Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 10
- 4 10
- 3 0
- 2 0
- 1 0
Trust in production
- Trust it - 80%
- With caveats - 20%
- Wouldn't - 0%
100% would recommend this server
How reviewers scored it
- Setup & docs 4.5
- Auth experience 4.4
- Reliability 4.6
- Maintainer responsiveness 4.5
Why it got an A
Official, hosted by Neon over HTTPS and very active (7 committers in the last 90 days), with no advisories on record. OAuth sign-in has separate read and write scopes, so you can grant read-only access, and the category= URL parameter limits which tools load. It earns full marks on all four signals. Neon itself says it's for local development and IDE use, not production, because it can run powerful operations, so grant read-only unless you need writes.
How to connect
// ~/.cursor/mcp.json (README: generic mcp.json entry, OAuth)
{
"mcpServers": {
"Neon": {
"type": "http",
"url": "https://mcp.neon.tech/mcp?category=projects&category=branches&category=endpoints&category=querying&category=schema"
}
}
}Is Neon MCP Server safe?
Is Neon MCP Server safe to use?
Neon MCP Server grades A: all four checks are at full marks. Strong public trust signals. It is still not a full audit, so give it the narrowest access that works.
Does Neon MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Neon MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
- A Supabase MCP ServerOfficial hosted Supabase server to manage projects, run SQL, and inspect schema.
- B BigQuery MCP ServerGoogle-hosted remote server to list datasets and tables, read schemas, and run SQL in BigQuery.
- B MCP Toolbox for DatabasesGoogle's open-source MCP server with prebuilt tools for Postgres, MySQL, BigQuery, AlloyDB, Cloud SQL, Spanner, and more.
- B OMOPHub MCP ServerOfficial server to search, map and walk the hierarchy of 11M+ OHDSI OMOP medical concepts (SNOMED CT, ICD-10, RxNorm, LOINC) over stdio or a hosted HTTPS endpoint.
Embed this badge
[](https://trustedmcp.io/servers/neon-mcp-server)<a href="https://trustedmcp.io/servers/neon-mcp-server"><img src="https://trustedmcp.io/badge/neon-mcp-server.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Does what it says, no drama
Of the Neon integrations I tried, this one is the most predictable. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Being official from Neon counts for a lot when I pitch it to security. Good choice if you need Neon in your agent.
Used for Schema exploration during a migration
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Set this up for our team after comparing a few options. Read-only mode is the first thing I enable, and it covers most of what I need. Releases come often and the changelog is clear. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Easy recommendation.
Used for Generating SQL for ad-hoc reports
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Better than the DIY script it replaced
Been running this for about a month now. The OAuth flow worked first time in Claude Code. Auth is handled properly, and revoking access later was one click. I would use it in prod, but only with a human approving writes.
Used for Debugging data issues in staging
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Hooked Neon MCP Server into Claude Code and it worked on the first try. The OAuth flow worked first time in Claude Code. Sign-in flow was painless and I never had to paste a key into a config file. Good choice if you need Neon in your agent.
Used for Answering support questions from the database
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Replaced a homegrown script with Neon MCP Server and have not looked back. Updates land regularly, and nothing broke when I upgraded. Narrowing the scopes took ten minutes and made me much happier running it. Sign-in flow was painless and I never had to paste a key into a config file. It is in our production agent and I sleep fine.
Used for Incident investigation
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Solid and well behaved
Of the Neon integrations I tried, this one is the most predictable. The scope options are worth reading carefully, the defaults are broader than I wanted. Releases come often and the changelog is clear. Auth is handled properly, and revoking access later was one click.
Used for Schema exploration during a migration
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Better than the DIY script it replaced
Started with it as an experiment, now it is a fixture. The OAuth flow worked first time in Claude Code. Hosted endpoint means no local process to babysit. Worth it, just do not skip the hardening steps.
Used for Generating SQL for ad-hoc reports
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Our agents call this dozens of times a day. You can tell it is actively maintained, the rough edges keep getting fixed.
Used for Prototyping queries before writing code
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Good defaults, good docs
Tried it on a side project first, then rolled it out at work. Narrowing the scopes took ten minutes and made me much happier running it.
Used for Checking data quality after imports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Our team uses it every day
Tried it on a side project first, then rolled it out at work. You can tell it is actively maintained, the rough edges keep getting fixed. Sign-in flow was painless and I never had to paste a key into a config file. Being official from Neon counts for a lot when I pitch it to security.
Used for Answering support questions from the database
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Recommended it to two teams already
Our agents call this dozens of times a day. Auth is handled properly, and revoking access later was one click. It is in our production agent and I sleep fine.
Used for Schema exploration during a migration
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Worth the five minutes to set up
I use this almost daily. Scoped the token to just what the agent needs and it respected that. I gave it a database user that can only read the tables it needs.
Used for Debugging data issues in staging
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Easy win for our agent setup
Hooked Neon MCP Server into Claude Code and it worked on the first try. Updates land regularly, and nothing broke when I upgraded. Nice to use something maintained by Neon rather than a random fork. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Prototyping queries before writing code
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
No complaints after a month
Started with it as an experiment, now it is a fixture. Auth is handled properly, and revoking access later was one click.
Used for Read-only analytics questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Quietly reliable
Simple to set up in Cursor, simple to reason about. Updates land regularly, and nothing broke when I upgraded. Turned on read-only mode on day one, highly recommend doing the same. Happy to run it in production.
Used for Generating SQL for ad-hoc reports
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Clear tool names, sensible outputs, very few surprises. Nothing to install, I just point the client at the URL. Scoped the token to just what the agent needs and it respected that. Would recommend without hesitation.
Used for Incident investigation
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
The Neon integration I wanted
Simple to set up in Cursor, simple to reason about. Turned on read-only mode on day one, highly recommend doing the same. Scoped the token to just what the agent needs and it respected that.
Used for Answering support questions from the database
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Exactly what I needed from Neon
Installed it on a Friday, it was part of my workflow by Monday. Filed an issue and got a reply within two days. Nothing to install, I just point the client at the URL. Easy recommendation.
Used for Checking data quality after imports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Our team uses it every day
Installed it on a Friday, it was part of my workflow by Monday. Hosted endpoint means no local process to babysit. Updates land regularly, and nothing broke when I upgraded. Happy to run it in production.
Used for Read-only analytics questions
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Trustworthy enough for real work
Been running this for about a month now. Scoped the token to just what the agent needs and it respected that. Read-only mode is the first thing I enable, and it covers most of what I need.
Used for Read-only analytics questions
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.