PostgreSQL (archived MCP reference server) vs ReqRes MCP server

PostgreSQL (archived MCP reference server) 0

Last release 0.6.2 on 4 December 2024 (0). No releases in the last 90 days (0). The repository was archived on 29 May 2025 and is read-only (0). Not in the official MCP registry (0). Pinned to MCP SDK 1.0.1 and deprecated on npm (0).

ReqRes MCP server 50

Registry entry in.reqres/reqres updated 16 October 2026 (30). No dated releases found (0). Blog and docs; no changelog (5 of 15). Official registry entry under its own namespace (15). No package to read (0). 30 + 0 + 5 + 15 + 0 = 50. Registry presence read from Anchor Terminal's own daily import of the official MCP registry (/api/v1/registry.json, 6 November 2026), not the registry's API.

PostgreSQL (archived MCP reference server) 38

One tool of about 180 characters (25). No row limit, no pagination and no output cap. Every row comes back as pretty-printed JSON (0). Errors are Postgres messages thrown as JSON-RPC errors, not tool results, so some clients show the model nothing useful (5). No annotations, so no readOnlyHint (0). One parameter, Node only (8). Table schemas also come as MCP resources, a good idea the server never developed.

ReqRes MCP server 76

Seven compact tools (25). list_records is paginated (15 of 20). No documented errors (3 of 20). Annotated, two read-only, and delete_record marked (18 of 20). No key needed and a plain REST API behind it (15). 25 + 15 + 3 + 18 + 15 = 76.

PostgreSQL (archived MCP reference server) 29

One tool, query, with an input schema typed as an object holding a string sql, but sql isn't marked required and has no description (15). The README is Markdown on GitHub. No llms.txt (5). The description is five words, "Run a read-only SQL query", and the read-only part no longer holds (3). No constraints, no length limit, no enum (3). The README has client configs only. Database errors are rethrown raw as protocol errors (3). No changelog or versioning beyond three 0.6.x releases (0).

ReqRes MCP server 61

Seven tools read from tools/list with JSON Schema inputs (25). llms.txt (10). A tool table says what each does (12 of 20). Records and fields are free-form objects (5 of 15). Worked flow on the MCP page, no error docs (6 of 15). Registry 1.0.0, no changelog (3 of 15). 25 + 10 + 12 + 5 + 6 + 3 = 61.

PostgreSQL (archived MCP reference server) 77

MIT, an OSI licence (30). Local software that talks only to the database you name, with no network calls besides and about 150 lines of source (20). The GitHub banner dates the archive to 29 May 2025 and the archive README says no security updates will follow. Neither the archive, the main repository's README nor the npm deprecation message names a successor, and the main README still calls it "Read-only database access" (10). No telemetry (20).

ReqRes MCP server 47

Closed service under readable terms; operating company not named in the parts read (10 of 30). You own your data, unclaimed agent projects are deleted after 72 hours, and the terms say the free service can end with reasonable notice (22 of 30). That notice clause and the 72-hour rule are dated commitments (10 of 20). Subprocessors not found (5 of 20). 10 + 22 + 10 + 5 = 47.

PostgreSQL (archived MCP reference server) 5

The connection string, password included, is a command-line argument and shows in process lists. Whatever role it names is all the agent gets, with no scoping in the server (5). Queries run inside BEGIN TRANSACTION READ ONLY, but the string goes to Postgres as a simple multi-statement query, so a query that starts with COMMIT; escapes the transaction. Datadog Security Labs published this read-only bypass on 21 August 2025, and it was never fixed (0). Table rows reach the model unmarked, with no injection guidance (0). No call log (0). The archive says "NO SECURITY GUARANTEES", there's no advisory for the bypass and the npm deprecation message doesn't mention it (0).

ReqRes MCP server 33

No credential to start, and project keys returned by the tool (15 of 30). Writes on the agent's own project only (12 of 20). Every successful result ends with a sponsored message, labelled and 'never written as an instruction', which still puts third-party text in the model's context (3 of 15). No audit log (0). No security programme found (3 of 20). 15 + 12 + 3 + 0 + 3 = 33.

PostgreSQL (archived MCP reference server) 13

Archived and superseded, so we scored what's left. Scored as a local stdio package. @modelcontextprotocol/server-postgres 0.6.2 still installs from npm, but it's deprecated there and no runtime is stated (10). No tests. package.json has no test script, and the archive has no CI for it (0). The repository is read-only, so nobody can file or fix a crash. The code releases the connection without waiting for its ROLLBACK (0). Versions 0.6.0 to 0.6.2 shipped in December 2024 with no changelog (3). Pre-1.0 and archived (0).

ReqRes MCP server 30

status.reqres.in wasn't reachable (0). No history (5). Free-plan limits published with numbers (250 requests a day, 3 collections, 100 records) (15). No retry guidance (0). No SLA found (0). Not labelled beta (10). 0 + 5 + 15 + 0 + 0 + 10 = 30.