PostgreSQL MCP server. What it holds.
The server authenticates to another system with a key, token or connection string. Its reach is whatever that credential reaches, inherited by every agent allowed to call it. Published by MCP reference example.
The record
Taken from the official documentation linked at the bottom.
| Field | Value |
|---|---|
| Publisher | MCP reference example |
| Authentication | A database connection string, for example postgresql://localhost/mydb. |
| What it holds | A database identity. The connection string carries the credential. |
| What that reaches | Everything the database role in that connection string is allowed to do. A role used for convenience during development frequently has more than read access. |
| Risk class | Holds a credential The server authenticates to another system with a key, token or connection string. Its reach is whatever that credential reaches, inherited by every agent allowed to call it. |
Why it matters
A connection string is a credential that looks like configuration, which is why it ends up in files and environment variables that are treated as settings rather than secrets.
Not whether the server is trustworthy. What it holds, and what that reaches.
What to check
Which role the string authenticates as, whether it can write, and whether the same string appears in more than one place.
The same questions apply to any server in this database, which is why the MCP server security page is the general version of this page.
Holds a credential
Where this comes from.
Every field above is taken from the official documentation. Where it does not say, this page does not either.
Questions, answered.
The two questions this record answers.
What credential does the PostgreSQL MCP server hold?
A database identity. The connection string carries the credential.
What can it reach?
Everything the database role in that connection string is allowed to do. A role used for convenience during development frequently has more than read access.
See what your agents can reach. Before someone else does.
Book a demo and we walk through the access paths in an environment like yours.