Locksmith runs on your own machine — the client starts it, so there is no endpoint to ping. 45 installs a week from npm. Last commit 29 Jun 2026.
Lints PostgreSQL migrations for dangerous locking operations and suggests safe rewrites.
Today is the operative word: we check Locksmith every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add locksmith -- npx -y locksmith-mcp
{
"mcpServers": {
"locksmith": {
"command": "npx",
"args": [
"-y",
"locksmith-mcp"
]
}
}
}
[mcp_servers.locksmith]
command = "npx"
args = ["-y", "locksmith-mcp"]
{
"mcpServers": {
"locksmith": {
"command": "npx",
"args": [
"-y",
"locksmith-mcp"
]
}
}
}
{
"servers": {
"locksmith": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"locksmith-mcp"
]
}
}
}
Lints SQL and checks rewrites return the same rows. Postgres, MySQL, MariaDB, SQLite, MSSQL, DuckDB
Names every statement in a Rails, Django or raw SQL migration that takes a table-blocking Postgres l
Lint OpenAPI 3.x documents for missing security, responses, descriptions and versioning.
Read-only health checks and data questions for SQL Server and PostgreSQL, with your saved profiles.
Governed finance operations for AP, AR, GL, approvals, reporting, and payments.
MCP server for OpenTable - let AI agents book restaurant reservations and manage dining autonomously
Safe, self-hosted ZAP operator for guided AI security scans and reports.
Code review for diffs: rule-based checks for leaked secrets, unsafe migrations and more.
Answers built from our own checks of this server.