An undo button for Postgres when an AI agent is driving

pgbrake is a local MCP server that sits between Claude Code, Codex or Cursor and your Postgres database. Risky SQL waits for a human. Every UPDATE and DELETE made through it can be reversed with one command. Everything runs on your machine; nothing is sent to us.

pip install pgbrake
claude mcp add pgbrake --env PGBRAKE_DSN="postgresql://me@localhost/app" -- uvx pgbrake serve

What it does

• Parses every statement with the real Postgres parser.
• Holds DDL, UPDATE/DELETE without WHERE, and writes over a row limit (default 100) for human approval, in the client's prompt or with pgbrake approve in a terminal. An agent can't approve its own SQL.
• Saves the affected rows before each UPDATE/DELETE, so pgbrake undo <id> puts them back, with a conflict check.
• Never allows ALTER SYSTEM, role/database drops, COPY ... PROGRAM or DO blocks.
• Keeps a local audit log of every statement and decision.

Pricing

Limits

Undo covers only changes made through pgbrake. TRUNCATE and DDL can be held but not undone. pgbrake does not replace backups. Tested on PostgreSQL 17.