database-security

Postgres MCP server for AI agents. Connect the tables you've been keeping off-limits. PII masked at the source, policy enforced on the SQL AST, writes held for human approval, everything audited. MIT, self-hostable.

A production-grade, schema-aware PostgreSQL MCP server for enterprise AI. Features Zero-Trust SQL validation, multi-tier permissions, and real-time schema introspection for secure, autonomous database operations.

Let AI agents query and update Postgres/MySQL without raw SQL, unrestricted schema access, or database credentials in the model; writes stay reviewed.

Self-hosted database access control plane for PostgreSQL, MySQL, and future engines.

Text-to-SQL over 31M UK Land Registry transactions, AST-validated. TypeScript, Claude Haiku, PostgreSQL.

EncoraDB — Secure, developer-friendly column-level encryption for Node.js databases.

Multi-Tenant SaaS platform with dual-layer tenant isolation: NestJS middleware (X-Tenant-ID header validation) + PostgreSQL Row-Level Security. Single-Database Shared-Schema architecture with Prisma ORM. Cross-tenant breach simulation test proves zero data leakage across 24 attack scenarios.

Tenantwell — Postgres row-level security multi-tenancy, with the isolation test that proves it

Audit Postgres / Supabase Row-Level Security posture from the CLI.

A real-time PostgreSQL proxy that anonymizes sensitive data on the fly for secure development

Read-only MCP server for Postgres. A deny-by-default policy file decides which tables and columns an AI agent can see; every query runs inside a BEGIN READ ONLY transaction with a statement timeout, and every decision lands in an audit log.

Secure MCP Gateway for Database AI Access

A database that refuses illegal state transitions — Postgres RLS + BEFORE-trigger state machine with an exhaustive identity x operation conformance test.

Evidence-based case study for the OraBank Oracle SQL and PL/SQL reference implementation.

Prove tenant A cannot read or write tenant B's rows. Cross-tenant isolation testing for Supabase and Postgres RLS.

TypeScript SDK for the PgBeam API, published to npm as `pgbeam`. Manage projects, databases, agent credentials, and policy profiles.

Pulumi provider for PgBeam: declare projects, databases, agent credentials, and policy profiles in TypeScript.

TypeScript/PostgreSQL application using Supabase RLS, transactional database functions, Stripe, and server-side authorization.

The `pgbeam` command line interface: manage projects, databases, agent credentials, and policy profiles from a terminal.