Neon MCP Server: Setup for Claude, Cursor and Other Apps

• Runs a SQL query on your database

  Runs one SQL statement on a Neon database. It can read and also change or delete data, unless read-only mode is on.

  Try: “Show the 10 newest rows in the users table.”

  Delete · run_sql

• Runs several SQL statements together

  Runs a series of SQL statements in one transaction. Not available in read-only mode.

  Try: “Insert these three orders and update the stock in one go.”

  Delete · run_sql_transaction

• Lists the tables in a database

  Lists all tables in a Neon database.

  Try: “What tables are in my database?”

  Read · get_database_tables

• Shows the columns of a table

  Returns the columns, types and constraints of one table.

  Try: “Describe the users table.”

  Read · describe_table_schema

• Shows what is in a branch

  Returns a tree of databases, schemas, tables, views and functions on a branch.

  Try: “Show the structure of my main branch.”

  Read · describe_branch

• Compares two branches' schemas

  Shows the SQL differences between a database and another branch.

  Try: “What changed in schema between dev and main?”

  Read · compare_database_schema

• Gets your connection string

  Returns a connection string for your database. Withheld in read-only mode.

  Try: “Give me the connection string for my main branch.”

  Read · get_connection_string

• Lists your Neon projects

  Lists the projects in your account.

  Try: “List my Neon projects.”

  Read · list_projects

• Shows one project

  Fetches a project by ID.

  Try: “Show details of my-project.”

  Read · describe_project

• Creates a project

  Creates a Neon project and waits for its default compute.

  Try: “Create a project called my-database.”

  Write · create_project

• Deletes a project

  Deletes a Neon project.

  Try: “Delete the project old-test.”

  Delete · delete_project

• Lists your organizations

  Lists the organizations you can access.

  Try: “Which Neon organizations am I in?”

  Read · list_organizations

• Lists available regions

  Lists the regions where you can create projects.

  Try: “Which regions can I use?”

  Read · list_regions

• Lists who is on a project

  Lists the members of a project.

  Try: “Who has access to my-project?”

  Read · list_project_members

• Lists project permissions

  Lists permissions set on a project.

  Try: “What permissions are set on my-project?”

  Read · list_project_permissions

• Lists a project's branches

  Lists branches so you can find one by name.

  Try: “List branches in my-project.”

  Read · list_branches

• Creates a branch

  Creates a branch with a read-write compute and waits until it is ready.

  Try: “Create a branch called feature-x.”

  Write · create_branch

• Deletes a branch

  Deletes a branch.

  Try: “Delete the feature-x branch.”

  Delete · delete_branch

• Resets a branch to its parent

  Resets a branch to its parent's current state. This discards changes made on the branch since it split.

  Try: “Reset dev to match main.”

  Delete · reset_from_parent

• Lists database roles

  Lists the Postgres roles on a branch.

  Try: “List the roles on my main branch.”

  Read · list_postgres_roles

• Creates a database

  Creates a database on a branch.

  Try: “Create a database called analytics.”

  Write · create_postgres_database

• Lists branch credentials

  Lists credentials for Object Storage and the AI Gateway on a branch.

  Try: “List credentials on my main branch.”

  Read · list_credentials

• Creates a branch credential

  Creates a credential for Object Storage or the AI Gateway.

  Try: “Create a storage credential for dev.”

  Write · create_credential

• Replaces a credential's secret

  Replaces the secret in place. Not repeatable.

  Try: “Rotate the storage credential on dev.”

  Write · rotate_credential

• Revokes a credential

  Revokes a branch credential.

  Try: “Revoke the old storage credential.”

  Delete · revoke_credential

• Lists compute endpoints

  Lists compute endpoints in a project.

  Try: “List the computes in my-project.”

  Read · list_postgres_endpoints

• Lists a branch's computes

  Lists the computes on one branch.

  Try: “Which computes does main have?”

  Read · list_branch_computes

• Shows one compute

  Fetches one compute endpoint.

  Try: “Show the compute for main.”

  Read · get_postgres_endpoint

• Adds a compute

  Creates a compute endpoint on a branch.

