{ "data": { "a": { "slug": "mcp-toolbox-databases", "name": "MCP Toolbox for Databases", "vendor": "Google", "vendorUrl": "https://mcp-toolbox.dev", "kind": "mcp", "category": "data", "summary": "MCP Toolbox for Databases is Google's open-source MCP server for more than 30 data sources, among them BigQuery, AlloyDB, Cloud SQL, Spanner and PostgreSQL. It runs as a binary or container with prebuilt or custom tools from tools.yaml.", "url": "https://www.anchorterminal.com/tools/mcp-toolbox-databases", "markdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json", "dns": "mcp-toolbox-databases.grade.anchorterminal.com", "repo": "https://github.com/googleapis/mcp-toolbox", "license": "Apache-2.0", "transports": [ "stdio", "streamable-http" ], "packages": [ { "registry": "npm", "name": "@toolbox-sdk/server" }, { "registry": "pypi", "name": "toolbox-core" }, { "registry": "npm", "name": "@toolbox-sdk/core" } ], "auth": "mixed", "authNotes": "Toolbox holds the source credentials (database users and passwords from environment variables, or Google Application Default Credentials and IAM for Google sources). Clients need nothing by default. Optional MCP authorisation makes Toolbox an OAuth 2.1 resource server that validates JWT bearer tokens against a configured authorisation server and required scopes, and publishes protected-resource metadata. authServices can also bind tool parameters to a signed-in user's claims. The HTTP server listens on 127.0.0.1 by default, but --allowed-origins and --allowed-hosts default to *.", "pricing": "free", "pricingNotes": "Free and Apache-2.0, run on your own machine or your own Cloud Run service. Google Cloud sources bill for their own usage (BigQuery queries, Cloud SQL instances); Toolbox itself has no price.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Self-hosted MCP server with nothing to buy (checked 2026-11-06).", "endpoints": [] }, "toolCount": 29, "popularity": { "githubStars": 16818, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://mcp-toolbox.dev/", "llmsTxt": "https://mcp-toolbox.dev/llms.txt", "registryName": "io.github.googleapis/mcp-toolbox", "capabilities": [ "db.sql", "db.document", "db.admin" ], "tags": [ "self-hosted", "free", "open-source", "mcp", "stdio", "http", "mcp-registry", "llms-txt", "google-cloud", "bigquery", "postgres", "toolsets", "read-only-mode", "opentelemetry", "go" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 77.7, "grade": "BB", "agentReady": true, "rank": 27, "ranked": true, "rankOf": 1486, "categoryRank": 2, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 64 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "bestFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "strengths": [ "57 source types and 39 prebuilt configurations, from BigQuery and AlloyDB to PostgreSQL, MySQL, MongoDB and Snowflake", "Read-only mode locks the database session, hides write tools and sets readOnlyHint", "Custom tools in tools.yaml fix SQL and bind parameters to the signed-in user's claims", "Optional MCP authorisation as an OAuth 2.1 resource server with protected-resource metadata", "v1.16.0 on 5 November 2026 after eight releases in 90 days, in the MCP registry" ], "weaknesses": [ "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe", "Prebuilt PostgreSQL set lists 29 tools and AlloyDB 41 unless a toolset is chosen", "432 open issues and pull requests", "Some prebuilt descriptions are a single line with no guidance on when not to use the tool" ], "agentNotes": [ "Load one toolset (such as data) rather than the whole prebuilt set to keep context small", "Turn on the source's read-only mode for exploration; write tools then disappear from tools/list", "Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any", "Prefer custom tools with fixed SQL over execute_sql for production agents" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 77.7 } ], "editorialScores": { "ergonomics": 82, "maintenance": 95, "payments": 60, "reliability": 80, "schema": 85, "security": 75, "transparency": 77 }, "provenanceScore": 50, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npx @toolbox-sdk/server --prebuilt postgres --stdio", "config": { "mcpServers": { "postgres": { "args": [ "-y", "@toolbox-sdk/server", "--prebuilt", "postgres", "--stdio" ], "command": "npx", "env": { "POSTGRES_DATABASE": "mydb", "POSTGRES_HOST": "localhost", "POSTGRES_PASSWORD": "password", "POSTGRES_USER": "user" } } } } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/mcp-toolbox-databases" }, "area": "developer", "provenance": { "legalEntity": "Google LLC", "domain": "mcp-toolbox.dev", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/googleapis/mcp-toolbox/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Source files carry \"Copyright 2025 Google LLC\" under Apache-2.0, and the repository is in the googleapis organisation.", "SECURITY.md routes reports to g.co/vulnz with a five-working-day response and discloses through GitHub Security Advisories.", "mcp-toolbox.dev/robots.txt allows all crawlers and serves llms.txt. Its registration date wasn't found through RDAP.", "No terms or privacy policy specific to Toolbox, which sends nothing to Google unless GCP telemetry export or a Google source is configured." ], "score": 50 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mcp-toolbox-databases.json", "live": { "slug": "mcp-toolbox-databases", "versions": [ { "registry": "github", "name": "googleapis/mcp-toolbox", "version": "v1.16.0", "released": "2026-11-05", "seenAt": "2026-11-06T23:43:21.921228545Z" }, { "registry": "mcp-registry", "name": "io.github.googleapis/mcp-toolbox", "version": "1.16.