Model Context Protocol moderate risk

Neon

Neon MCP Server enables natural language interaction with Neon Postgres databases, simplifying management and empowering non-developers, but requires careful security considerations.

Connections & Capabilities

Connects To

GitHubPostgreSQLPlaywrightVercel

Capabilities

readwriteexecadmin

Quickstart

Install

npx neonctl@latest init

Config

{
  "mcpServers": {
    "Neon": {
      "type": "http",
      "url": "https://mcp.neon.tech/mcp"
    }
  }
}

Exposed MCP Tools (10)

safe

list_projects

Lists all Neon projects associated with the authenticated user or organization.

Read-only operation, no data modification.

moderate

create_project

Creates a new Neon project.

Creates a new resource, but doesn't directly modify existing data.

critical

delete_project

Deletes an existing Neon project.

Destructive operation that can lead to permanent data loss.

safe

describe_branch

Describes the schema and configuration of a specific Neon branch.

Read-only operation, no data modification.

moderate

create_branch

Creates a new branch from an existing Neon branch.

Creates a new resource, but doesn't directly modify existing data.

critical

delete_branch

Deletes an existing Neon branch.

Destructive operation that can lead to data loss.

high

run_sql

Executes an arbitrary SQL query against a Neon database.

Can modify, delete, or expose sensitive data depending on the SQL query.

high

prepare_database_migration

Prepares a database migration using Neon's branching capabilities.

Modifies the database schema, potentially causing data inconsistencies or downtime.

high

complete_database_migration

Completes a database migration, applying schema changes to the target branch.

Finalizes schema changes, potentially causing irreversible data modifications.

safe

get_connection_string

Retrieves the connection string for a Neon database.

Read-only operation, retrieves connection details.

Safety Assessment

The Neon MCP Server simplifies database management but introduces risks due to natural language interaction and powerful database operations. It is relatively safe in read-only mode with careful review of LLM-generated actions. Using the server in write mode without proper authorization and monitoring poses significant risks.

Offers a read-only mode to restrict write operations.
Requires explicit authorization of actions requested by the LLM.
OAuth-based authentication available for managed MCP server.
API key authentication can be scoped to an organization.

Can execute powerful database operations, including schema changes and data manipulation.
Relies on LLM interpretation of natural language, which may lead to unintended actions.
API key based authentication requires careful key management.
The `run_sql` tool remains available in read-only mode and can execute any SQL.