Postgres MCP servers: which one to use

Q: How do I make Postgres MCP Pro read-only?

Start it with --access-mode=restricted. Queries then run in read-only transactions with a 30-second limit. The default is unrestricted, which can change your data.

No official server exists, so pick by need. Use your host's server on Supabase, Neon or AWS, or a local one for tuning or read-only safety.

Servers: 116; active
Official: 3; by PostgreSQL
Hosted: 20; nothing to install
Local: 79; runs on your machine
OAuth: 1; sign in, no key

There is no single official Postgres MCP server, so pick one by what you need. The old reference server from the MCP project is archived, and its read-only mode can be bypassed to delete data. Whichever you choose, connect it with a database user that can only read. Read-only switches in several servers have been bypassed, so that database role is your real guard.

Good for

Developers who want Claude Code or Cursor to explore a schema and run queries on their own Postgres
Anyone tracking down a slow query or a missing index
Teams whose database lives on Supabase, Neon, or AWS RDS and Aurora
Teams who want an assistant to read data without being able to change it

Which PostgreSQL MCP server to use

Use your host's server if your database is on Supabase or Neon. For your own Postgres, pick Postgres MCP Pro for tuning or pgEdge to be read-only by default, and never the archived reference server.

Server	Runs	Read-only by default	Read-only option	Sign-in	GitHub stars
For PostgreSQL
Postgres MCP Pro	Local	No	Restricted mode	Connection string	–
Neon	Hosted	No	URL or sign-in	Account or key	659
pgEdge	Local	Yes	Default	–	243
AWS Labs Postgres	Local	Yes	Default	AWS profile	–
Google MCP Toolbox	Local	–	–	Env variables	16.8K
DBHub	Local	–	Read-only mode	Connection string	3.8K
Reference server, archived	Local	Bypassable	–	Connection string	–
Other tools for the same job
SupabaseFor Supabase	HostedLocal	No	URL setting	Account	3K
Microsoft Postgres	Local	No	Profile setting	Saved profile	72

All PostgreSQL MCP servers

116 active · 3 official · official first, then by GitHub stars

Show all 116

Questions

Is there an official PostgreSQL MCP server?

No. The PostgreSQL project does not publish one. The closest thing was the MCP project's reference server, which is now archived and has an unfixed read-only bypass.

Is the old reference Postgres MCP server safe?

No. A query that starts with COMMIT ends its read-only transaction, so an agent or a hidden prompt can drop your tables, and the archived @modelcontextprotocol/server-postgres package will not be patched. It still gets about 180,000 downloads a week, so check your config for it.

Which Postgres MCP is read-only?

pgEdge and the AWS Labs server for Aurora and RDS are read-only by default. Postgres MCP Pro, Supabase, Neon and Microsoft's server each have a read-only switch you must turn on. Pair any of them with a database user that can only read.

Is a server's read-only mode enough protection?

No. pgEdge, DBHub and the AWS Labs server all had read-only bypasses fixed in 2026. Connect with a database role that can only run SELECT, as Claude Code's and Google's docs advise.

Which one should I use for Supabase or Neon?

Use the host's own server. Supabase and Neon each run a hosted server you sign in to in the browser, with extra tools for branches and migrations. Both have a read-only switch, and Neon says its server is for development and testing, not production.

Which Postgres MCP server tunes indexes?

Postgres MCP Pro. It runs health checks, suggests indexes and tests them with hypothetical-index query plans before you create anything. Google's MCP Toolbox has query plan, lock and bloat tools, and Neon reports slow queries and unused indexes.

How do I make Postgres MCP Pro read-only?

Start it with --access-mode=restricted. Queries then run in read-only transactions with a 30-second limit. The default is unrestricted, which can change your data.

Which MCP server does Claude Code use for Postgres?

Claude Code's MCP docs use DBHub as their Postgres example. They also tell you to put a read-only database user in the connection string.

Can I use a Postgres MCP server with AWS RDS or Aurora?

Yes. AWS Labs publishes a server for Aurora PostgreSQL and RDS PostgreSQL that connects through the RDS Data API or a direct connection. Use version 1.1.7 or later, which fixed a critical read-only bypass.

Is there a hosted Postgres MCP server with sign-in?

Only if your database lives on a platform. Supabase and Neon each host one with browser sign-in. For your own Postgres, the servers run on your machine with a connection string.