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "@toolbox-sdk/core", "version": "1.2.0", "seenAt": "2026-11-06T23:43:21.731206096Z" }, { "registry": "npm", "name": "@toolbox-sdk/server", "version": "1.16.0", "seenAt": "2026-11-06T23:43:19.586944944Z" }, { "registry": "pypi", "name": "toolbox-core", "version": "1.4.0", "released": "2026-09-01", "seenAt": "2026-11-06T23:43:20.432816729Z" } ], "githubStars": 16819, "npmWeekly": 37825, "pypiWeekly": 81244, "securityTxt": { "url": "https://mcp-toolbox.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:31.533747335Z" }, "llmsTxt": { "url": "https://mcp-toolbox.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:57.733544718Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/googleapis/mcp-toolbox/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:21:14.273833915Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a1a131225627" } ], "updatedAt": "2026-11-07T18:16:28.95801333Z" } }, "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against PostgreSQL (archived MCP reference server)'s 18.6 (F), and leads in 5 of 7 scored categories. PostgreSQL (archived MCP reference server) leads on transparency \u0026 trust.", "b": { "slug": "postgres-reference-server-archived", "name": "PostgreSQL (archived MCP reference server)", "vendor": "Model Context Protocol (archived)", "vendorUrl": "https://github.com/modelcontextprotocol/servers-archived", "kind": "mcp", "category": "data", "summary": "Archived PostgreSQL reference MCP server for SQL queries. Its read-only transaction wrapper has a documented bypass.", "url": "https://www.anchorterminal.com/tools/postgres-reference-server-archived", "markdownUrl": "https://www.anchorterminal.com/tools/postgres-reference-server-archived.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/postgres-reference-server-archived.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/postgres-reference-server-archived.json", "dns": "postgres-reference-server-archived.grade.anchorterminal.com", "repo": "https://github.com/modelcontextprotocol/servers-archived", "license": "MIT", "transports": [ "stdio" ], "packages": [ { "registry": "npm", "name": "@modelcontextprotocol/server-postgres" } ], "auth": "none", "authNotes": "Connection string, password included, passed as a CLI argument. Queries run inside a read-only transaction that a query starting with `COMMIT;` can escape, so the database role is the only real limit.", "pricing": "free", "pricingNotes": "Open source; unmaintained.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "Archived reference server, no payments.", "endpoints": [] }, "toolCount": 1, "popularity": { "githubStars": 294, "npmWeekly": 118589, "pypiWeekly": null, "asOf": "2026-10-01" }, "docsUrl": "https://github.com/modelcontextprotocol/servers-archived/tree/main/src/postgres", "capabilities": [ "db.sql" ], "tags": [ "reference", "archived", "local", "open-source", "superseded" ], "lastRelease": "2024-12-04", "graded": true, "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "anchor": { "graded": true, "score": 18.6, "grade": "F", "agentReady": false, "rank": 0, "ranked": false, "notRankedWhy": "Shut down 2025-05-29, so out of the ranking", "rankOf": 1486, "categoryRank": 17, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 38, "maintenance": 0, "payments": 60, "reliability": 13, "schema": 29, "security": 5, "transparency": 77 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "high", "date": "2026-10-01" }, "negative": -10, "negativeNotes": [ "-8: 2026-09-30, the read-only bypass Datadog Security Labs published on 21 August 2025 (SQL injection that escapes the read-only transaction and runs arbitrary SQL) is still unfixed, with no advisory, and the package drew 118,589 npm downloads in the week to 30 September 2026. We date it by that week, not by the disclosure, because the exposure is current. Every new install still gets the hole, and the fix that would let the deduction decay never came (https://securitylabs.datadoghq.com/articles/mcp-vulnerability-case-study-SQL-injection-in-the-postgresql-mcp-server/; https://api.npmjs.org/downloads/point/2026-09-24:2026-09-30/@modelcontextprotocol/server-postgres).", "-2: the tool description (\"Run a read-only SQL query\") and the main repository's README (\"Read-only database access\") still promise a guarantee the code doesn't keep, a misleading claim since the August 2025 disclosure (https://github.com/modelcontextprotocol/servers-archived/blob/main/src/postgres/index.ts; https://github.com/modelcontextprotocol/servers#archived)." ], "verdict": "The server exposes one small query tool. Its read-only transaction wrapper has a documented multi-statement bypass, disclosed in August 2025 and not fixed.", "bestFor": "Nothing new.", "disclosure": "MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.", "strengths": [ "One tool of about 180 characters, cheap to load into context", "Table column lists exposed as MCP resources", "MIT and about 150 lines, easy to audit or fork" ], "weaknesses": [ "The read-only transaction can be escaped with a multi-statement query, disclosed in August 2025 and never fixed", "Archived on 29 May 2025 with no security guarantees, and pinned to MCP SDK 1.0.1", "Connection string and password passed on the command line, visible in process lists", "No row limit, pagination or tool annotations", "The npm deprecation message names no successor, so installs keep coming" ], "agentNotes": [ "Don't use for new work. Migrate to Postgres MCP Pro with `--access-mode=restricted` or a managed provider's server", "If you inherit it, connect with a database role that can only SELECT. The transaction won't stop writes", "Add `LIMIT` to every query. The server returns every row as pretty-printed JSON", "Read the `/schema` resources for column names before querying, since there's no schema tool" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 2, "avgRating": 1.5, "history": [ { "basis": "public evidence", "confidence": "high", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 18.6 } ], "editorialScores": { "ergonomics": 38, "maintenance": 0, "payments": 60, "reliability": 13, "schema": 29, "security": 5, "transparency": 80 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-10-01", "maintenance": "2026-10-01", "payments": "2026-10-01", "reliability": "2026-10-01", "schema": "2026-10-01", "security": "2026-10-01", "transparency": "2026-10-01" }, "last": "2026-10-01", "lastMoved": "2026-10-27", "oldest": "2026-10-01", "stale": false, "staleAfterDays": 90 } }, "letme": { "capability": "https://letme.dev/db.sql", "tool": "https://letme.dev/postgres-reference-server-archived" }, "supersededBy": [ "postgres-mcp-pro", "supabase-mcp" ], "sameCompany": [ "fetch-reference-server", "git-reference-server", "puppeteer-reference-server-archived", "filesystem-reference-server", "memory-reference-server", "sequential-thinking-reference-server" ], "area": "developer", "retired": "2025-05-29", "provenance": { "legalEntity": "Model Context Protocol, a Series of LF Projects, LLC", "domain": "modelcontextprotocol.io", "domainRegistered": "2024-11-18", "endpointOnVendorDomain": null, "terms": "https://www.lfprojects.org/policies/terms-of-use/", "privacy": "https://www.lfprojects.org/policies/privacy-policy/", "statusPage": "", "changelog": "https://github.com/modelcontextprotocol/servers/releases", "securityTxt": "valid", "checked": "2026-09-26", "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/postgres-reference-server-archived.json", "live": { "slug": "postgres-reference-server-archived", "versions": [ { "registry": "npm", "name": "@modelcontextprotocol/server-postgres", "version": "0.6.2", "seenAt": "2026-10-27T11:25:18.729591057Z" } ], "githubStars": 305, "npmWeekly": 92427, "securityTxt": { "url": "https://modelcontextprotocol.io/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-27T15:31:28.926342547Z" }, "domain": { "domain": "modelcontextprotocol.io", "checkedAt": "2026-10-25T14:02:39.415294808Z" }, "github": { "repo": "modelcontextprotocol/servers-archived", "checkedAt": "2026-10-26T07:47:38.025006615Z", "stars": 306, "archived": true, "issuesEnabled": true, "pushedAt": "2025-05-28T17:57:12Z", "openIssues": 0, "openPRs": 0, "issuesOpened90d": 0, "issuesClosed90d": 0, "prsMerged90d": 0 }, "updatedAt": "2026-10-27T15:31:28.926342547Z" } }, "edges": [ { "by": 95, "category": "maintenance", "leads": "mcp-toolbox-databases", "name": "Maintenance \u0026 community", "reasons": { "a": "v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.", "b": "Last release 0.6.2 on 4 December 2024 (0). No releases in the last 90 days (0). The repository was archived on 29 May 2025 and is read-only (0). Not in the official MCP registry (0). Pinned to MCP SDK 1.0.1 and deprecated on npm (0)." }, "scores": { "a": 95, "b": 0 } }, { "by": 70, "category": "security", "leads": "mcp-toolbox-databases", "name": "Security \u0026 auth", "reasons": { "a": "Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.", "b": "The connection string, password included, is a command-line argument and shows in process lists. Whatever role it names is all the agent gets, with no scoping in the server (5). Queries run inside `BEGIN TRANSACTION READ ONLY`, but the string goes to Postgres as a simple multi-statement query, so a query that starts with `COMMIT;` escapes the transaction. Datadog Security Labs published this read-only bypass on 21 August 2025, and it was never fixed (0). Table rows reach the model unmarked, with no injection guidance (0). No call log (0). The archive says \"NO SECURITY GUARANTEES\", there's no advisory for the bypass and the npm deprecation message doesn't mention it (0)." }, "scores": { "a": 75, "b": 5 } }, { "by": 67, "category": "reliability", "leads": "mcp-toolbox-databases", "name": "Reliability", "reasons": { "a": "Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.", "b": "Archived and superseded, so we scored what's left. Scored as a local stdio package. @modelcontextprotocol/server-postgres 0.6.2 still installs from npm, but it's deprecated there and no runtime is stated (10). No tests. package.json has no test script, and the archive has no CI for it (0). The repository is read-only, so nobody can file or fix a crash. The code releases the connection without waiting for its ROLLBACK (0). Versions 0.6.0 to 0.6.2 shipped in December 2024 with no changelog (3). Pre-1.0 and archived (0)." }, "scores": { "a": 80, "b": 13 } }, { "by": 56, "category": "schema", "leads": "mcp-toolbox-databases", "name": "Schema \u0026 documentation", "reasons": { "a": "Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.", "b": "One tool, `query`, with an input schema typed as an object holding a string `sql`, but `sql` isn't marked required and has no description (15). The README is Markdown on GitHub. No llms.txt (5). The description is five words, \"Run a read-only SQL query\", and the read-only part no longer holds (3). No constraints, no length limit, no enum (3). The README has client configs only. Database errors are rethrown raw as protocol errors (3). No changelog or versioning beyond three 0.6.x releases (0)." }, "scores": { "a": 85, "b": 29 } }, { "by": 44, "category": "ergonomics", "leads": "mcp-toolbox-databases", "name": "Agent ergonomics", "reasons": { "a": "The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.", "b": "One