{"servers":[{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.antonorlov/mcp-postgres-server","description":"MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.","title":"PostgreSQL","repository":{"url":"https://github.com/antonorlov/mcp-postgres-server","source":"github"},"version":"0.3.0","websiteUrl":"https://github.com/antonorlov/mcp-postgres-server#readme","packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"mcp-postgres-server","version":"0.3.0","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Full connection string (preferred). Supports sslmode in the URL.","format":"string","isSecret":true,"placeholder":"postgres://user:password@localhost:5432/mydb?sslmode=require","name":"DATABASE_URL"},{"description":"Database host (fallback when DATABASE_URL is not set).","format":"string","name":"PG_HOST"},{"description":"Database port.","format":"number","default":"5432","name":"PG_PORT"},{"description":"Database user.","format":"string","name":"PG_USER"},{"description":"Database password.","format":"string","isSecret":true,"name":"PG_PASSWORD"},{"description":"Database name.","format":"string","name":"PG_DATABASE"},{"description":"When true, execute performs writes and reads are sent directly. Off (default) is read-only: execute refuses writes and each read runs in a READ ONLY transaction.","format":"boolean","default":"false","choices":["false","true"],"name":"PG_ALLOW_WRITE"},{"description":"TLS mode. require/allow/prefer encrypt without verifying the certificate; verify-ca/verify-full verify it (supply a CA via PG_SSL_CA). Unlike libpq, allow/prefer do not fall back to plaintext, so a server without TLS needs disable.","format":"string","choices":["disable","allow","prefer","require","verify-ca","verify-full"],"name":"PG_SSLMODE"},{"description":"Path to a CA certificate file. Setting it by itself implies verify-full.","format":"filepath","name":"PG_SSL_CA"},{"description":"Register the connect_db tool (runtime credential switching).","format":"boolean","default":"false","choices":["false","true"],"name":"PG_ENABLE_RUNTIME_CONNECT"},{"description":"Byte budget for a query result sent to the model. Whole rows are kept while they fit; over the budget returnedRows < rowCount and truncated is true.","format":"number","default":"32768","name":"PG_MAX_RESULT_BYTES"},{"description":"Statement timeout in milliseconds, applied to every session.","format":"number","default":"30000","name":"PG_STATEMENT_TIMEOUT"},{"description":"Timeout in milliseconds for a single connect attempt (raise it for slow links or SSH tunnels).","format":"number","default":"10000","name":"PG_CONNECT_TIMEOUT"},{"description":"SSH bastion host. Setting it enables tunneling: the server reaches the database only through an SSH tunnel to this host. Needs the ssh2 optional dependency.","format":"string","name":"PG_SSH_HOST"},{"description":"SSH bastion port.","format":"number","default":"22","name":"PG_SSH_PORT"},{"description":"SSH username.","format":"string","name":"PG_SSH_USER"},{"description":"Path to a private key file. If unset, auth falls back like ssh: a running agent (SSH_AUTH_SOCK), then a default key (~/.ssh/id_ed25519, id_rsa, id_ecdsa).","format":"filepath","name":"PG_SSH_PRIVATE_KEY"},{"description":"Passphrase for the private key, if encrypted.","format":"string","isSecret":true,"name":"PG_SSH_PASSPHRASE"},{"description":"true to use the ambient agent (SSH_AUTH_SOCK), or an explicit socket path / Windows named pipe.","format":"string","name":"PG_SSH_AGENT"},{"description":"SSH login password. Opt-in; a key or agent takes precedence. Prefer keys, a bastion often disables password auth.","format":"string","isSecret":true,"name":"PG_SSH_PASSWORD"},{"description":"Pinned host-key fingerprint (SHA256:...). Host-key verification is mandatory and set only this way: without it the tunnel refuses to connect. Get it with ssh-keygen -lF host.","format":"string","placeholder":"SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx","name":"PG_SSH_FINGERPRINT"},{"description":"SSH keepalive interval in ms; the tunnel drops after 3 unanswered keepalives, and the next call