Mcpg MCP server
Production-grade PostgreSQL MCP server — 254 tools for query, tuning & ops, read-only by default.
A85/100grade A
Adoption
Growing
10 stars
Reviews
Write oneNobody has reviewed Mcpg yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Mcpg tools (100, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
_register_advisors_register_introspection_register_vector_tuninganalyze_distance_metricanalyze_hnsw_recallanalyze_rerank_ndcganalyze_rerank_score_distributionanalyze_reranker_liftanalyze_session_costanalyze_topk_stabilityanalyze_vector_search_efficiencyaudit_sequencesaudit_settingscheck_pitr_readinesscluster_vectorscompare_schemascross_table_similaritydescribe_selfdescribe_tabledescribe_tooldetect_vector_outliersenable_session_intentexport_queryexport_tablefind_blocking_chainsfind_sensitive_columnsfind_unused_objectsgenerate_diesel_schemagenerate_drizzle_schemagenerate_ecto_schemasgenerate_ent_schemasgenerate_fk_cascade_graphgenerate_graph_projectiongenerate_jooq_configgenerate_prisma_schemagenerate_schema_diagramgenerate_schema_docsgenerate_sqlalchemy_modelsgenerate_sqlc_schemagenerate_test_datagenerate_test_row_forget_compact_schemaget_metrics_expositionget_server_infoget_wal_archive_statusimport_csvimport_jsonimport_vectorslint_naming_conventionslist_available_extensionslist_composite_typeslist_constraintslist_domainslist_enumslist_extensionslist_foreign_data_wrapperslist_foreign_keyslist_foreign_serverslist_foreign_tableslist_functionslist_generated_columnslist_grantslist_indexeslist_lockslist_partitionslist_policieslist_publicationslist_roleslist_schemaslist_sequenceslist_session_intentslist_subscriptionsList logical-replication subscriptions; requires superuser to see any rows.
list_tableslist_triggerslist_user_mappingslist_viewsmigrate_vector_to_halfvecmonitor_embedding_driftoptimize_queryprepare_migrationread_migration_historyread_pg_buffercache_relationsread_pg_buffercache_summaryread_pg_stat_ioread_pg_wal_recordsread_pg_wal_statsrecommend_headline_toolsrecommend_hnsw_ef_searchrecommend_ivfflat_probesrecommend_postgres_confrecommend_rerank_strategyretrieve_with_contextrun_advisorswrite actionsummarize_tabletest_rls_for_roletune_vector_indexvalidate_migrationvector_recall_at_kwalk_blocking_chainswhy_is_this_slow
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
1 medium
- Code scan113 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-truemcpg-0.8.2/src/mcpg/shell.py: …_exec(binary, *argv)`` only — never ``shell=True``. Argv is a list, not a shell string, …
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Install directly
claude mcp add mcpg -- uvx mcpg
Mcpg: common questions
- Is Mcpg MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Mcpg safety report
- How do I install Mcpg?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Mcpg need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Mcpg maintained?
- The last commit was 2 days ago (2026-09-19). The latest release is v0.8.2.