER_POOL_SIZE— 4 Server instances for stateless modeMCP_SESSION_CLEANUP_INTERVAL_MS— 300000 Session cleanup intervalMCP_SESSION_TTL_MINUTES— 30 Session TTL for stateful modeMCP_STATELESS— true Stateless mode (each request re-initializes)POOL_DRAIN_TIMEOUT_MS— 5000 Timeout for draining pool during reconnectPORT— 3000 HTTP server portQUERY_TIMEOUT— 30000 Query timeout in millisecondsREAD_ONLY— true Block data modifications. Set false to allow writes.SSH_ENABLED— No false Set true to enable SSH tunnelingSSH_HOST— Yes — SSH server hostnameSSH_KEEPALIVE_INTERVAL— No 10000 Keepalive interval in millisecondsSSH_KNOWN_HOSTS_PATH— No ~/.ssh/known_hosts Custom known_hosts fileSSH_MAX_RECONNECT_ATTEMPTS— No 5 Max reconnect attempts (-1 for unlimited)SSH_PASSWORD— Yes — SSH password (alternative to key)SSH_PORT— No 22 SSH server portSSH_PRIVATE_KEY_PASSPHRASE— No — Passphrase for encrypted keysSSH_PRIVATE_KEY_PATH— Yes — Path to private key fileSSH_STRICT_HOST_KEY— No true Verify host key against known_hostsSSH_TRUST_ON_FIRST_USE— No true Auto-add unknown hosts (when strict is enabled)SSH_USER— Yes — SSH username[](https://m8ven.ai/mcp/zlash65-postgresql-ssh-mcp-144p9r)