Amazon Redshift MCP Server: Setup for Claude, Cursor and Other Apps

• Lists your Redshift clusters and serverless workgroups

  Finds every provisioned cluster and serverless workgroup you can see, with type, status, configuration and tags. The other tools need the identifier and type it reports.

  Try: “List all my Redshift clusters and workgroups.”

  Network · list_clusters

• Lists the databases in a cluster

  Returns each database with its owner, type (local or shared) and access details.

  Try: “Which databases are on the analytics cluster?”

  Network · list_databases

• Lists the schemas in a database

  Returns schema names, owners and types, including external schemas.

  Try: “Show the schemas in the dev database on analytics-cluster.”

  Network · list_schemas

• Lists the tables and views in a schema

  Returns tables, views and external tables in a schema with their type and permissions.

  Try: “What tables are in the public schema of dev?”

  Network · list_tables

• Shows a table's columns and types

  Returns each column with its data type, nullability, default and length limits.

  Try: “Show the columns of the users table.”

  Network · list_columns

• Runs a SQL statement on a cluster

  Runs one SQL statement and returns the rows. By default it is read-only and rejects writes. With read-write mode on, it can change data and asks you to approve each risky statement first.

  Try: “How many customers signed up last month? Use the production cluster.”

  Network · execute_query

• Checks a cluster for health and setup problems

  Runs diagnostic queries on system views and returns findings with a recommendation for each. The database user needs the sys:monitor role.

  Try: “Review my analytics cluster and tell me what to fix.”

  Network · review_cluster

Watch out for

• Read-write mode can change and delete data

  It is off by default. If you turn it on, use a dedicated database user with only the privileges the task needs, never an admin. github.com

• Query results go to your AI provider

  Rows the assistant reads are sent to the model. Grant the database user access only to tables you can share. github.com

• Logs can contain your SQL

  At debug level the server logs full statements. Keep LOG_LEVEL at its default and treat any log file as sensitive. github.com

Security advisories