Migrationpilot MCP server
io.github.mickelsamuel/migrationpilot·v1.6.4·9 stars112 rules that catch dangerous PostgreSQL migrations, plus a pass/fail gate to call before any DDL.
9 stars657 downloads/wk
Reviews
Write oneNobody has reviewed Migrationpilot yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Migrationpilot tools (7)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
analyze_migrationAnalyze a PostgreSQL migration SQL for safety issues. Returns violations, risk level, and lock analysis.
analyze_migration_dirAnalyze every migration file in a directory. Returns per-file results plus an aggregate summary. Use this to audit a whole migrations folder before a release, or to find which existing migration introduced a risky pattern.
check_before_applySafety gate: call this BEFORE writing or executing any PostgreSQL DDL or migration. Resolves the project's own MigrationPilot config (rule toggles, severity overrides, failOn threshold) exactly like the CLI, then returns a pass/fail verdict. On "fail", do not apply the migration \u2014 fix the blocking violations and check again.
explain_lockExplain what PostgreSQL lock a DDL statement acquires and its impact.
get_ruleGet the full documentation for one MigrationPilot rule: what it reports, why it matters, whether it can be auto-fixed, and how to configure it. Call this when a violation ID appears and you need the reasoning behind it before rewriting a migration.
list_rulesList all available MigrationPilot safety rules with descriptions.
suggest_fixAuto-fix safe violations in a PostgreSQL migration SQL. Returns the fixed SQL and list of changes.
Public scan report
scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it
- Code scan220 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evaldist/mcp.cjs: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
How Migrationpilot compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 85/100
- higher than 70% of 48,255 servers
- Tools
- 7
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 9
- more than 87% of 28,688 servers
- Downloads a week
- 657
- more than 91% of 12,191 servers with a package
What its tools let an agent do: 7 read
Release history: 3 versions in the registry since 2026-08-12, latest 2026-10-13, typically one every 61 days.
Install Migrationpilot in Claude Code, Cursor or VS Code
Runs npx -y migrationpilot on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add migrationpilot -- npx -y migrationpilot
What the publisher says
From the Migrationpilot repository's README, as published. We do not edit it. Read it on GitHub
MigrationPilot
Block unsafe Postgres migrations before merge.
Local, deterministic analysis for PostgreSQL migrations. Uses PostgreSQL's parser, checks 112 rules, and exits non-zero in CI. No account required. MIT.
npx migrationpilot analyze migration.sqlTry it in your browser · GitHub Action · Documentation
Benchmark
56 labelled files. Author-built corpus. Tools pinned.
Methodology · Corpus · What MigrationPilot missed · Reproduce: pnpm build && node bench/run.mjs
A finding
-- migration.sql
ALTER TABLE users ADD CONSTRAINT users_email_unique UNIQUE (email);$ migrationpilot analyze migration.sql
✗ MigrationPilot — RED Score: 80/100
migration.sql
─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─ ─
1 statement · 2 critical · rollback GREEN
┌─────┬─────────────────────────────────────────────┬─────────────────────────┬────────┬────────────┐
│ # │ Statement │ Lock Type │ Risk │ Long lock? │
├─────┼─────────────────────────────────────────────┼─────────────────────────┼────────┼────────────┤
│ 1 │ ALTER TABLE users ADD CONSTRAINT users_e... │ ACCESS EXCLUSIVE │ RED │ YES │
└─────┴─────────────────────────────────────────────┴─────────────────────────┴────────┴────────────┘
Violations:
✗ [MP004] CRITICAL (line 1)
DDL statement acquires ACCESS EXCLUSIVE lock without a preceding SET lock_timeout. Without a timeout, this statement could block the lock queue indefinitely if it can't acquire the lock, causing cascading query failures.
Safe alternative:
-- Set a timeout so DDL fails fast instead of blocking the queue
SET lock_timeout = '5s';
ALTER TABLE users ADD CONSTRAINT users_email_unique UNIQUE (eShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Migrationpilot: common questions
- Is Migrationpilot MCP server safe?
- Yes, by our scan: it is graded A (85/100). Read the Migrationpilot safety report
- How do I install Migrationpilot?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Migrationpilot need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Migrationpilot maintained?
- The last commit was 4 days ago (2026-10-31). The latest release is v1.6.4.
- How does Migrationpilot compare with other MCP servers?
- safety score 85/100 (higher than 70% of 48,255 servers); tools 7 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.