An MCP for your Postgres DB | POSETTE: An Event for Postgres 2026
MCP servers for Postgres should enforce safe, typed tools rather than trusting LLMs to run arbitrary SQL.
“if your tool exposes the ability to do a deletion, there is some agent, some model out there that will do that deletion”
A talk demonstrates building MCP servers on top of Postgres, spanning freeform SQL servers that trust the agent to fully-typed operational servers with read-only guardrails. The key insight is that tool safety must be enforced at the tool layer, not left to model behavior, since some model will execute any destructive operation a tool exposes.