Is `mcp-server-postgres` safe?

listed, no known advisories Facts from the mcp-audit registry about the pypi package mcp-server-postgres. The same data is served as JSON.

Check it from your terminal

mcp-audit vet mcp-server-postgres --ecosystem pypi

Offline: it uses the registry bundled with mcp-audit. mcp-audit update-registry fetches the newest one.

Registry facts

Maintainer	unknown — publisher does not match declared Anthropic attribution
Verified publisher	no
Entry last checked	2026-08-22
Hash pins	none recorded
Provenance expected	no
Repository	not recorded

Recorded advisories 0

No advisories are recorded for this package.

What it can do

It can query databases.

Capability tags come from the registry. mcp-audit uses them to find dangerous combinations with your other servers.

Check how you run it

This page describes the public package. What matters is your setup: which version you pin, which secrets you pass, and which other servers sit next to it.

mcp-audit check

Badge for your README

mcp-auditlisted · 0 known CVEs

Preview drawn by this page. The real badge is rendered by shields.io from this JSON and updates when the registry does.

[![mcp-audit](https://img.shields.io/endpoint?url=https://mcp-audit.dev/v1/badge/pypi/mcp-server-postgres.json)](https://mcp-audit.dev/servers/pypi/mcp-server-postgres/)

Is mcp-server-postgres safe?