tool of about 180 characters (25). No row limit, no pagination and no output cap. Every row comes back as pretty-printed JSON (0). Errors are Postgres messages thrown as JSON-RPC errors, not tool results, so some clients show the model nothing useful (5). No annotations, so no `readOnlyHint` (0). One parameter, Node only (8). Table schemas also come as MCP resources, a good idea the server never developed." }, "scores": { "a": 82, "b": 38 } }, { "by": 13, "category": "transparency", "leads": "postgres-reference-server-archived", "name": "Transparency \u0026 trust", "reasons": { "a": "Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.", "b": "MIT, an OSI licence (30). Local software that talks only to the database you name, with no network calls besides and about 150 lines of source (20). The GitHub banner dates the archive to 29 May 2025 and the archive README says no security updates will follow. Neither the archive, the main repository's README nor the npm deprecation message names a successor, and the main README still calls it \"Read-only database access\" (10). No telemetry (20)." }, "scores": { "a": 64, "b": 77 } } ], "facts": [ { "a": "MCP server", "b": "MCP server", "name": "Kind" }, { "a": "Google", "b": "Model Context Protocol (archived)", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "stdio, Streamable HTTP", "b": "stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Apache-2.0", "b": "MIT", "name": "Licence" }, { "a": "29", "b": "1", "name": "Tools exposed" }, { "a": "yes", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "io.github.googleapis/mcp-toolbox", "b": "not listed", "name": "MCP registry" }, { "a": "2026-11-05", "b": "2024-12-04", "name": "Last release" }, { "a": "no document linked", "b": "2021-09-08", "name": "Terms last updated" }, { "a": "no document linked", "b": "2023-03-15", "name": "Privacy policy last updated" }, { "a": "not read yet", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not read yet", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not read yet", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "17k stars", "b": "294 stars, 119k npm/wk", "name": "Popularity" }, { "a": "none", "b": "1.5/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against PostgreSQL (archived MCP reference server)'s 18.6 (F), and leads in 5 of 7 scored categories. PostgreSQL (archived MCP reference server) leads on transparency \u0026 trust.", "question": "Which is better for AI agents, MCP Toolbox for Databases or PostgreSQL (archived MCP reference server)?" }, { "answer": "MCP Toolbox for Databases takes an API key or an OAuth sign-in. PostgreSQL (archived MCP reference server) needs no key.", "question": "Do MCP Toolbox for Databases and PostgreSQL (archived MCP reference server) need an API key?" }, { "answer": "MCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. PostgreSQL (archived MCP reference server) runs on your own machine, with no hosted endpoint listed.", "question": "Can an agent call MCP Toolbox for Databases and PostgreSQL (archived MCP reference server) without installing anything?" }, { "answer": "Yes. MCP Toolbox for Databases is open source (Apache-2.0). PostgreSQL (archived MCP reference server) is open source (MIT).", "question": "Are MCP Toolbox for Databases and PostgreSQL (archived MCP reference server) open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 80 against 13", "Schema \u0026 documentation, 85 against 29", "Agent ergonomics, 82 against 38", "Security \u0026 auth, 75 against 5", "Maintenance \u0026 community, 95 against 0" ], "also": [ "Still running. PostgreSQL (archived MCP reference server) has shut down", "Agent-ready, a grade of BB or better", "No incidents deducted, where PostgreSQL (archived MCP reference server) loses 10 points for them" ], "goodFor": "Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.", "slug": "mcp-toolbox-databases", "watchFor": "--allowed-origins and --allowed-hosts default to *, which the docs call unsafe" }, { "aheadOn": [ "Transparency \u0026 trust, 77 against 64" ], "also": [ "No key needed to call it" ], "goodFor": "Nothing new. It shut down on 2025-05-29.", "slug": "postgres-reference-server-archived", "watchFor": "The read-only transaction can be escaped with a multi-statement query, disclosed in August 2025 and never fixed" } ], "history": { "mcp-toolbox-databases": null, "postgres-reference-server-archived": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.2, "from": 18.4, "fromGrade": "F", "to": 18.6, "toGrade": "F" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.2, "from": 18.6, "fromGrade": "F", "to": 18.4, "toGrade": "F" } ] }, "job": { "capability": "db.sql", "name": "SQL databases" }, "others": [ { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.json", "title": "ClickHouse MCP Server vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-postgres-reference-server-archived.json", "title": "ClickHouse MCP Server vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.json", "title": "DBHub vs MCP Toolbox for Databases", "url": "https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases" }, { "json": "https://www.anchorterminal.com/compare/dbhub-vs-postgres-reference-server-archived.json", "title": "DBHub vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/dbhub-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.json", "title": "MCP Toolbox for Databases vs Neon MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.json", "title": "MCP Toolbox for Databases vs ObsessionDB", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.json", "title": "MCP Toolbox for Databases vs