← Back to search

@vitalyostanin/postgres-mcp

VitalyOstanin Scanned 20h ago

MCP server for comprehensive PostgreSQL integration: database operations, tables, queries, connection management, monitoring

npm ↗
D
40 / 100

Versions

0.5.3latest
Jul 18, 2026
0.5.2
Jul 3, 2026
0.5.1
May 7, 2026
0.5.0
May 6, 2026
0.4.0
May 6, 2026
+ show 3 moreshow less
0.3.0
May 6, 2026
0.2.0
May 6, 2026
0.1.0
Nov 15, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 8

show-object
annotations: verified low

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
execute-sql
annotations: verified low

readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
connect
annotations: verified low

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
list-objects
annotations: verified low

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
disconnect
annotations: verified low

readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
list-schemas
annotations: verified low

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
service-info
annotations: verified low

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
index-operation
annotations: verified low

readOnlyHint false openWorldHint true idempotentHint false destructiveHint true

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 28

info
Tool 'connect' annotations are consistent annotation_checker · 80%
info
Tool 'list-objects' annotations are consistent annotation_checker · 80%
info
Tool 'disconnect' annotations are consistent annotation_checker · 80%
info
Tool 'list-schemas' annotations are consistent annotation_checker · 80%
info
Tool 'service-info' annotations are consistent annotation_checker · 80%
info
Tool 'index-operation' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
Tool 'show-object' annotations are consistent annotation_checker · 80%
info
Tool 'execute-sql' annotations are consistent annotation_checker · 80%
medium
Vulnerable dependency: vitest@4.1.9 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: show-object manifest_parser · 85%
info
Tool: execute-sql manifest_parser · 85%
info
Tool: connect manifest_parser · 85%
info
Tool: list-objects manifest_parser · 85%
info
Tool: disconnect manifest_parser · 85%
info
Tool: list-schemas manifest_parser · 85%
info
Tool: service-info manifest_parser · 85%
info
Tool: index-operation manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 304 components sbom_generator · 100%
critical
Database URL with Password found in VitalyOstanin-postgres-mcp-7c7d3cd/AGENTS.md secret_scanner · 85%
critical
Database URL with Password found in VitalyOstanin-postgres-mcp-7c7d3cd/src/utils/redact.ts secret_scanner · 85%
high
Hardcoded Password found in VitalyOstanin-postgres-mcp-7c7d3cd/src/utils/redact.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%