mcpbeat Sign in

PostgreSQL CVE & Release Intelligence MCP Server

local only

PostgreSQL CVE & Release Intelligence runs on your own machine — the client starts it, so there is no endpoint to ping. 124 installs a week from pypi. Last commit 18 Aug 2026.

PostgreSQL security for AI agents: CVEs, yanked releases, exploits, and upgrade paths

Installs per day peak 44 · avg 19 · -12% w/w
a month agotoday
124
Installs / week
pypi · pg-cve-mcp
0
Stars
0 open issues
18 Aug 2026
Last commit
from GitHub
Apache-2.0
License
Python

What the code does

We read the source, 3 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Runs an external command mcp_proxy.py:20
        result = subprocess.run(

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add pg-cve-mcp -- uvx pg-cve-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "pg-cve-mcp": {
      "command": "uvx",
      "args": [
        "pg-cve-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.pg-cve-mcp]
command = "uvx"
args = ["pg-cve-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "pg-cve-mcp": {
      "command": "uvx",
      "args": [
        "pg-cve-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "pg-cve-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "pg-cve-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: PG_CVE_MCP_TTL (Cache TTL in seconds for CVE data refresh (default: 86400)), PG_CVE_MCP_DATA_URL (URL of the PostgreSQL CVE JSON data (default: PG_CVE GitHub Pages)).

Alternatives to PostgreSQL CVE & Release Intelligence

same job, measured the same way
D
Data
by thinair

PostgreSQL, MySQL, and SQL Server in one session. 26 read-only MCP tools for AI agents.

answering
Automata
by getautomata

Scoped, revocable access to your WhatsApp, Telegram, IMAP email and PostgreSQL for AI agents.

answering
A
Ailimu
by ailimu

Self-hosted MCP server for FileMaker and PostgreSQL. Turns chosen tables into tools for AI agents.

local only
SafeSelect MCP
by antonillos

Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.

local only
MCP Database Doctor
by petrovicistefan

Offline PostgreSQL query, migration and EXPLAIN diagnostics for AI agents.

89 installs/wk local only
factstore
by victor-eu

A fact store for AI agents, on Postgres: registered attributes, every write citing its evidence.

37 installs/wk local only
pgops
by arzharch

Safe, audited PostgreSQL operations for AI agents: queries, migrations, EXPLAIN, containers

126 installs/wk local only
agentRamen
by palrajjp

Local-first codebase intelligence for coding agents: indexes code and Git history into SQLite.

261 installs/wk local only

PostgreSQL CVE & Release Intelligence — questions

Answers built from our own checks of this server.

Why is there no uptime for PostgreSQL CVE & Release Intelligence?
PostgreSQL CVE & Release Intelligence runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package pg-cve-mcp was installed 124 times last week.
How do I connect PostgreSQL CVE & Release Intelligence?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls pg-cve-mcp straight from pypi; nothing to host, nothing to sign up for.
How many people use PostgreSQL CVE & Release Intelligence?
The pypi package pg-cve-mcp was installed 124 times in the last week. Week over week that is -12%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.
Is PostgreSQL CVE & Release Intelligence open source?
Yes — it is published under the Apache-2.0 licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.