Databases & StorageMCP RegistrynpmA · 80

Midplane MCP server

ai.midplane · Updated today

A gateway between AI agents and Postgres: table access, masking at the source, approvals and audit.

At a glance

Midplane is an MCP server in the Databases & Storage category. It runs locally over stdio via `npx -y midplane --config`, and needs MIDPLANE_TOKEN. It scores A (80/100) on the MCP Skills Hub health score as of Oct 28, 2026.

Source 5

One-click install

VS Code VS Code Insiders Cursor

Opens your editor and pre-fills the config. Your editor will ask before adding it.

How to install Midplane in your AI client

Setup for Claude Code, Claude Desktop, Cursor, Codex, Windsurf, Cline and VS Code — copy-paste ready.

How to install Midplane in Claude CodeAnthropic's agentic CLI

Add the server

bash

claude mcp add midplane -e 'MIDPLANE_TOKEN=<MIDPLANE_TOKEN>' -- npx -y midplane --config

Fill in your credentials
Replace <MIDPLANE_TOKEN> with your real value. Keep secrets out of any config file you commit.
3
Verify it's connected
bash
```
claude mcp list
```
Sharing it with your team?
Add `--scope project` to write it to .mcp.json in the repository root, which you can commit (with the secrets left as environment variables).
Use it in a session
Ask Claude to use the tools this server exposes. It discovers them automatically.

How to install Midplane in Claude DesktopDesktop app (MCP config)

Open your MCP config
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

Add this server

json

{
  "mcpServers": {
    "midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "--config"
      ],
      "env": {
        "MIDPLANE_TOKEN": "<MIDPLANE_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <MIDPLANE_TOKEN> with your real value. Keep secrets out of any config file you commit.
Restart Claude Desktop
The tools appear under the 🔌 menu once the app reloads.

How to install Midplane in CursorAI-first code editor

Create / edit .cursor/mcp.json in your project

json

{
  "mcpServers": {
    "midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "--config"
      ],
      "env": {
        "MIDPLANE_TOKEN": "<MIDPLANE_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <MIDPLANE_TOKEN> with your real value. Keep secrets out of any config file you commit.
Enable it
Cursor Settings → MCP → toggle the server on. Tools become available to the Composer/Agent.

How to install Midplane in Codex CLIOpenAI coding agent

Add to ~/.codex/config.toml

toml

[mcp_servers.midplane]
command = "npx"
args = ["-y", "midplane", "--config"]
env = { MIDPLANE_TOKEN = "<MIDPLANE_TOKEN>" }

Fill in your credentials
Replace <MIDPLANE_TOKEN> with your real value. Keep secrets out of any config file you commit.
Run Codex
Codex loads MCP servers from config.toml on startup and exposes their tools to the agent.

How to install Midplane in WindsurfCodeium's agentic IDE

Edit ~/.codeium/windsurf/mcp_config.json

json

{
  "mcpServers": {
    "midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "--config"
      ],
      "env": {
        "MIDPLANE_TOKEN": "<MIDPLANE_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <MIDPLANE_TOKEN> with your real value. Keep secrets out of any config file you commit.
Reload
Windsurf → Cascade → refresh MCP servers. Cascade can now call the tools.

How to install Midplane in ClineVS Code autonomous agent

Open Cline → MCP Servers → Configure
Adds to cline_mcp_settings.json.

Add the server

json

{
  "mcpServers": {
    "midplane": {
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "--config"
      ],
      "env": {
        "MIDPLANE_TOKEN": "<MIDPLANE_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <MIDPLANE_TOKEN> with your real value. Keep secrets out of any config file you commit.

How to install Midplane in VS CodeCopilot / MCP support

Create .vscode/mcp.json

json

{
  "servers": {
    "midplane": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "midplane",
        "--config"
      ],
      "env": {
        "MIDPLANE_TOKEN": "<MIDPLANE_TOKEN>"
      }
    }
  }
}

Fill in your credentials
Replace <MIDPLANE_TOKEN> with your real value. Keep secrets out of any config file you commit.
Start it
VS Code shows a ▶ Start action above the server entry. Agent mode (Copilot Chat) can then use the tools.

What does Midplane need from you?

API key — A token from `midplane token`, verified at start and on every call. It stays in this entry, so give it a --ttl (seconds) as long as the entry should work: the default is an hour.

MIDPLANE_TOKENrequiredsecretEnvironment variable
A token from `midplane token`, verified at start and on every call. It stays in this entry, so give it a --ttl (seconds) as long as the entry should work: the default is an hour.

Pass secrets through your shell environment rather than committing them into a config file.

What tools does Midplane expose?

This server runs as a local package. We only query remote servers for their tool list — asking this one would mean executing it, so its tools are listed in the documentation below.

What the code can do

Read from the published package source — never executed. Parsed 1 of 1 source file.

This server can read and write files, make network requests and read your environment variables.

How it was published

Published by a verified CI identity (github trusted publishing) rather than a personal token.
Has a provenance attestation tying this artifact to the commit it was built from.
1 npm maintainer — a single point of compromise · last published by GitHub Actions.

Maintainer of this package and think something here is wrong? Tell us and we'll correct it.

Before you install

Signals gathered from the source repo and package registry — not a safety verdict.

What it can reach

Runs code on your machine — Executes as a local process with your user's permissions, including filesystem access.
Downloads at launch — The package is fetched from its registry each run unless you pin a version.

Last commit today — Actively maintained.
5 GitHub stars — Very little community usage so far.

Client compatibility

Claude Code: NativeClaude Desktop: NativeCursor: NativeCodex CLI: NativeWindsurf: NativeCline: NativeVS Code: Native

Health score

A · 80

Maintenance, adoption, transparency and packaging — not a safety audit. How this is calculated

Maintenance30%100%
Last commit 0 days ago.
Adoption20%24%
5 stars.
Transparency20%75%
3/4: ✓ public source repo, ✓ declared license, ✓ documentation, ✗ discoverable tool list.
Provenance15%100%
Package and registry entry point at the same repository.
Packaging15%100%
Publishes a pinned version (0.25.0).

Documentation

Full README

<strong>A gateway between AI agents and your Postgres databases.</strong> Every statement is checked against your policy and recorded before it runs.

Quickstart · Documentation · Midplane Cloud

Agents get useful once they can read your real tables, but a database role that reads every column and writes every row is not a control you can show a security reviewer. Midplane is that control. Agents connect to the gateway over MCP; it parses each statement with Postgres' own parser, decides it against your policy, records it, and only then runs it, with masks written into the query itself.

What it enforces

Table access, denied by default, per table.
Masking at the source: hashes, partial values, generalized dates, NULLs,

applied before any filter, join or aggregate sees the raw value.

Guardrails: one statement at a time, writes need a WHERE, no writes

hidden in a WITH, reads in read-only transactions with timeouts.

Approvals: writes held for a person, bound to the exact statement and

checked against the row count the approver saw.

Containment: once an agent reads a column labeled untrusted (support

tickets, emails), its writes are held and secret tables are closed to it.

An audit log on the gateway's own disk, hash-chained, exported and

verified with one command.

Alternatives to Midplane

Maintain Midplane? Add a badge to your README

Shows its health grade, and links readers to install steps for every client.

markdown

[![Midplane on MCP Skills Hub](https://mcp-skills-hub.vercel.app/badge/ai-midplane-midplane)](https://mcp-skills-hub.vercel.app/mcps/ai-midplane-midplane)

Catalog data refreshed Oct 28, 2026. Something wrong? Report it.