
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
postgres-mcp-tools
Advanced tools
PostgreSQL-based memory system with vector search capabilities for AI applications, including MCP integration for Claude
PostgreSQL-based memory system with vector search capabilities for AI applications, including MCP integration for Claude.
This package provides a memory system built on PostgreSQL with pgvector that enables:
npm install -g postgres-mcp-tools
For detailed installation instructions including troubleshooting, see INSTALLATION.md.
# Start PostgreSQL in Docker
docker-compose up -d postgres
# Start the MCP server
docker-compose up -d mcp-server
# Verify the robust transport functionality
npm run test-transport
See CLAUDE_DESKTOP_SETUP.md for detailed instructions.
Configuration is managed through environment variables or command-line arguments:
POSTGRES_HOST: PostgreSQL host (default: localhost)POSTGRES_PORT: PostgreSQL port (default: 5432)POSTGRES_USER: PostgreSQL username (default: memory_user)POSTGRES_PASSWORD: PostgreSQL passwordPOSTGRES_DB: PostgreSQL database name (default: memory_db)EMBEDDING_MODEL: Embedding model to use: "openai", "anthropic", or "mock" (default: mock)OPENAI_API_KEY: OpenAI API key (if using OpenAI embeddings)ANTHROPIC_API_KEY: Anthropic API key (if using Anthropic embeddings)MCP_SERVER_PORT: MCP server port (default: 3000)HTTP_PORT: HTTP API port (default: 8080)The easiest way to run PostgreSQL MCP Tools is using Docker:
# Start everything
docker-compose up -d
# Stop everything
docker-compose down
# Install dependencies
npm install
# Install test dependencies
npm run update-deps
# Build the server
npm run build-server
# Run minimal tests (recommended)
npm run test:basic
# Run transport tests (may require configuration)
npm run test:transport
Note: The test setup is configured for ESM compatibility in a primarily ESM project. If you encounter issues, try the alternate test configuration with
npm run test:alt.
See tests/README.md for more information on testing.
As of version 1.0.9, PostgreSQL MCP Tools now properly integrates with Claude Desktop by ensuring all debug logs go to stderr instead of stdout, maintaining proper JSON-RPC protocol communication.
We've implemented a production-ready robust transport layer that handles non-JSON messages gracefully. This fixes issues where plain text log messages were causing the server to crash with JSON parsing errors.
Key improvements:
For detailed information about the robust transport implementation, see ROBUST_TRANSPORT.md.
If you previously experienced JSON parsing errors when starting the server, this update should resolve those issues.
See full RELEASE_NOTES.md for all changes.
If you're upgrading from a previous version, run:
npm update -g postgres-mcp-tools
Then update your Claude Desktop configuration as described in CLAUDE_DESKTOP_SETUP.md and restart the MCP server:
npm run start-server
MIT
FAQs
PostgreSQL-based memory system with vector search capabilities for AI applications, including MCP integration for Claude
We found that postgres-mcp-tools demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.