  Try: “Add a read replica compute to main.”

  Write · create_postgres_endpoint

• Changes a compute

  Updates a compute endpoint.

  Try: “Raise the max compute size of main.”

  Write · update_postgres_endpoint

• Deletes a compute

  Deletes a compute endpoint.

  Try: “Delete the extra compute on dev.”

  Delete · delete_postgres_endpoint

• Starts a compute

  Starts a suspended compute.

  Try: “Start the compute on dev.”

  Write · start_postgres_endpoint

• Suspends a compute

  Suspends a running compute.

  Try: “Suspend the dev compute.”

  Write · suspend_postgres_endpoint

• Restarts a compute

  Restarts a compute endpoint.

  Try: “Restart the main compute.”

  Write · restart_postgres_endpoint

• Lists snapshots

  Lists snapshots of a project.

  Try: “List my snapshots.”

  Read · list_snapshots

• Shows the snapshot schedule

  Returns how often snapshots are taken.

  Try: “When are snapshots taken?”

  Read · get_snapshot_schedule

• Sets the snapshot schedule

  Changes the automatic snapshot schedule.

  Try: “Take a snapshot every day.”

  Write · set_snapshot_schedule

• Takes a snapshot

  Creates a snapshot of a branch.

  Try: “Snapshot main before the migration.”

  Write · create_snapshot

• Edits a snapshot

  Updates a snapshot's details.

  Try: “Rename the latest snapshot.”

  Write · update_snapshot

• Deletes a snapshot

  Deletes a snapshot.

  Try: “Delete the oldest snapshot.”

  Delete · delete_snapshot

• Restores a snapshot

  Restores a snapshot onto an existing branch or a new one.

  Try: “Restore the snapshot onto a new branch.”

  Write · restore_snapshot

• Tests a schema change on a temporary branch

  Starts a migration and tries it on a temporary branch, so main is not touched yet.

  Try: “Add a created_at column to the users table.”

  Write · prepare_database_migration

• Applies a tested migration

  Applies a prepared migration to the main branch and cleans up the temporary branch.

  Try: “Apply the migration to main.”

  Write · complete_database_migration

• Suggests query speed-ups

  Analyzes a query and suggests changes such as an index, testing them on a temporary branch.

  Try: “Why is this query slow, and how can I speed it up?”

  Write · prepare_query_tuning

• Applies or drops a tuning change

  Applies the tested tuning changes to the main branch or discards them.

  Try: “Apply the index to main.”

  Write · complete_query_tuning

• Runs a health check on a database

  Runs one of 15 ready-made read-only diagnostics, such as sizes, index use, locks and cache hit rate.

  Try: “Which indexes are unused?”

  Read · inspect_database

• Finds the slowest queries

  Finds the slowest queries. Needs the pg_stat_statements extension.

  Try: “What are my slowest queries?”

  Read · list_slow_queries

• Shows how a query will run

  Returns the execution plan for a SQL statement.

  Try: “Explain this query.”

  Read · explain_sql_statement

• Searches branch logs

  Queries OpenTelemetry logs for a branch. Only for some projects in the Neon Platform Beta.

  Try: “Show errors from the last hour.”

  Read · query_logs

• Lists searchable log fields

  Lists log fields you can enumerate on a branch.

  Try: “Which log fields can I filter on?”

  Read · list_log_fields

• Lists values of a log field

  Lists the distinct values of a log field in a time window.

  Try: “Which log levels appear today?”

  Read · list_log_field_values

• Sets up Neon Auth

  Provisions Neon Auth for a branch database.

  Try: “Turn on Neon Auth for main.”

  Write · provision_neon_auth

• Shows Neon Auth settings

  Returns the Neon Auth state of a branch.

  Try: “Is Neon Auth enabled on main?”

  Read · get_auth

• Shows Neon Auth config

  Returns Neon Auth config with secrets hidden.

  Try: “Show my Neon Auth config.”

  Read · get_neon_auth_config

• Turns off Neon Auth

  Disables Neon Auth on a branch.

  Try: “Turn off Neon Auth on dev.”

  Write · disable_auth

• Changes Neon Auth config

  Updates Neon Auth settings.

