Skip to content

sferarc/pgbeam

v1.0.0Apache-2.0

Safe Postgres access for AI agents. Scoped credentials, read-only by default, table and column allowlists, PII masking, query budgets, a kill-switch, and a full audit trail, all enforced in the Postgres wire protocol.

pgbeam-safe-migrations

Let an agent write to Postgres without risking production, using PgBeam's migration linter, instant branches, always-rollback dry-run mode, and human approvals. Use this when the agent's job is to write rather than read (a migration, a backfill, a generated UPDATE) and read-only enforcement is too strict, or when you need to check DDL for table rewrites and locking before it runs. For read-only wiring use pgbeam-connect, for the full policy shape use pgbeam-policy.

Read SKILL.md at the source

Pinned to revision 376f50899432, so it is the text this page describes rather than whatever the author pushed since.

Files

Every link opens the file at its source, pinned to the revision this page describes.