Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction.
npx @getmcp/cli add io.github.Eszetael/postgres-mcp-hardenedRequires Node.js 18+. Community-contributed server. Review source before installing.
DATABASE_URLConnection string for the role the server connects as. Use a role that cannot write — the server refuses writes twice, but a read-only role is the layer that does not depend on us being correct. `--print-setup-sql` prints the SQL that creates one.
Config file: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"io.github.Eszetael/postgres-mcp-hardened": {
"command": "npx",
"args": [
"--stdio",
"-y",
"postgres-mcp-hardened"
],
"env": {
"DATABASE_URL": "",
"MCP_STATEMENT_TIMEOUT": "",
"MCP_ALLOW_TABLES": "",
"MCP_AUDIT_LOG": ""
}
}
}
}Ephemeral data sandbox for AI workflows with guardrails and security
Self-hosted homelab log intelligence over MCP, CLI, and REST with SQLite/FTS.
Rust MCP server for homelab logs, syslog, Docker logs, FTS search, and AI transcript correlation.
Rust MCP server and CLI for Unraid GraphQL operations across NAS, Docker, VM, and storage workflows.