postgres-mcp-hardened 0.1.5 → 0.1.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +11 -0
- package/checksums.json +5 -5
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -7,6 +7,17 @@ which was deprecated by its authors and last released in December 2024.
|
|
|
7
7
|
Writes are refused by walking the parsed SQL, not by matching strings. Comments, dollar-quoting and
|
|
8
8
|
Unicode tricks do not survive the parse, so they cannot smuggle a statement past the check.
|
|
9
9
|
|
|
10
|
+
**Try to break it without installing anything** — the guard has an offline mode:
|
|
11
|
+
|
|
12
|
+
```sh
|
|
13
|
+
npx postgres-mcp-hardened --validate "/* comment */ DROP TABLE users"
|
|
14
|
+
# REJECT: non-read-only statement: Drop
|
|
15
|
+
```
|
|
16
|
+
|
|
17
|
+
If something that writes comes back `ALLOW`, that is the most useful thing anyone can report. The
|
|
18
|
+
design and the defects found so far are written up in
|
|
19
|
+
[**Rebuilding the Deprecated PostgreSQL MCP Server in Rust**](https://dev.to/eszetael_lab/rebuilding-the-deprecated-postgresql-mcp-server-in-rust-safe-by-default-1eb).
|
|
20
|
+
|
|
10
21
|
## Replace the deprecated server
|
|
11
22
|
|
|
12
23
|
```diff
|
package/checksums.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
|
-
"postgres-mcp-hardened-aarch64-apple-darwin.tar.gz": "
|
|
3
|
-
"postgres-mcp-hardened-aarch64-unknown-linux-gnu.tar.gz": "
|
|
4
|
-
"postgres-mcp-hardened-x86_64-apple-darwin.tar.gz": "
|
|
5
|
-
"postgres-mcp-hardened-x86_64-unknown-linux-gnu.tar.gz": "
|
|
6
|
-
"postgres-mcp-hardened-x86_64-pc-windows-msvc.zip": "
|
|
2
|
+
"postgres-mcp-hardened-aarch64-apple-darwin.tar.gz": "462b262dc46fe37fefeb4ef68061cad8f60b7a08c4faa06f0b55bacbaddc4734",
|
|
3
|
+
"postgres-mcp-hardened-aarch64-unknown-linux-gnu.tar.gz": "97d097f4202b3f73f4988f18ac522542cb275746996ad78bac37d5e23ee4f98f",
|
|
4
|
+
"postgres-mcp-hardened-x86_64-apple-darwin.tar.gz": "b945d895689578fb73308635ab12a4beec65038ad7ee1f56a915eb97ac94c847",
|
|
5
|
+
"postgres-mcp-hardened-x86_64-unknown-linux-gnu.tar.gz": "64ec4c2dc5bf4e464459f2d3e257f0c76b285b9d5695f2c8656222cbeea8eac6",
|
|
6
|
+
"postgres-mcp-hardened-x86_64-pc-windows-msvc.zip": "e642ae64ece7ea2b0309077ab6a855a941edfb49da0b6c8f6dade5b34e6d38d0"
|
|
7
7
|
}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "postgres-mcp-hardened",
|
|
3
3
|
"mcpName": "io.github.Eszetael/postgres-mcp-hardened",
|
|
4
|
-
"version": "0.1.
|
|
4
|
+
"version": "0.1.7",
|
|
5
5
|
"description": "Secure read-only PostgreSQL MCP server in Rust — a maintained alternative to the deprecated @modelcontextprotocol/server-postgres. Blocks writes at the AST, not with regexes.",
|
|
6
6
|
"keywords": [
|
|
7
7
|
"mcp",
|