  Try: “Allow sign-ups with email.”

  Write · update_auth_config

• Lists social login providers

  Lists the sign-in providers set up for Neon Auth.

  Try: “Which social logins are on?”

  Read · list_auth_oauth_providers

• Adds a social login provider

  Adds a sign-in provider to Neon Auth.

  Try: “Add Google sign-in.”

  Write · add_auth_oauth_provider

• Edits a social login provider

  Changes a provider's settings.

  Try: “Update the Google client ID.”

  Write · update_auth_oauth_provider

• Removes a social login provider

  Deletes a sign-in provider.

  Try: “Remove GitHub sign-in.”

  Delete · delete_auth_oauth_provider

• Shows Neon Auth as OAuth server

  Returns the OAuth 2.1 server settings of Neon Auth.

  Try: “Is the OAuth server enabled?”

  Read · get_auth_oauth_server

• Changes the OAuth server settings

  Configures Neon Auth as an OAuth 2.1 authorization server.

  Try: “Enable the OAuth server.”

  Write · update_auth_oauth_server

• Lists OAuth clients

  Lists clients of the Neon Auth OAuth server.

  Try: “List my OAuth clients.”

  Read · list_auth_oauth_clients

• Shows an OAuth client

  Fetches one OAuth client.

  Try: “Show the web app OAuth client.”

  Read · get_auth_oauth_client

• Creates an OAuth client

  Creates a client. The secret is shown once.

  Try: “Create an OAuth client for my app.”

  Write · create_auth_oauth_client

• Edits an OAuth client

  Updates an OAuth client.

  Try: “Add a redirect URL to my client.”

  Write · update_auth_oauth_client

• Deletes an OAuth client

  Deletes an OAuth client.

  Try: “Delete the old OAuth client.”

  Delete · delete_auth_oauth_client

• Replaces a client secret

  Rotates an OAuth client's secret.

  Try: “Rotate the secret for my client.”

  Write · rotate_auth_oauth_client_secret

• Lists trusted domains

  Lists domains Neon Auth trusts.

  Try: “Which domains are trusted?”

  Read · list_auth_trusted_domains

• Adds a trusted domain

  Adds a trusted domain.

  Try: “Trust app.example.com.”

  Write · add_auth_trusted_domain

• Removes a trusted domain

  Removes a trusted domain.

  Try: “Stop trusting old.example.com.”

  Delete · delete_auth_trusted_domain

• Creates an auth user

  Creates a user in Neon Auth.

  Try: “Create a user for dana@example.com.”

  Write · create_auth_user

• Deletes an auth user

  Deletes a user from Neon Auth.

  Try: “Delete user dana@example.com.”

  Delete · delete_auth_user

• Changes a user's role

  Updates the role of a Neon Auth user.

  Try: “Make Dana an admin.”

  Write · update_auth_user_role

• Sets up the Data API

  Provisions the Neon Data API for a branch database.

  Try: “Enable the Data API on main.”

  Write · provision_neon_data_api

• Shows the Data API

  Returns the Data API state for a branch.

  Try: “Is the Data API on?”

  Read · get_data_api

• Changes the Data API

  Updates the Data API settings.

  Try: “Change the Data API exposed schema.”

  Write · update_data_api

• Removes the Data API

  Deletes the Data API for a branch database.

  Try: “Remove the Data API from dev.”

  Delete · delete_data_api

• Searches orgs, projects and branches

  Searches your organizations, projects and branches and returns IDs and console links.

  Try: “Find my project called shop.”

  Read · search

• Fetches details for a search result

  Fetches details of an organization, project or branch by ID.

  Try: “Fetch details for that project.”

  Read · fetch

• Searches Neon's docs

  Searches neon.com docs, API reference, guides, FAQs, changelog and blog.

  Try: “How do I use Neon with Prisma?”

  Read · search_docs

• Reads a Neon doc page

  Fetches one neon.com page as markdown.

  Try: “Open the Prisma guide.”

  Read · get_doc

• Sends feedback to Neon

  Sends anonymous feedback text to the Neon team.

  Try: “Tell Neon the docs search missed my answer.”