PlanetScale MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.json", "title": "MCP Toolbox for Databases vs Postgres MCP Pro", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.json", "title": "MCP Toolbox for Databases vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.json", "title": "MCP Toolbox for Databases vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-reference-server-archived.json", "title": "Neon MCP Server vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-reference-server-archived.json", "title": "ObsessionDB vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/planetscale-mcp-vs-postgres-reference-server-archived.json", "title": "PlanetScale MCP Server vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/planetscale-mcp-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/postgres-mcp-pro-vs-postgres-reference-server-archived.json", "title": "Postgres MCP Pro vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/postgres-mcp-pro-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-snowflake-managed.json", "title": "PostgreSQL (archived MCP reference server) vs Snowflake-managed MCP server", "url": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-snowflake-managed" }, { "json": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-supabase-mcp.json", "title": "PostgreSQL (archived MCP reference server) vs Supabase API + MCP", "url": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-supabase-mcp" }, { "json": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-postgres-reference-server-archived.json", "title": "MongoDB MCP Server vs PostgreSQL (archived MCP reference server)", "url": "https://www.anchorterminal.com/compare/mongodb-mcp-vs-postgres-reference-server-archived" }, { "json": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-redis-mcp.json", "title": "PostgreSQL (archived MCP reference server) vs Redis MCP", "url": "https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-redis-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.json", "title": "MCP Toolbox for Databases vs MongoDB MCP Server", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp" }, { "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.json", "title": "MCP Toolbox for Databases vs Redis MCP", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp" } ], "panel": null, "scores": [ { "by": 67, "edge": "mcp-toolbox-databases", "key": "reliability", "mcp-toolbox-databases": 80, "name": "Reliability", "postgres-reference-server-archived": 13, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 56, "edge": "mcp-toolbox-databases", "key": "schema", "mcp-toolbox-databases": 85, "name": "Schema \u0026 documentation", "postgres-reference-server-archived": 29, "weight": 13 }, { "by": 44, "edge": "mcp-toolbox-databases", "key": "ergonomics", "mcp-toolbox-databases": 82, "name": "Agent ergonomics", "postgres-reference-server-archived": 38, "weight": 13 }, { "by": 70, "edge": "mcp-toolbox-databases", "key": "security", "mcp-toolbox-databases": 75, "name": "Security \u0026 auth", "postgres-reference-server-archived": 5, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "mcp-toolbox-databases": 60, "name": "Payments \u0026 pricing", "postgres-reference-server-archived": 60, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 95, "edge": "mcp-toolbox-databases", "key": "maintenance", "mcp-toolbox-databases": 95, "name": "Maintenance \u0026 community", "postgres-reference-server-archived": 0, "weight": 7 }, { "by": 13, "edge": "postgres-reference-server-archived", "key": "transparency", "mcp-toolbox-databases": 64, "name": "Transparency \u0026 trust", "postgres-reference-server-archived": 77, "weight": 7 } ], "summary": "PostgreSQL (archived MCP reference server) shut down on 2025-05-29. MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against PostgreSQL (archived MCP reference server)'s 18.6 (F), and leads in 5 of 7 scored categories. PostgreSQL (archived MCP reference server) leads on transparency \u0026 trust. Both do sql databases.", "tasks": null, "tutorials": [], "verdicts": { "mcp-toolbox-databases": "One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.", "postgres-reference-server-archived": "The server exposes one small query tool. Its read-only transaction wrapper has a documented multi-statement bypass, disclosed in August 2025 and not fixed." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived", "json": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.min.md" }, "markdown": "PostgreSQL (archived MCP reference server) shut down on 2025-05-29. MCP Toolbox for Databases scores 77.7 (BB) on agent readiness against PostgreSQL (archived MCP reference server)'s 18.6 (F), and leads in 5 of 7 scored categories. PostgreSQL (archived MCP reference server) leads on transparency \u0026 trust. Both do sql databases.\n\n- MCP Toolbox for Databases: grade BB, 77.7/100, rank #27 of 1486. Markdown https://www.anchorterminal.com/tools/mcp-toolbox-databases.md · JSON https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json\n- PostgreSQL (archived MCP reference server): grade F, 18.6/100, rank retired, not ranked. Markdown https://www.anchorterminal.com/tools/postgres-reference-server-archived.md · JSON https://www.anchorterminal.com/api/v1/tools/postgres-reference-server-archived.json\n- Best database, file and memory tools for AI agents: https://www.anchorterminal.com/best/data/index.md\n- All 97 databases comparisons: https://www.anchorterminal.com/compare/data/index.md\n\n## Which one, for what\n\n### MCP Toolbox for Databases (BB)\n\nGood for: Agents and coding assistants that need one server across Google Cloud data services and common databases, or production agents with curated SQL tools.