Safe Postgres access for AI agents.
PgBeam is a PostgreSQL proxy that enforces policy in the wire protocol, so an agent gets a scoped credential instead of your database password. Read-only mode, table and column allowlists, row filters, PII masking, query budgets, and a kill-switch are decided before a statement reaches your database, and every decision lands in a tamper-evident audit log. Connection pooling and query caching come with it. No application changes.
- Documentation: https://pgbeam.com/docs
- Quickstart: https://pgbeam.com/docs/quickstart
- Security practices: https://pgbeam.com/security
- Status: https://status.pgbeam.com
| Repository | What it is |
|---|---|
pgbeam-js |
TypeScript SDK, published as pgbeam |
pgbeam-go |
Go SDK, imported as go.pgbeam.com/sdk |
pgbeam-cli |
The pgbeam command line interface |
homebrew-pgbeam |
Homebrew tap for the CLI |
pgbeam-openapi |
Public OpenAPI specification |
pgbeam-terraform |
Terraform provider |
pgbeam-crossplane |
Crossplane provider |
pgbeam-pulumi |
Pulumi provider |
pgbeam-docs |
Source of the documentation site |
pgbeam-skills |
Installable agent skills |
pgbeam-conformance |
Policy conformance vectors, language neutral |
Issues and pull requests are welcome on all of them. See CONTRIBUTING.md.
