Is io.github.devopam/mcpg safe to use?

io.github.devopam/mcpg has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.devopam/mcpg?

io.github.devopam/mcpg supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.devopam/mcpg?

io.github.devopam/mcpg is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.devopam/mcpg actively maintained?

io.github.devopam/mcpg is actively maintained — last commit was 7 days ago. It has 8 GitHub stars.

io.github.devopam/mcpg

mcpg

A production-grade PostgreSQL Model Context Protocol (MCP) server.

8 GitHub PyPI

No known CVEs

No license

Actively maintained

Last commit 7d ago

Works with most clients

Transport: stdio, sse, http

0 tools

Grade F

MCPpedia last refreshed this data 2d ago

Edit this pageView history

Data AI / ML

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcpg": {
      "env": {
        "MCPG_DATABASE_URL": "postgresql://user:pass@localhost:5432/mydb"
      },
      "args": [
        "mcpg"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-devopam-mcpg)](https://mcppedia.org/s/io-github-devopam-mcpg)

Read me

What io.github.devopam/mcpg does

A production-grade Model Context Protocol server for PostgreSQL. Lets AI agents safely inspect, query, operate, and tune a Postgres database — over 100 tools spanning catalog introspection, query intelligence, natural-language SQL, structural diffs, hybrid search, graph queries, data movement, live ops, and more.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'mcpg' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

56/100across 5 weighted dimensions

How we score →

0255075100

−44

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcpg against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.devopam/mcpg safe to use?: io.github.devopam/mcpg has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.devopam/mcpg?: io.github.devopam/mcpg supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.devopam/mcpg?: io.github.devopam/mcpg is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.devopam/mcpg actively maintained?: io.github.devopam/mcpg is actively maintained — last commit was 7 days ago. It has 8 GitHub stars.

Similar servers

Others in data / ai-ml

View all →

Supabase MCP Server97

Manage Supabase projects — databases, auth, storage, and edge functions

2.8k 4

PostgreSQL MCP Server96

Query and manage PostgreSQL databases directly from AI assistants

88.9k 1

Sequential Thinking MCP Server96

Dynamic problem-solving through sequential thought chains

88.9k 1

Memory MCP Server96

Persistent memory using a knowledge graph

88.9k 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.devopam/mcpg and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Data AI / ML

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcpg": {
      "env": {
        "MCPG_DATABASE_URL": "postgresql://user:pass@localhost:5432/mydb"
      },
      "args": [
        "mcpg"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-devopam-mcpg)](https://mcppedia.org/s/io-github-devopam-mcpg)

Read me

What io.github.devopam/mcpg does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'mcpg' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

MCPg

A production-grade Model Context Protocol server for PostgreSQL. Lets AI agents safely inspect, query, operate, and tune a Postgres database — 253 tools spanning catalog introspection, query intelligence, natural-language SQL, structural diffs, hybrid search, graph queries, data movement, live ops, and more.

Try it live: point an MCP client — or the MCP Inspector — at the hosted, read-only demo endpoint https://devopam-mcpg-demo.hf.space/mcp. It serves read tools against throwaway demo data; for real use, run MCPg next to your own database (see Quick start).

📍 Listed On

Aspect	MCPg
Safety	Read-only default + AST validation
Transport	stdio + HTTP/SSE
Install	`pip install mcpg`
Postgres Versions	14–19
Key Differentiator	Production observability + multi-tenancy

Why MCPg

Safe by default. Read-only access mode. Every user-supplied SQL statement parses through a validated AST allowlist before execution. Identifier interpolation flows through a strict [A-Za-z_][A-Za-z0-9_]* regex — a design constraint that means user input never reaches the database through string concatenation. Capabilities like DDL, shell, and LISTEN/NOTIFY are off until you opt in. Every tool publishes MCP ToolAnnotations (readOnlyHint, openWorldHint) derived from those same gates, so clients can auto-approve reads and gate writes without guessing.
One server, broad surface. Application data access (queries, search, cursors, NL→SQL) and DBA-grade operations (health checks, index tuning, EXPLAIN analysis, locks, vacuum, dumps, replicas, migrations) in a single MCP server. Agents don't have to switch tools to switch tasks.
PostgreSQL-native everything. No ORM, no abstraction tax — uses psycopg3 directly, speaks every pg_* system view, integrates with TimescaleDB, pgvector, PostGIS, Apache AGE, and pg_stat_statements where they're available, and degrades gracefully when they aren't.
Production-shaped, not demo-shaped. Connection pooling, per-request SET ROLE multi-tenancy, read-replica routing with degraded-host detection, server-side cursors with dedicated connections, rate-limiting, audit trail with regex redaction, PG TLS enforcement on startup, OIDC JWT bearer auth, per-session statement / lock timeouts.
Observability built in. Prometheus /metrics endpoint on the HTTP transport surfaces mcpg_tool_calls_total{tool,status} + mcpg_tool_duration_seconds

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

56/100across 5 weighted dimensions

How we score →

0255075100

−44

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked mcpg against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.devopam/mcpg safe to use?: io.github.devopam/mcpg has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.devopam/mcpg?: io.github.devopam/mcpg supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.devopam/mcpg?: io.github.devopam/mcpg is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.devopam/mcpg actively maintained?: io.github.devopam/mcpg is actively maintained — last commit was 7 days ago. It has 8 GitHub stars.