5 tagged database security, measured the same way as everything else here.
MCP server Claude CodeCodexCursor +2
Safe-by-default SQL guardrails for AI agents: AST-checked queries, per-table policy, audit log. Runs locally from the midplane npm package. Needs 4 environment variables to run.
Eszetael/postgres-mcp-hardened
MCP server Claude CodeCodexCursor
Secure read-only PostgreSQL MCP server in Rust — a maintained alternative to the deprecated @modelcontextprotocol/server-postgres. Blocks writes at the AST, not with regexes. Runs locally from the postgres-mcp-hardened npm package. Needs 2 environment variables to run.
Eszetael/postgres-mcp-hardened
MCP server Claude CodeCodexCursor
Read-only PostgreSQL over MCP. Writes refused at the parsed SQL, plus a READ ONLY transaction. Runs locally from the postgres-mcp-hardened npm package. Needs 4 environment variables to run.
MCP server Claude CodeCodexCursor
Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and columns an AI agent can see; every query runs inside a BEGIN READ ONLY transaction with a statement timeout, and every decision lands in an audit log. Runs locally from the pgguard-mcp npm package.
MCP server Claude CodeCodexCursor +2
Updates interfaces file on Debian Linux-based distros. Runs locally from the terminus Python package.