Servers / astraeus-postgres-mcp
astraeus-postgres-mcp
Read-only Postgres for agents, through a policy layer instead of a connection string.
Owner-built project. Status is maintainer-reported; inclusion is not an independent audit. Version information may lag upstream releases. Listing standards · Read as Markdown
A governed, read-only Postgres server. Every query is parsed with a real PostgreSQL parser, checked against table and column allowlists, then regenerated from the validated syntax tree, so the text an agent sends is never executed as written. Each query runs in a read-only transaction with a statement timeout, and every allow and deny is written to an audit log.
Review and maturity
Metadata review ·
The source records v1 (0.2.0) with single-table queries, allowlisted joins, named views and an opt-in Streamable HTTP entrypoint. Not published to npm; install from source. This metadata review does not establish security readiness.
What it does
- Table and column allowlists, row caps and PII masking
- Named views with typed parameters
- Fails closed without a policy file and a connection string
- Append-only JSONL audit log with rotation