postgresql-mcp-server

The application is a proof-of-concept for executing LLM-generated SQL, which is inherently dangerous. While the 'enterprise' server attempts to use structured tool calls with parameters for DML operations (reducing direct SQL injection risk), DDL operations still involve the LLM generating raw SQL which is then executed. The server also uses `subprocess.run` for `pg_dump`/`pg_restore` which, if arguments are not perfectly sanitized, could be vulnerable to command injection (though efforts are made to pass arguments safely). The project README explicitly highlights these critical security risks and strongly advises against production use without significant safeguards like human-in-the-loop validation, least privilege database users, and sandboxing.