chore: installation

Author: tianzhou

docs/blog/state-of-postgres-mcp-servers-2025.mdx

@@ -4,32 +4,22 @@ title: "The State of Postgres MCP Servers (2025)"
 
 ![mcp-vs-postgres](https://raw.githubusercontent.com/bytebase/dbhub/main/docs/images/blog/state-of-postgres-mcp-servers-2025/mcp-vs-postgres.webp)
 
-MCP is drowning in builders but starving for users. PostgreSQL has millions of users but few new tools being built. 
-The intersection—Postgres MCP server—is where both problems get solved. When Anthropic launched MCP in November 2024, 
-Postgres was among the original six reference implementations. A year later, with MCP now joined by OpenAI, Google, and
-Microsoft, the question is: which Postgres MCP server should you choose?
+MCP is drowning in builders but starving for users. PostgreSQL has millions of users but few new tools being built.
+The intersection—Postgres MCP servers—is where both problems get solved. When Anthropic launched MCP in November 2024,
+Postgres was among the original six reference implementations. A year later, with MCP now adopted by OpenAI, Google, and
+Microsoft, let's take a look at the current landscape.
 
-## The Contenders
+## SQL Injection Upgraded
 
-If you are looking for a Postgres MCP server, you are likely searching by GitHub star count. These four have the most (as of Dec 20, 2025):
+Remember SQL injection? Untrusted user input mixed with SQL commands, executed by the database. Prompt injection is the same problem, one layer up: untrusted user input mixed with AI instructions, executed by the LLM.
 
-- **[MCP Toolbox for Databases](https://github.com/googleapis/genai-toolbox)** (11.8k stars) — Google's MCP Toolbox supporting multiple databases with OAuth, connection pooling, and OpenTelemetry observability.
-- **[Supabase MCP](https://github.com/supabase-community/supabase-mcp)** (2.3k stars) — Built for the Supabase ecosystem, offering deep platform integration including edge functions, migrations, and branching.
-- **[DBHub](https://github.com/bytebase/dbhub)** (1.7k stars) — Bytebase's minimal, token-efficient server supporting multiple databases including Postgres.
-- **[Postgres MCP Pro](https://github.com/crystaldba/postgres-mcp)** (1.6k stars) — Crystal DBA's performance-focused server with index tuning, query plan analysis, and database health monitoring.
+In July 2025, a [Supabase MCP vulnerability](https://www.generalanalysis.com/blog/supabase-mcp-blog) proved this isn't theoretical. The attack: embed SQL commands in a support ticket, let an AI assistant read it, watch it execute with full database access and exfiltrate data.
 
-| Server | Maintainer | License | Language |
-|--------|------------|---------|----------|
-| MCP Toolbox for Databases | Google | Apache-2.0 | Go |
-| Supabase MCP | Supabase | Apache-2.0 | TypeScript |
-| DBHub | Bytebase | MIT | TypeScript |
-| Postgres MCP Pro | Crystal DBA | MIT | Python |
+Simon Willison called it the ["lethal trifecta"](https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/)—access to private data + exposure to untrusted content + ability to externally communicate in one tool. Supabase added read-only defaults and protective prompting, then admitted **"prompt injection is generally an unsolved problem."** The [HN thread](https://news.ycombinator.com/item?id=44502318) consensus: asking LLMs nicely isn't a security boundary.
 
+Every Postgres MCP server ships with unfixable vulnerabilities. The question is what limits the damage:
 
-Let's dig into each from four dimensions:
-
-1. **Installation** — How easy is it to get started?
-1. **Tools** — What capabilities does the server expose?
-1. **Token Efficiency** — How much context does the server consume?
-1. **Auth & Security** — How does it handle authentication and security?
-
+- **Read-only by default**
+- **Least privilege credentials**
+- **Separation of environments**
+- **Audit logging**

docs/docs.json

@@ -45,6 +45,7 @@
       },
       {
         "tab": "Blog",
+<<<<<<< HEAD
 <<<<<<< HEAD
         "pages": [
           "blog/postgres-mcp-server-review-dbhub",
@@ -58,6 +59,9 @@
         "pages": ["blog/state-of-postgres-mcp-servers-2025"]
 >>>>>>> 8d4421d (docs: blog)
 >>>>>>> d593d1a (docs: blog)
+=======
+        "pages": ["blog/state-of-postgres-mcp-servers-2025", "blog/postgres-mcp-server-review-mcp-toolbox"]
+>>>>>>> b1ee20d (chore: installation)
       }
     ]
   },