PgBeam

Integration · PgBeam + Claude Code

Give Claude Code safe Postgres access

Paste a hosted MCP URL into Claude Code and your agent gets policy-enforced query, validate_sql, list_tables, describe_table, explain, and schema_catalog tools over your own Postgres, plus search_docs and read_doc for looking up how PgBeam works. No server to run, no real credentials handed out.

Get StartedRead the docs

Claude Code can run SQL the moment it has a database connection, which makes a hosted MCP endpoint the safest way to give it one. You connect your database once, issue an agent credential, and paste the URL into your MCP config. Every tool call is enforced against the credential's policy in the wire protocol.

Connect Claude Code in one step

Paste the hosted MCP URL and bearer token into your config. The policy applies to every tool call.

.mcp.json
{
  "mcpServers": {
    "pgbeam": {
      "url": "https://mydb.proxy.pgbeam.app/mcp",
      "headers": { "Authorization": "Bearer pba_xxx" }
    }
  }
}

Eight tools, one policy engine

The endpoint exposes query, validate_sql, list_tables, describe_table, explain, and schema_catalog, plus search_docs and read_doc for looking up how PgBeam works. schema_catalog returns the tables, columns, keys, and masked-column flags Claude Code is allowed to see in one call, so it can discover the schema before it queries.

Every call runs through the same policy engine as a guarded connection string. A blocked statement returns an LLM-readable reason in the tool result, so the agent can correct itself and retry within the rules.

Nothing to host

There is no MCP server process to deploy, patch, or scale. The endpoint is hosted and runs on a globally distributed proxy, so tool calls execute from the region nearest your database.

Each agent credential has its own URL and bearer token. Revoke either one instantly, or hit the kill-switch to stop the agent mid-session.

Paste one URL

Add the URL and bearer token to .mcp.json. The eight tools appear in Claude Code once connected.

Enforced at the wire

Read-only, table allowlists, and budgets are checked in the Postgres wire protocol before a statement reaches your database.

PII masking

Redact, null, or hash sensitive columns so the model never sees the raw values.

Full audit trail

Every statement recorded with its decision, reason, rows, bytes, and latency, exportable for review.

More integrations

PgBeam + LangChainPgBeam + CursorPgBeam + Prisma

Questions

Give Claude Code safe Postgres access

Start with a 14-day free trial. No credit card required.

Get Started