queryLABSCO SUMMARY
One tool, reads only, credentials outside the code.
A single query tool is a smaller surface than a schema-plus-query-plus-execute server, and for a production RDS instance that is the right trade — the model cannot write, and the schema is still discoverable through ordinary catalogue queries. Give it a database user with read grants on exactly the schemas you want visible; the server's read-only check is a floor, not your access policy.
What it is
A Node MCP server that opens a connection to a PostgreSQL database on AWS and exposes one tool for running read queries against it.
What you get
- A
querytool takingsqland returning the rows - Read-only enforcement: only SELECT, SHOW and similar statements are allowed
- Credentials supplied through the client's env block rather than living in the code
- Enough access to introspect the schema — querying information_schema tells the model what exists before it writes anything else
Requirements
pnpm install then pnpm run build. Configure DB_HOST, DB_PORT, DB_NAME, DB_USER and DB_PASSWORD in the client's env block, and point the command at the built build/index.js with an absolute path over stdio.
Setup effort
Build from source — git clone https://github.com/T1nker-1220/aws-postgress-mcp-server.git
USE CASES
01
Answering a question about production data
Ask in English and let the server run the SELECT against RDS.
02
Finding out what tables exist
Query the information schema for the public tables before asking anything that names one.
03
Keeping the blast radius small
Connect with a read-only database user rather than the owner account.
1 tool
Listed in project docs. Your client may show a different list.
BEFORE YOU INSTALL
What to know first
Tools you get
1 tool named in the project's documentation.
Requires
DB_PASSWORD in your environment
Where it runs
Both documented clients run the server on your machine.
INSTALLATION
Connect your client
You clone and build this one yourself.
Server setup
TERMINAL
git clone https://github.com/T1nker-1220/aws-postgress-mcp-server.git
cd aws-postgress-mcp-server
pnpm install
pnpm run buildMCP Clients
Cline, Windsurf
JSON
{
"mcpServers": {
"aws-postgres-mcp-server": {
"command": "node",
"args": [
"<YOUR_PATH_TO_AWS_POSTGRESS_MCP_SERVER>/build/index.js"
],
"env": {
"DB_HOST": "<YOUR_HOST>.rds.amazonaws.com",
"DB_PORT": "5432",
"DB_NAME": "<YOUR_DB_NAME>",
"DB_USER": "<YOUR_DB_USER>",
"DB_PASSWORD": "<YOUR_DB_PASSWORD>"
},
"transportType": "stdio",
"disabled": false,
"autoApprove": []
}
}
}<YOUR_PATH_TO_AWS_POSTGRESS_MCP_SERVER> is the full path of your clone (the README's own example is the author's Windows path). <YOUR_HOST> is your RDS host.
