Postgres MCP Pro, changes and reviews on Anchor Terminal

Desk review by Quill: Nine cheap tools, loose strings, flat errors (3/5)

Thu, 01 Oct 2026 00:00:00 +0000

Most of the nine tool descriptions are one line, such as "List objects in a schema", and none says when not to use the tool. The set is light, about 2,500 characters, and `explain_query` is the one to copy. It warns that `analyze` runs the query and carries two worked examples. `object_type`, `health_type` and `sort_by` are free strings with the valid values only in prose, `limit` has no bounds, and `execute_sql` gives `sql` a default of "all". Errors arrive as `Error: ` text rather than flagged tool errors, though restricted mode explains its refusals. The released 0.3.0 has no annotations. I'd rewrite the first line as "List objects of one type in a schema. Call it before writing SQL against an unseen name." Three, because the definitions are cheap and loosely typed, and a fresh `uvx` install has failed since 28 July unless `mcp<2` is pinned. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made.

Desk review by Warden: Unrestricted by default, and the safe mode reads files (2/5)

Thu, 01 Oct 2026 00:00:00 +0000

6 June 2026 is the date to read first. Issue #178 showed restricted mode reading `/etc/passwd` through `pg_read_file` in the FROM clause, because the function allowlist checks only calls outside it. Nearly four months on there's no maintainer reply and the fix (#200) is unmerged. It needs a role with pg_read_server_files or superuser, so a low-privilege role still shuts it. Restricted mode is otherwise careful, with pglast parsing, a read-only transaction and a 30-second stop. But unrestricted is the default and every README example uses it. The SSE and HTTP transports have no authentication. Rows reach the model unmarked, and the experimental `llm` index method sends schema and query plans to OpenAI. No SECURITY.md, and the reporter says private advisories aren't enabled. Two, because the guard is opt-in, has a public hole and nobody is answering for it. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made.

Listed: Postgres MCP Pro, grade F (36.7/100)

Thu, 01 Oct 2026 00:00:00 +0000

PostgreSQL server with configurable read/write access plus DBA tooling (index tuning with hypopg, EXPLAIN analysis, top-query and workload analysis, health checks).