Neon MCP Server

Neon's official remote MCP server: projects, branches, SQL queries and Postgres migrations from your agent

MCP serverEditors’ pickHigh risk

neondatabase/mcp-server-neon

Install

npx neon@latest init

Authenticates via OAuth, creates an API key and configures Cursor, VS Code or Claude Code.

This is third-party code. Review the repository files before installing.

What it does

The server turns agent requests into Neon API calls. The agent can create projects and branches, inspect table schemas, run SQL and transactions, find slow queries and read execution plans. Migrations go through a temporary branch: prepare and verify first, then apply to the main one. URL parameters narrow the toolset: read-only mode, tool categories and scoping to a single project.

Who it is for. For developers who run Postgres on Neon and want to manage it from an IDE or agent.

Good fit when

  • You need to spin up a database or branch for an experiment
  • You need a schema migration verified on a separate branch
  • You need to find slow queries and understand why they are slow

Not a fit when

  • Your database is not hosted on Neon
  • You need production access: the vendor advises against using the server in production

Example request

Create a Neon database called my-database with a users table: id, name, email

Limitations

Requires a Neon account with OAuth or an API key. The server is remote and only available at mcp.neon.tech. The vendor warns it is meant for development and agent actions should be reviewed. If IP Allow is on, the server addresses must be allowlisted.

How to disable. Remove the Neon entry from your MCP client config and revoke the OAuth grant or API key in the Neon Console.

MCP

Transport
http, sse
Authentication
OAuth

Security check

  • Can create and delete projects and branches
  • Runs SQL against a cloud database

README in short

The README covers three setup paths: the neon init command that configures the editor, the remote server with OAuth and the remote server with an API key. It explains read-only mode and URL parameters that restrict tools. It lists the tools available without write access and notes the deprecated SSE transport. The server itself is a Next.js app on Vercel, MIT licensed.

FAQ

How do I block changes?

Append ?readonly=true to the server URL or untick full access during OAuth. Only read tools remain, and run_sql accepts read-only queries.

Can I restrict access to one project?

Yes, the projectId URL parameter scopes all operations to that project.

Editors’ pick

166 skills for scientific work: bioinformatics, cheminformatics, clinical data, geospatial analysis and 100+ databases

SkillMedium risk44.9K
Editors’ pick

Google's open-source MCP server for databases: ready tools for Postgres, MySQL, BigQuery, Spanner and more, plus custom tools in tools.yaml

MCP serverHigh risk16.4K
Editors’ pick

Official Hugging Face skills: Hub operations via the hf CLI, datasets, model training, Spaces, evals and deployment

SkillHigh risk11K
Editors’ pick

A token-lean MCP server for PostgreSQL, MySQL, MariaDB, SQL Server and SQLite with a read-only mode

MCP serverHigh risk3.5K