postgresql-ssh-mcp

Overview

This is a full-featured MCP server for PostgreSQL database access with built-in SSH tunneling capabilities. It provides dual transport modes - STDIO for Claude Desktop and HTTP for ChatGPT - making it versatile across different AI environments. The server implements robust security features including read-only defaults, OAuth support, and automatic SSH tunnel management with TOFU (trust on first use) authentication.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• execute_query

  Execute SQL with parameterized queries. Results capped by MAX_ROWS.

  Try:Find all users registered in the last monthTry:Show me the top 10 customers by revenueTry:Count the number of orders per product category
• explain_query

  Get EXPLAIN plans in text, JSON, YAML, or XML format. Supports ANALYZE.

  Try:Explain how this query will be executedTry:Show the query plan with ANALYZE for the sales reportTry:Get the execution plan in JSON format
• list_schemas

  List database schemas. Excludes system schemas by default.

  Try:Show me all available schemas in the databaseTry:List all user-defined schemasTry:What schemas exist in this database?
• list_tables

  List tables with row counts and sizes. Optionally include views.

  Try:Show all tables in the public schemaTry:List tables and their sizesTry:What tables exist in the database including views?
• describe_table

  Get columns, constraints, and indexes for a table.

  Try:Describe the users table structureTry:Show me the schema of the orders tableTry:What columns and indexes does the products table have?
• list_databases

  List all databases with owner, encoding, and size.

  Try:Show all databases on this serverTry:List databases with their sizesTry:What databases are available?
• get_connection_status

  Get pool stats, tunnel state, and connection info.

  Try:Show connection pool statusTry:What's the current state of the SSH tunnel?Try:Display database connection statistics
• list_active_connections

  Show active connections from pg_stat_activity.

  Try:Show all active database connectionsTry:List current sessions and their queriesTry:Who is connected to the database right now?
• list_long_running_queries

  Find queries running longer than a threshold.

  Try:Show queries running longer than 5 minutesTry:List all long-running transactionsTry:Find slow queries that need attention
• get_database_version

  Get PostgreSQL server version.

  Try:What PostgreSQL version is running?Try:Show the database version numberTry:Check the server version
• get_database_size

  Get database size and largest tables.

  Try:Show the total size of the databaseTry:List the largest tables in the databaseTry:What's the disk usage breakdown by table?
• get_table_stats

  Get vacuum/analyze stats and scan counts for a table.

  Try:Show statistics for the orders tableTry:Get vacuum and analyze stats for productsTry:Display table-level statistics

Comparable tools

Installation

{
  "mcpServers": {
    "postgres": {
      "command": "npx",
      "args": ["-y", "@zlash65/postgresql-ssh-mcp"],
      "env": {
        "DATABASE_URI": "postgresql://user:password@localhost:5432/mydb"
      }
    }
  }
}

DATABASE_URI="postgresql://user:pass@localhost:5432/mydb" npx @zlash65/postgresql-ssh-mcp-http

FAQ

How does the SSH tunneling work?

The server automatically creates an SSH tunnel to your bastion host and forwards database connections securely through it. No manual `ssh -L` commands needed.

Can I modify database tables with this server?

By default, the server is read-only to ensure safe production use. You can enable writes by setting the READ_ONLY environment variable to 'false'.

Compare postgresql-ssh-mcp with