Datablare is a hosted PostgreSQL MCP server that lets Claude, ChatGPT, Cursor, VS Code and Claude Code answer questions from your Postgres database without the risk of a raw connection. You connect the database once; every query an agent sends is checked, run in a read-only session, limited to the tables and columns you chose, and written to an audit log. Your team adds one link to their AI tool and signs in.
Why a plain Postgres MCP server is risky
Open-source PostgreSQL MCP servers are easy to start: give them a connection string and they run whatever SQL the model writes. The safety depends entirely on that login. In practice:
- the login is often the application’s own, with write rights on every table;
publicholds everything, includinguserswith emails and password hashes;- functions like
pg_read_file,dblinkorpg_sleepare reachable from a plainSELECT; - nothing records which person’s question produced which query.
What Datablare adds on top of PostgreSQL
Read-only, enforced twice. Datablare’s SQL guard accepts only a single SELECT, WITH or VALUES statement and refuses write keywords, COPY, SET, DO, CALL and functions that read files, reach other servers, sleep, lock or change settings (including set_config). What passes runs on a connection opened with default_transaction_read_only=on, so Postgres refuses writes itself.
Tables and columns you choose. Pick tables per project; mark a table as not queryable while keeping it documented; hide columns such as email or phone. The column guard expands SELECT * and follows aliases, so a hidden column is refused wherever it appears.
Every query on record. Audit shows who asked, the question, the SQL, the outcome, rows returned and time taken.
Revoke at once. Removing a person or revoking a key switches off their access immediately. Datablare is hosted in India and passes result rows through without storing them. It helps you meet DPDP · GDPR · HIPAA · CCPA/CPRA · PDPL obligations for data you expose to AI tools. Read more on security and how it works.
PostgreSQL notes
Schemas and search_path
Datablare lists tables and views from every schema the role can see, except pg_catalog, information_schema and pg_toast, as schema.table. When an agent writes a bare name like orders, the guard matches it only against tables you exposed. For that query, Datablare puts the matched schema first in search_path, so orders means your exposed sales.orders — never an unexposed hr.orders earlier in the path. A bare name that exists in two exposed schemas is refused with a request to qualify it.
Timeouts and limits
Each query runs with a local statement_timeout: 30 seconds by default, 60 at most, or your role’s own timeout if it is stricter. Results are capped at 1,000 rows by default and 5,000 at most.
SSL and connection strings
With Use SSL on, Datablare connects with sslmode=require; otherwise it prefers SSL when the server offers it. Paste a connection string from your provider and Datablare fills in the fields for you to check.
Create a read-only login first
CREATE ROLE datablare_reader LOGIN PASSWORD 'choose-a-strong-password'
CONNECTION LIMIT 5;
ALTER ROLE datablare_reader SET statement_timeout = '30s';
ALTER ROLE datablare_reader SET idle_in_transaction_session_timeout = '60s';
GRANT CONNECT ON DATABASE shop TO datablare_reader;
GRANT USAGE ON SCHEMA public TO datablare_reader;
GRANT SELECT ON ALL TABLES IN SCHEMA public TO datablare_reader;
ALTER DEFAULT PRIVILEGES IN SCHEMA public
GRANT SELECT ON TABLES TO datablare_reader;Repeat the USAGE and SELECT grants for each extra schema you want to expose.
Example questions
Try these on Datablare’s one-click e-commerce sample before you connect your own Postgres database:
- What are our best-selling products this month?
- Which colours sell best in each product category?
- Which articles are out of stock in more than two sizes?
- How many new customers placed a first order each week?
Connect PostgreSQL to your AI tool
Sign up free and add your database, then connect Claude, ChatGPT, Cursor or Claude Code. Plans are on pricing.