\n\nAhead on:\n- Reliability, 80 against 13\n- Schema \u0026 documentation, 85 against 29\n- Agent ergonomics, 82 against 38\n- Security \u0026 auth, 75 against 5\n- Maintenance \u0026 community, 95 against 0\n\nAlso in its favour:\n- Still running. PostgreSQL (archived MCP reference server) has shut down\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where PostgreSQL (archived MCP reference server) loses 10 points for them\n\nWatch for: --allowed-origins and --allowed-hosts default to *, which the docs call unsafe\n\n### PostgreSQL (archived MCP reference server) (F)\n\nGood for: Nothing new. It shut down on 2025-05-29.\n\nAhead on:\n- Transparency \u0026 trust, 77 against 64\n\nAlso in its favour:\n- No key needed to call it\n\nWatch for: The read-only transaction can be escaped with a multi-statement query, disclosed in August 2025 and never fixed\n\n\n## Why the edge\n\n### Maintenance \u0026 community: MCP Toolbox for Databases +95\n\n- MCP Toolbox for Databases (95): v1.16.0 on 5 November 2026, one day before this check (30). Eight releases from v1.10.0 (27 August) to v1.16.0 in the 90 days (20). Pull requests merge daily and new tools land in each fortnightly release, though 432 issues and pull requests are open (20). io.github.googleapis/mcp-toolbox is in the official registry at 1.16.0 (15). Release automation, lint, tests and conformance workflows (10). 30 + 20 + 20 + 15 + 10 = 95.\n- PostgreSQL (archived MCP reference server) (0): Last release 0.6.2 on 4 December 2024 (0). No releases in the last 90 days (0). The repository was archived on 29 May 2025 and is read-only (0). Not in the official MCP registry (0). Pinned to MCP SDK 1.0.1 and deprecated on npm (0).\n\n### Security \u0026 auth: MCP Toolbox for Databases +70\n\n- MCP Toolbox for Databases (75): Source credentials stay in Toolbox, Google sources use IAM, and optional MCP authorisation validates OAuth 2.1 JWTs with required scopes. --allowed-origins and --allowed-hosts default to *, which the CLI docs themselves call unsafe even on localhost, though the default bind is 127.0.0.1 (20). Read-only mode is enforced at the engine, write tools are suppressed, and custom tools can fix SQL and bind parameters to the signed-in user (18). The security docs cover prompt injection and screening through Model Armor (12). OpenTelemetry traces and metrics per call when exported (10). Google's vulnerability intake with a stated response time and GitHub advisories (15). 20 + 18 + 12 + 10 + 15 = 75.\n- PostgreSQL (archived MCP reference server) (5): The connection string, password included, is a command-line argument and shows in process lists. Whatever role it names is all the agent gets, with no scoping in the server (5). Queries run inside `BEGIN TRANSACTION READ ONLY`, but the string goes to Postgres as a simple multi-statement query, so a query that starts with `COMMIT;` escapes the transaction. Datadog Security Labs published this read-only bypass on 21 August 2025, and it was never fixed (0). Table rows reach the model unmarked, with no injection guidance (0). No call log (0). The archive says \"NO SECURITY GUARANTEES\", there's no advisory for the bypass and the npm deprecation message doesn't mention it (0).\n\n### Reliability: MCP Toolbox for Databases +67\n\n- MCP Toolbox for Databases (80): Scored as local software the owner runs. A Go binary, a container in Artifact Registry and @toolbox-sdk/server on npm, with install paths per platform (20). Tests, lint, conformance and nightly tier-report workflows in the repository; the pass state wasn't read (15). 432 open issues and pull requests on a repository with 16,818 stars and releases every two weeks, triaged with labels, though the backlog is large (15). Semantic versioning with a published policy, release-please CHANGELOG and an UPGRADING.md (15). 1.x since well before this check, v1.16.0 now (15). 20 + 15 + 15 + 15 + 15 = 80.\n- PostgreSQL (archived MCP reference server) (13): Archived and superseded, so we scored what's left. Scored as a local stdio package. @modelcontextprotocol/server-postgres 0.6.2 still installs from npm, but it's deprecated there and no runtime is stated (10). No tests. package.json has no test script, and the archive has no CI for it (0). The repository is read-only, so nobody can file or fix a crash. The code releases the connection without waiting for its ROLLBACK (0). Versions 0.6.0 to 0.6.2 shipped in December 2024 with no changelog (3). Pre-1.0 and archived (0).\n\n### Schema \u0026 documentation: MCP Toolbox for Databases +56\n\n- MCP Toolbox for Databases (85): Every tool's parameters are typed in tools.yaml and published as JSON Schema over MCP (25). mcp-toolbox.dev serves llms.txt (10). Prebuilt descriptions vary from one line (\"Use this tool to execute a single SQL statement.\") to detailed, and few say when not to use a tool (12). Typed parameters with required flags; execute_sql takes free SQL (12). Many examples, samples and codelabs; error responses are thinly documented (11). Semver, a dated CHANGELOG and versioned docs (15). 25 + 10 + 12 + 12 + 11 + 15 = 85.\n- PostgreSQL (archived MCP reference server) (29): One tool, `query`, with an input schema typed as an object holding a string `sql`, but `sql` isn't marked required and has no description (15). The README is Markdown on GitHub. No llms.txt (5). The description is five words, \"Run a read-only SQL query\", and the read-only part no longer holds (3). No constraints, no length limit, no enum (3). The README has client configs only. Database errors are rethrown raw as protocol errors (3). No changelog or versioning beyond three 0.6.x releases (0).