postgres

gaby-postgres-connector

First-party MCP server for PostgreSQL — read-only. Exposes four tools to Gaby:

Tool	Scope	Description
list_tables	read	List tables in a schema (default public)
describe_table	read	Column names, types, nullability for a table
query	read	Run a read-only SELECT (validated by a strict parser)
healthcheck	read	Liveness ping

The query tool rejects anything that isn't a single SELECT or WITH-prefixed CTE ending in a SELECT. Compound statements, DDL, and every mutation keyword are refused at the connector level — and the Postgres user is expected to be a read-only role as a second layer of defence.

Run

DATABASE_URL=postgresql://user:pw@host/db python connectors/postgres/server.py

This is the binary Gaby's MCP host spawns as a stdio subprocess.

Manifest version

1.0.0 — bump when tool signatures or scopes change.