Microsoft Postgres MCP Setup for Claude Code, Cursor and Other Apps

• Runs a read-only SQL query

  Runs a SELECT-style query against the connected database and returns the rows. It is the read-only way to look at your data.

  Try: “Show me the 10 most recent orders.”

  Network · postgres_mcp_query

• Shows how tables and other objects are defined

  Returns the CREATE scripts for tables, indexes, functions, sequences and similar objects, so the assistant understands your schema.

  Try: “Show me the definition of the orders table and its indexes.”

  Network · postgres_mcp_db_context

• Lists the databases on the server

  Returns the databases available on the connected PostgreSQL server.

  Try: “Which databases are on this server?”

  Network · postgres_mcp_list_databases

• Collects performance numbers from the server

  Gathers a group of performance and diagnostic metrics from the database to help find what is slowing it down.

  Try: “What is slowing down my database right now?”

  Network · postgres_mcp_get_metrics_group

• Checks which diagnostics this server supports

  Probes the connected database to see which diagnostic features are available before asking for metrics.

  Try: “Which diagnostics can you run on this database?”

  Network · postgres_mcp_get_server_capabilities

• Runs SQL that changes the database

  Runs DDL and DML such as CREATE, ALTER, INSERT and UPDATE, and anything else the database user is allowed to do, including deleting data. Blocked when the profile is set to read-only.

  Try: “Add an index on orders.customer_id.”

  Delete · postgres_mcp_modify

• Describes the columns in a CSV file

  Reads a CSV file you point to and returns its structure as YAML. It can only read the startup folder and paths you approve.

  Try: “Describe the structure of /data/orders.csv.”

  Files · postgres_mcp_describe_csv

• Loads a CSV file into a table

  Imports a CSV into a table using PostgreSQL COPY. It reads only from the startup folder and approved paths.

  Try: “Load /data/orders.csv into the orders table.”

  Write · postgres_mcp_bulk_load_csv

• Lists your saved database connections

  Shows the connection profiles saved on your machine, plus one from the environment if you set it.

  Try: “Which database connections do I have saved?”

  Files · postgres_mcp_list_connection_profiles

• Opens a connection to a saved profile

  Opens a pooled connection to the database using a saved profile, so later queries can run.

  Try: “Connect to my local profile.”

  Network · postgres_mcp_connect

• Closes a database connection

  Closes an open connection.

  Try: “Disconnect from the database.”

  Network · postgres_mcp_disconnect

• Saves a new database connection profile

  Adds a named profile, optionally read-only. It never takes a password, which you set separately so it goes to your system keyring.

  Try: “Add a read-only profile called staging for this connection string.”

  Write · postgres_mcp_add_connection

• Deletes a saved connection profile

  Removes a profile from your machine and tries to clear its stored password from the keyring.

  Try: “Remove the old staging profile.”

  Delete · postgres_mcp_remove_connection

Watch out for

• New connections allow writes and deletes

  A profile without read-only access mode lets the assistant run DDL and DML as your database user. Set the access mode to ro and use a read-only database role. github.com

• The server does not limit what SQL runs

  The docs say it passes requests to PostgreSQL and cannot tell a tricked request from a real one. Your database permissions and your client's approval prompts are the real protection. github.com

• CSV tools read local files

  By default they can read the folder the server started in and any path you approve. Start it from a folder with no sensitive files, or set the disable-working-folder option. github.com

• It sends usage telemetry by default

  The docs say it sends pseudonymous machine and session IDs with tool names, durations and outcomes, but no query text or data. Turn it off with the no-telemetry flag on the run command. github.com