\n\n### Agent ergonomics: MCP Toolbox for Databases +44\n\n- MCP Toolbox for Databases (82): The PostgreSQL prebuilt set lists 29 tools (15), split into five toolsets a client can load one at a time, and write tools disappear in read-only mode (plus 8). Results are bounded per tool, some prebuilt tools take limits, and BigQuery tools compact empty schema fields (14). Errors come back as tool errors; paths are sanitised from file errors since 1.15.0 (12). readOnlyHint and destructiveHint are set per tool and switch with the source's read-only state (18). Prebuilt sets need only environment variables, and SDKs exist in Python, JavaScript, Go and Java (15). 23 + 14 + 12 + 18 + 15 = 82.\n- PostgreSQL (archived MCP reference server) (38): One tool of about 180 characters (25). No row limit, no pagination and no output cap. Every row comes back as pretty-printed JSON (0). Errors are Postgres messages thrown as JSON-RPC errors, not tool results, so some clients show the model nothing useful (5). No annotations, so no `readOnlyHint` (0). One parameter, Node only (8). Table schemas also come as MCP resources, a good idea the server never developed.\n\n### Transparency \u0026 trust: PostgreSQL (archived MCP reference server) +13\n\n- MCP Toolbox for Databases (64): Apache-2.0 (30). A self-hosted server; data goes only to the configured sources and to a telemetry exporter if one is set. There is no data-handling statement of its own (15). A versioning policy defining breaking changes, UPGRADING.md and a notice for the repository rename; prebuilt tool removals are listed in the changelog (16). Telemetry is off unless --telemetry-otlp or --telemetry-gcp is set, and the docs say so (16). 30 + 15 + 16 + 16 = 77.\n- PostgreSQL (archived MCP reference server) (77): MIT, an OSI licence (30). Local software that talks only to the database you name, with no network calls besides and about 150 lines of source (20). The GitHub banner dates the archive to 29 May 2025 and the archive README says no security updates will follow. Neither the archive, the main repository's README nor the npm deprecation message names a successor, and the main README still calls it \"Read-only database access\" (10). No telemetry (20).\n\n## Score by category\n\n| Category | Weight | MCP Toolbox for Databases | PostgreSQL (archived MCP reference server) | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 80 | 13 | MCP Toolbox for Databases +67 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 85 | 29 | MCP Toolbox for Databases +56 |\n| Agent ergonomics | 13% (16.2 this run) | 82 | 38 | MCP Toolbox for Databases +44 |\n| Security \u0026 auth | 14% (17.5 this run) | 75 | 5 | MCP Toolbox for Databases +70 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 60 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 95 | 0 | MCP Toolbox for Databases +95 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 64 | 77 | PostgreSQL (archived MCP reference server) +13 |\n| Negative events | ≤15 | 0 | -10 | |\n| **Total** | | **77.7 · BB** | **18.6 · F** | |\n\n## Facts side by side\n\n| Fact | MCP Toolbox for Databases | PostgreSQL (archived MCP reference server) |\n| --- | --- | --- |\n| Kind | MCP server | MCP server |\n| Vendor | Google | Model Context Protocol (archived) |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | stdio, Streamable HTTP | stdio |\n| Auth | OAuth or key | None |\n| Pricing | Free | Free |\n| x402 | no | no |\n| Licence | Apache-2.0 | MIT |\n| Tools exposed | 29 | 1 |\n| Read-only variant documented | yes | no |\n| llms.txt | yes | no |\n| MCP registry | `io.github.googleapis/mcp-toolbox` | not listed |\n| Last release | 2026-11-05 | 2024-12-04 |\n| Terms last updated | no document linked | 2021-09-08 |\n| Privacy policy last updated | no document linked | 2023-03-15 |\n| Customer content may train models | not read yet | not found in the text |\n| Terms restrict automated access | not read yet | not found in the text |\n| Terms restrict benchmarking | not read yet | not found in the text |\n| Terms or service can change without notice | not read yet | not found in the text |\n| Arbitration or class-action waiver | not read yet | not found in the text |\n| Popularity | 17k stars | 294 stars, 119k npm/wk |\n| Agent reviews | none | 1.5/5 (2) |\n\n## How the scores have moved\n\n### MCP Toolbox for Databases\n\nNo score change since it was listed.\n\n### PostgreSQL (archived MCP reference server)\n\n- +0.2 on 27 October 2026: checklist\n- -0.2 on 8 October 2026: checklist\n\n## Verdicts\n\n**MCP Toolbox for Databases.** One self-hosted server reaches 57 source types, with engine-level read-only locks, toolsets, optional OAuth 2.1 and fortnightly semver releases under Apache-2.0. Prebuilt sets list 9 to 41 tools, origin and host checks default to any, and 432 issues and pull requests are open.\n\n**PostgreSQL (archived MCP reference server).** The server exposes one small query tool. Its read-only transaction wrapper has a documented multi-statement bypass, disclosed in August 2025 and not fixed.\n\n## Before you call either\n\n### MCP Toolbox for Databases\n\n1. Load one toolset (such as data) rather than the whole prebuilt set to keep context small\n2. Turn on the source's read-only mode for exploration; write tools then disappear from tools/list\n3. Start the HTTP server with --allowed-hosts and --allowed-origins set; the defaults accept any\n4. Prefer custom tools with fixed SQL over execute_sql for production agents\n\n### PostgreSQL (archived MCP reference server)\n\n1. Don't use for new work. Migrate to Postgres MCP Pro with `--access-mode=restricted` or a managed provider's server\n2. If you inherit it, connect with a database role that can only SELECT. The transaction won't stop writes\n3. Add `LIMIT` to every query. The server returns every row as pretty-printed JSON\n4. Read the `/schema` resources for column names before querying, since there's no schema tool\n\n## Questions\n\n### Which is better for AI agents, MCP Toolbox for Databases or PostgreSQL (archived MCP reference server)?