Building Safe DML Only Mode For Postgres MCP
So I gave an AI agent unrestricted access to my database and it went ahead and restructured my schema. Surprise, surprise. Let me tell you how that little disaster led me to build a whole new access mode for postgres-mcp.
The Problem: Two Modes Aren’t Enough
The postgres-mcp server shipped with two access modes: UNRESTRICTED (full database access, great for dev, terrifying for anything else) and RESTRICTED (read-only, safe but useless when you actually need to write data). What was missing was the middle ground — let the agent insert records, update statuses, delete old data, but for...
Continue reading →