Pgmoat runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 25 Oct 2026.
Governed, read-only Postgres access for AI agents: SQL safety, RLS, budgets, tamper-evident audit.
Nothing serious here today
Today is the operative word: we check Pgmoat every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add pgmoat -e 'PGMOAT_DATABASE_URL=<PGMOAT_DATABASE_URL>' -- npx -y pgmoat{
"mcpServers": {
"pgmoat": {
"command": "npx",
"args": [
"-y",
"pgmoat"
],
"env": {
"PGMOAT_DATABASE_URL": "<PGMOAT_DATABASE_URL>"
}
}
}
}[mcp_servers.pgmoat]
command = "npx"
args = ["-y", "pgmoat"]
env = { PGMOAT_DATABASE_URL = "<PGMOAT_DATABASE_URL>" }{
"mcpServers": {
"pgmoat": {
"command": "npx",
"args": [
"-y",
"pgmoat"
],
"env": {
"PGMOAT_DATABASE_URL": "<PGMOAT_DATABASE_URL>"
}
}
}
}{
"servers": {
"pgmoat": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"pgmoat"
],
"env": {
"PGMOAT_DATABASE_URL": "<PGMOAT_DATABASE_URL>"
}
}
}
}Put your own value in place of
<PGMOAT_DATABASE_URL> (Postgres connection URL (use a read-only role)).
The author’s registry entry marks it as required.
Alternatives to Pgmoat
same job, measured the same wayRLS/tenant-aware Postgres for AI agents — schema, read-only SQL, NL→SQL with safety rails.
Safe, read-only Postgres and MySQL access for AI agents. Audit log + column-level controls.
Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.
Safe, read-only-by-default MySQL, PostgreSQL & SQLite access for AI agents. TOON output.
Read-only MCP server for evidence-based PostgreSQL performance auditing.
Read-only, guarded SQL access for AI agents: PostgreSQL, MySQL, ClickHouse, Oracle, SQL Server, Db2
PostgreSQL, MySQL, and SQL Server in one session. 26 read-only MCP tools for AI agents.
Secure SQL proxy for AI agents — NL→SQL, AST safety, per-agent RLS, audit log.
Pgmoat — questions
Answers built from our own checks of this server.