Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got a B
Prisma's own server, and this grade describes the hosted one at mcp.prisma.io/mcp (Streamable HTTP, sign in with your Prisma account and approve a workspace). Prisma's docs cover database management, SQL, backup restores, Object Storage, Compute deployments, logs, environment variables and docs search. Prisma's Claude plugin (prisma/claude-plugin) also wires up a local server, npx prisma mcp pinned to 7.10.1, with three tools: migrate-status, migrate-dev (applies migrations to the database your project points at) and Prisma-Studio; it has no login of its own and runs the Prisma CLI as a child process. Actively maintained (prisma/orm pushed 2026-11-12), with no open advisories on the npm package. Biggest deduction: authentication is workspace-level, not per-tool, and Prisma's docs warn that tools which change or delete resources can cause data loss and that its CLI safeguards do not apply to MCP calls; the server itself does not describe prompts, so keep approvals on in your client, check the workspace before approving, and point it at a development database.
How to connect
claude mcp add --transport http prisma https://mcp.prisma.io/mcp
Is Prisma MCP Server (Prisma Postgres) safe?
Is Prisma MCP Server (Prisma Postgres) safe to use?
Prisma MCP Server (Prisma Postgres) grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. It runs locally over stdio, so it acts with your machine's access.
Does Prisma MCP Server (Prisma Postgres) have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Prisma MCP Server (Prisma Postgres) support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Databases & Data Stores
- A Airtable MCP ServerAirtable's own hosted server. List your workspaces and bases, read and search records, and create or update them, using the permissions you already have in Airtable.
- A ClickHouse MCP ServerClickHouse's official hosted MCP server for ClickHouse Cloud - read-only SELECT queries, schema browsing, and service, backup, ClickPipes and billing tools, with OAuth or a scoped API key.
- A Databricks Managed MCP ServersDatabricks-hosted MCP servers in each workspace for Genie, SQL, Unity Catalog functions and vector search, signed in with OAuth and limited by Unity Catalog.
- A MongoDB MCP ServerQuery and administer MongoDB and Atlas clusters from an agent.
- A Neon MCP ServerOfficial hosted Neon server to manage Postgres projects and branches, run SQL, and inspect schema.
Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.