# astraeus-postgres-mcp

Read-only Postgres for agents, through a policy layer instead of a connection string.

A governed, read-only Postgres server. Every query is parsed with a real PostgreSQL parser, checked against table and column allowlists, then regenerated from the validated syntax tree, so the text an agent sends is never executed as written. Each query runs in a read-only transaction with a statement timeout, and every allow and deny is written to an audit log.

Source: https://github.com/SarutobiSasuke8/astraeus-postgres-mcp
Docs: https://github.com/SarutobiSasuke8/astraeus-postgres-mcp
Listing: https://mcprack.dev/servers/astraeus-postgres-mcp/
Status: alpha
Transport: stdio + Streamable HTTP
License: MIT
Review: 2026-10-10 (metadata)
The source records v1 (0.2.0) with single-table queries, allowlisted joins, named views and an opt-in Streamable HTTP entrypoint. Not published to npm; install from source. This metadata review does not establish security readiness.
Evidence: https://github.com/SarutobiSasuke8/astraeus-postgres-mcp/tree/38ecf01
Package: Source only

## Highlights

- Table and column allowlists, row caps and PII masking
- Named views with typed parameters
- Fails closed without a policy file and a connection string
- Append-only JSONL audit log with rotation

## Setup

No install command recorded; consult the repository.

Check prerequisites, permissions and current versions. Inclusion is not an independent security audit.