  Write · send_feedback

• Lists functions

  Lists functions on a branch.

  Try: “List my functions.”

  Read · list_functions

• Shows a function

  Fetches one function.

  Try: “Show the cleanup function.”

  Read · get_function

• Edits a function

  Updates a function.

  Try: “Change the cleanup function's timeout.”

  Write · update_function

• Deletes a function

  Deletes a function.

  Try: “Delete the cleanup function.”

  Delete · delete_function

• Deploys a function

  Deploys a function to Neon.

  Try: “Deploy the cleanup function.”

  Write · deploy_function

• Lists function domains

  Lists custom domains for functions.

  Try: “List function custom domains.”

  Read · list_functions_custom_domains

• Adds a function domain

  Registers a custom domain for functions.

  Try: “Register api.example.com for functions.”

  Write · register_functions_custom_domain

• Removes a function domain

  Deletes a custom domain for functions.

  Try: “Remove api.example.com from functions.”

  Delete · delete_functions_custom_domain

• Lists scheduled triggers

  Lists scheduled function triggers.

  Try: “List my scheduled triggers.”

  Read · list_triggers

• Shows a trigger

  Fetches one trigger.

  Try: “Show the nightly trigger.”

  Read · get_trigger

• Creates a scheduled trigger

  Creates a trigger that runs a function on a UTC cron schedule.

  Try: “Run cleanup every night at 2am UTC.”

  Write · create_trigger

• Edits a trigger

  Updates a scheduled trigger.

  Try: “Move the nightly trigger to 3am.”

  Write · update_trigger

• Deletes a trigger

  Deletes a scheduled trigger.

  Try: “Delete the nightly trigger.”

  Delete · delete_trigger

• Lists storage buckets

  Lists Object Storage buckets.

  Try: “List my storage buckets.”

  Read · list_storage_buckets

• Creates a bucket

  Creates a storage bucket.

  Try: “Create a bucket called uploads.”

  Write · create_storage_bucket

• Deletes a bucket

  Deletes a storage bucket.

  Try: “Delete the uploads bucket.”

  Delete · delete_storage_bucket

• Lists files in a bucket

  Lists objects in a bucket.

  Try: “List files in uploads.”

  Read · list_storage_objects

• Deletes a file

  Deletes one object from a bucket.

  Try: “Delete logo.png from uploads.”

  Delete · delete_storage_object

• Deletes files by prefix

  Deletes every object that starts with a prefix.

  Try: “Delete everything under tmp/ in uploads.”

  Delete · delete_storage_objects_by_prefix

• Makes a temporary file link

  Creates a presigned link for an object.

  Try: “Give me a download link for report.pdf.”

  Read · presign_storage_object

• Shows storage settings

  Returns the Object Storage state of a branch.

  Try: “Is storage enabled on main?”

  Read · get_storage

• Shows Realtime state

  Returns the Realtime state of a branch.

  Try: “Is Realtime on for main?”

  Read · get_realtime

• Turns on Realtime

  Enables Realtime for a branch and waits until applied.

  Try: “Enable Realtime on dev.”

  Write · enable_realtime

• Turns off Realtime

  Disables Realtime for a branch.

  Try: “Disable Realtime on dev.”

  Write · disable_realtime

• Gets the Realtime secret

  Returns the shared secret your backend uses to issue Realtime tokens. Not in read-only mode.

  Try: “Show the Realtime secret.”

  Read · get_realtime_secret

• Replaces the Realtime secret

  Replaces the shared secret. Not repeatable.

  Try: “Rotate the Realtime secret.”

  Write · rotate_realtime_secret

Watch out for

• It can delete projects, branches and data

  Delete tools and unrestricted SQL are available by default. Use readonly=true and a projectId in the address to limit it. raw.githubusercontent.com

• Neon says not to use it in production

  The README says it is for local development and IDE integrations and warns it can make accidental or unauthorized changes. Point it at a development project. raw.githubusercontent.com

• The connection string tool returns a privileged password

  It is withheld in read-only mode. Avoid asking the assistant to print it in shared chats. raw.githubusercontent.com

Security advisories