Midplane MCP Server

Safe-by-default SQL guardrails for AI agents. Midplane sits in the query path between an AI agent (Claude, Cursor, any MCP client) and your Postgres database. It parses every statement with a real SQL AST - not a regex blocklist - enforces a declarative per-table access policy, blocks destructive DML/DDL, and writes an event-sourced audit log of which agent ran what, before the query executes.

People connecting database tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-21 · ★ 4 · #74 OF 151 MAINTAINED DATABASE · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Midplane

before you install - you'll need

DATABASE_URL

Environment variables documented in the project's README - it lists which are required and which have defaults.

Claude Code

claude mcp add midplaneai-midplane -- npx -y midplane

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "midplaneai-midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions · container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

npm package midplane - unscoped; check the name against the project README before installing

registry vendor namespace ai.midplane - domain-verified with the official MCP registry

03 · What Midplane can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

engine-v0.19.0 · 2026-08-21

npx is now the shortest way in. Until this release the engine ran only from docker run or a repo clone. An MCP client config is now the whole install - and the safe default (reads allowed, writes and DDL denied…

04 · Who maintains Midplane

Midplane is maintained by midplaneai. It's the only MCP server we track from this author; the repo dates to Apr 2026.

05 · Facts

repository: github.com/midplaneai/midplane
website: https://midplane.ai/docs
category: database - ranked #74 of 151 actively-maintained database servers as of 2026-08-25.
release cadence: 1 release in the last 90 days (latest 2026-08-21)
registry: ai.midplane/midplane (active, first published 2026-08-19)
packages: npm:midplane · oci:docker.io/midplane/midplane:0.19.0

06 · Midplane FAQ

What is Midplane?

Is Midplane still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-21 and it shipped 1 release in the last 90 days. We re-verify nightly.

How do I install Midplane?

Run `npx -y midplane`. The README documents one environment variable (DATABASE_URL) to set first. You can also paste the ready-made client config above.

Does Midplane run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Midplane

Alternatives to Midplane

Maintained database servers if Midplane isn't the fit.

Pairs well with

Servers that cover what Midplane doesn't - only shown when the pairing reason fits the companion.

More database MCP servers · Mimer MCP · Terminal MCP · Agent Relay · Server Motherduck

More TypeScript MCP servers · Aimeat · Kubeview · Swsd · App Publish · Meta Ads · see all