reconnects.","format":"number","default":"15000","name":"PG_SSH_KEEPALIVE_INTERVAL"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-09-14T17:45:31.176518Z","publishedAt":"2026-09-14T17:45:31.176518Z","updatedAt":"2026-09-14T17:45:31.176518Z","isLatest":false}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.antonorlov/mcp-postgres-server","description":"MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.","title":"PostgreSQL","repository":{"url":"https://github.com/antonorlov/mcp-postgres-server","source":"github"},"version":"0.3.1","websiteUrl":"https://github.com/antonorlov/mcp-postgres-server#readme","packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"mcp-postgres-server","version":"0.3.1","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Full connection string (preferred). Supports sslmode in the URL.","format":"string","isSecret":true,"placeholder":"postgres://user:password@localhost:5432/mydb?sslmode=require","name":"DATABASE_URL"},{"description":"Database host (fallback when DATABASE_URL is not set).","format":"string","name":"PG_HOST"},{"description":"Database port.","format":"number","default":"5432","name":"PG_PORT"},{"description":"Database user.","format":"string","name":"PG_USER"},{"description":"Database password.","format":"string","isSecret":true,"name":"PG_PASSWORD"},{"description":"Database name.","format":"string","name":"PG_DATABASE"},{"description":"When true, execute performs writes and reads are sent directly. Off (default) is read-only: execute refuses writes and each read runs in a READ ONLY transaction.","format":"boolean","default":"false","choices":["false","true"],"name":"PG_ALLOW_WRITE"},{"description":"TLS mode. require/allow/prefer encrypt without verifying the certificate; verify-ca/verify-full verify it (supply a CA via PG_SSL_CA). Unlike libpq, allow/prefer do not fall back to plaintext, so a server without TLS needs disable.","format":"string","choices":["disable","allow","prefer","require","verify-ca","verify-full"],"name":"PG_SSLMODE"},{"description":"Path to a CA certificate file. Setting it by itself implies verify-full.","format":"filepath","name":"PG_SSL_CA"},{"description":"Register the connect_db tool (runtime credential switching).","format":"boolean","default":"false","choices":["false","true"],"name":"PG_ENABLE_RUNTIME_CONNECT"},{"description":"Byte budget for a query result sent to the model. Whole rows are kept while they fit; over the budget returnedRows < rowCount and truncated is true.","format":"number","default":"32768","name":"PG_MAX_RESULT_BYTES"},{"description":"Statement timeout in milliseconds, applied to every session.","format":"number","default":"30000","name":"PG_STATEMENT_TIMEOUT"},{"description":"Timeout in milliseconds for a single connect attempt (raise it for slow links or SSH tunnels).","format":"number","default":"10000","name":"PG_CONNECT_TIMEOUT"},{"description":"SSH bastion host. Setting it enables tunneling: the server reaches the database only through an SSH tunnel to this host. Needs the ssh2 optional dependency.","format":"string","name":"PG_SSH_HOST"},{"description":"SSH bastion port.","format":"number","default":"22","name":"PG_SSH_PORT"},{"description":"SSH username.","format":"string","name":"PG_SSH_USER"},{"description":"Path to a private key file. If unset, auth falls back like ssh: a running agent (SSH_AUTH_SOCK), then a default key (~/.ssh/id_ed25519, id_rsa, id_ecdsa).","format":"filepath","name":"PG_SSH_PRIVATE_KEY"},{"description":"Passphrase for the private key, if encrypted.","format":"string","isSecret":true,"name":"PG_SSH_PASSPHRASE"},{"description":"true to use the ambient agent (SSH_AUTH_SOCK), or an explicit socket path / Windows named pipe.","format":"string","name":"PG_SSH_AGENT"},{"description":"SSH login password. Opt-in; a key or agent takes precedence. Prefer keys, a bastion often disables password auth.","format":"string","isSecret":true,"name":"PG_SSH_PASSWORD"},{"description":"Pinned host-key fingerprint (SHA256:...). Host-key verification is mandatory and set only this way: without it the tunnel refuses to connect. Get it with ssh-keygen -lF host.","format":"string","placeholder":"SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx","name":"PG_SSH_FINGERPRINT"},{"description":"SSH keepalive interval in ms; the tunnel drops after 3 unanswered keepalives, and the next call reconnects.","format":"number","default":"15000","name":"PG_SSH_KEEPALIVE_INTERVAL"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-09-14T20:23:00.55789Z","publishedAt":"2026-09-14T20:23:00.55789Z","updatedAt":"2026-09-14T20:23:00.55789Z","isLatest":true}}}],"metadata":{"count":2}}