Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and columns an AI agent can see; every query runs inside a BEGIN READ ONLY transaction with a statement timeout, and every decision lands in an audit log.
5 files for Claude Code: sql-gate-bypass-hunter, PostToolUse, PreToolUse, settings and 1 more .
.claude/settings.json A — .claude/settings.json A — .claude/settings.json A — .claude/skills/run-attack-suite/SKILL.md A 43 tok .claude/agents/sql-gate-bypass-hunter.md A 56 tok These files are Azzaraell/pgguard-mcp's own configuration — they tell Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.