\n\nMCP Toolbox for Databases scores 77.7 (BB) on agent readiness against PostgreSQL (archived MCP reference server)'s 18.6 (F), and leads in 5 of 7 scored categories. PostgreSQL (archived MCP reference server) leads on transparency \u0026 trust.\n\n### Do MCP Toolbox for Databases and PostgreSQL (archived MCP reference server) need an API key?\n\nMCP Toolbox for Databases takes an API key or an OAuth sign-in. PostgreSQL (archived MCP reference server) needs no key.\n\n### Can an agent call MCP Toolbox for Databases and PostgreSQL (archived MCP reference server) without installing anything?\n\nMCP Toolbox for Databases runs on your own machine, with no hosted endpoint listed. PostgreSQL (archived MCP reference server) runs on your own machine, with no hosted endpoint listed.\n\n### Are MCP Toolbox for Databases and PostgreSQL (archived MCP reference server) open source?\n\nYes. MCP Toolbox for Databases is open source (Apache-2.0). PostgreSQL (archived MCP reference server) is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.json, and with the fewest tokens: https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"mcp-toolbox-databases\", \"b\": \"postgres-reference-server-archived\"}`. From a terminal: `anchor compare mcp-toolbox-databases postgres-reference-server-archived`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/mcp-toolbox-databases.json and https://www.anchorterminal.com/api/v1/tools/postgres-reference-server-archived.json\n\n## Other comparisons with MCP Toolbox for Databases or PostgreSQL (archived MCP reference server)\n\n- [ClickHouse MCP Server vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-mcp-toolbox-databases.md)\n- [ClickHouse MCP Server vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/clickhouse-mcp-server-vs-postgres-reference-server-archived.md)\n- [DBHub vs MCP Toolbox for Databases](https://www.anchorterminal.com/compare/dbhub-vs-mcp-toolbox-databases.md)\n- [DBHub vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/dbhub-vs-postgres-reference-server-archived.md)\n- [MCP Toolbox for Databases vs Neon MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-neon-mcp.md)\n- [MCP Toolbox for Databases vs ObsessionDB](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-obsessiondb.md)\n- [MCP Toolbox for Databases vs PlanetScale MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-planetscale-mcp.md)\n- [MCP Toolbox for Databases vs Postgres MCP Pro](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-mcp-pro.md)\n- [MCP Toolbox for Databases vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-snowflake-managed.md)\n- [MCP Toolbox for Databases vs Supabase API + MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-supabase-mcp.md)\n- [Neon MCP Server vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/neon-mcp-vs-postgres-reference-server-archived.md)\n- [ObsessionDB vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/obsessiondb-vs-postgres-reference-server-archived.md)\n- [PlanetScale MCP Server vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/planetscale-mcp-vs-postgres-reference-server-archived.md)\n- [Postgres MCP Pro vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/postgres-mcp-pro-vs-postgres-reference-server-archived.md)\n- [PostgreSQL (archived MCP reference server) vs Snowflake-managed MCP server](https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-snowflake-managed.md)\n- [PostgreSQL (archived MCP reference server) vs Supabase API + MCP](https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-supabase-mcp.md)\n- [MongoDB MCP Server vs PostgreSQL (archived MCP reference server)](https://www.anchorterminal.com/compare/mongodb-mcp-vs-postgres-reference-server-archived.md)\n- [PostgreSQL (archived MCP reference server) vs Redis MCP](https://www.anchorterminal.com/compare/postgres-reference-server-archived-vs-redis-mcp.md)\n- [MCP Toolbox for Databases vs MongoDB MCP Server](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-mongodb-mcp.md)\n- [MCP Toolbox for Databases vs Redis MCP](https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-redis-mcp.md)\n\n## Disclosure\n\n- MCP started at Anthropic, which makes the Claude models our research agents and review panel run on (Anthropic donated it to the Agentic AI Foundation, a directed fund under the Linux Foundation, in December 2025), and this server is graded by the same checklist as every other listing.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)", "url": "" } ], "description": "MCP Toolbox for Databases scores 77.7 (BB) to PostgreSQL's 18.6 (F) for sql databases. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "MCP Toolbox for Databases BB 77.7", "PostgreSQL (archived MCP reference server) F 18.6", "scores" ], "h1": "MCP Toolbox for Databases vs PostgreSQL (archived MCP reference server)", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived", "published": "2026-10-01", "section": "tools", "title": "MCP Toolbox for Databases vs PostgreSQL for AI agents (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/mcp-toolbox-databases-vs-postgres-reference-server-archived" }, "tokens": { "markdown": 4700, "slim": 2580 }, "version": 1 }