Neon
Neon's official MCP for serverless Postgres. Manage projects, branches, and run SQL against any of your databases.
Delv Safety Grade: A
Score 82/100 · assessed 2026-04-28
Neon's official MCP server connects Claude directly to their serverless Postgres infrastructure. The maintainer score is strong given Neon is a well-funded, established database vendor with active development. Permissions are moderately scoped: it can create and delete database branches, run arbitrary SQL (including writes and schema changes), and manage project settings. This is broader than read-only but appropriate for the stated use case. Supply chain uses a custom npx installer pointing to mcp.neon.tech rather than npm registry, which reduces verifiability slightly. Transparency is good with open source code, documentation, and clear capabilities. No known security incidents. The main risk is the combination of SQL execution permissions and database infrastructure control, which requires trust in both Neon's service and the user's intent to grant such access.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREEHosted Postgres; private.
Green flags
- Official vendor MCP from established serverless Postgres company
- Open source repository with clear documentation and examples
- Scoped to Neon infrastructure only, not arbitrary database access
- Active maintenance with recent commits and issue responses
- Branch-based workflow reduces risk of direct production changes
Red flags
- Custom install endpoint (mcp.neon.tech) bypasses npm registry verification
- Can execute arbitrary SQL including DROP and DELETE statements
- Can create and delete database branches affecting production data
- Requires Neon API key with broad database management permissions
Permissions requested
Install
npx add-mcp https://mcp.neon.tech/mcp
Review
Install if you're a Neon user who wants to manage branches and run SQL from Claude without switching tools. Skip if you're not on Neon or prefer visual database clients. It does exactly what it says, no more, no less.
Good at
- Native support for Neon's branching workflow, which is rare and genuinely useful for schema testing.
- Works across multiple MCP hosts without platform-specific quirks.
- Simple install via npx with no manual config file editing required.
- Can query multiple projects from a single interface, handy for multi-environment setups.
Watch out
- Requires an existing Neon account and API credentials, so there's a setup barrier for new users.
- Doesn't handle long-running queries or complex transactions well, so bulk operations still need a traditional client.
- No automatic cleanup of test branches, which can clutter your project list over time.
- Limited to Neon's ecosystem, so it's useless if you're on RDS, Supabase, or self-hosted Postgres.
Use cases
- Spinning up a new Postgres branch from chat
- Running ad-hoc SQL across projects
- Migrating a schema with the agent
- Auditing database settings
Getting started
Works with
Similar MCPs
- MySQLRead-only MySQL access for Claude. Schema-aware, runs SELECTs safely, perfect for ad-hoc analytics on a production replica.
- MongoDBMongoDB's official MCP for natural-language queries against your collections. Read-only by default, with explicit write toggles.
- dbtdbt Labs' official MCP. Run models, explore the semantic layer, query the discovery API, and search project docs from your agent.
- SupabaseSupabase's official MCP — query Postgres, manage auth, inspect storage buckets, all from your agent.