No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by stuzero · MCP Server · ★ 540
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is pg-mcp-server safe to install? View the security audit →
PostgreSQL Model Context Protocol (PG-MCP) Server A Model Context Protocol (MCP) server for PostgreSQL databases with enhanced capabilities for AI agents. More info on the pg-mcp project here: https://stuzero.github.io/pg-mcp/ Overview PG-MCP is a server implementation of the Model Context Protocol for PostgreSQL databases. It provides a comprehensive API for AI agents to discover, connect to, query, and understand PostgreSQL databases through MCP's resource-oriented architecture. This implementation builds upon and extends the reference Postgres MCP implementation with several key enhancements: Full Server Implementation: Built as a complete server with SSE transport for production use Multi-database Support: Connect to multiple PostgreSQL databases simultaneously Rich Catalog Information: Extracts and exposes table/column descriptions from the database catalog Extension Context: Provides detailed YAML-based knowledge about PostgreSQL extensions like PostGIS and pgvector Query Explanation: Includes a dedicated tool for analyzing query execution plans Robust Connection Management: Proper lifecycle for database connections with secure connection ID handling Features Connection...
| Stars | 540 |
| Forks | 41 |
| Language | Python |
| Category | MCP Server |
| License | MIT |
| Quality Score | 65.8791593063549/100 |
| Open Issues | 10 |
| Last Updated | 2025-09-10 |
| Created | 2025-03-25 |
| Platforms | mcp, python |
| Est. Tokens | ~8k |
These tools work well together with pg-mcp-server for enhanced workflows:
Explore other popular mcp server tools:
pg-mcp-server is an open-source mcp server by stuzero with 540 GitHub stars.
pg-mcp-server is primarily written in Python.
You can find installation instructions and usage details in the pg-mcp-server GitHub repository at github.com/stuzero/pg-mcp-server. The project has 540 stars and 41 forks, indicating an active community.
pg-mcp-server is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: