--- title: "PlanetScale Hosted MCP Server: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/planetscale/ description: "Hosted PlanetScale endpoint for organisations, databases, branches, schema and Insights, with OAuth scopes separating read-only from full access." --- # PlanetScale Hosted MCP Server: review, setup & limitations · Undominated.ai > Hosted PlanetScale endpoint for organisations, databases, branches, schema and Insights, with OAuth scopes separating read-only from full access. [← Explore all mcp servers](/mcp-servers/) DATABASE DEVELOPMENT / PlanetScale # PlanetScale Hosted MCP Server Hosted PlanetScale endpoint for organisations, databases, branches, schema and Insights, with OAuth scopes separating read-only from full access. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/planetscale/mcp-server) SOURCE REVIEW Reviewed 2026-10-13 Evidence 4 linked sources Publisher PlanetScale Licence [Apache-2.0 ↗](https://github.com/planetscale/mcp-server/blob/2911c85b8c46f19d5ed40968b5619007e80ee1d0/LICENSE) Revision 2911c85b8c46 [Read what was—and wasn’t—checked ↓](#review) “A hosted MCP server that accesses your PlanetScale organizations, databases, branches, schema, Insights data, and the organization payment method.” [PlanetScale · upstream description ↗](https://planetscale.com/docs/mcp-server) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Publisher-maintained surface for Vitess, Postgres and Neki databases and branches, with no, read-only or full access chosen per organisation or database at OAuth time. - Ephemeral per-query credentials plus separately-gated payment access keep the blast radius explicit. ### A good fit for - Inspecting branch schema and Insights data with read-only scopes before any change. - Preparing branch and database operations against explicitly authorised organisations. ### Weigh up before choosing - Full-access scopes can change databases and branches; read-only must be chosen at authorisation time. - planetscale_execute_write_query runs INSERT, UPDATE, DELETE and DDL. The documentation says the server blocks UPDATE or DELETE without a WHERE clause and TRUNCATE, and that DDL only prompts the model to ask a human first. The insights-only URL https://mcp.pscale.dev/mcp/planetscale-insights-only leaves out both query tools. - The open-source repository holds only the directly maintained tools; remaining production tools are spec-generated on the hosted side. - Payment-method access is a separate scope with its own read versus full distinction; with full access planetscale_update_payment_method starts a Stripe Checkout to replace the organisation's card. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - Hosted MCP documentation at https://planetscale.com/docs/mcp-server, read 2026-10-13: server URL, OAuth and service-token auth, scopes, organisation query-access setting, write-query safeguards and the tool list. - Repository README at 2911c85b8c46f19d5ed40968b5619007e80ee1d0: open-source tool scope versus spec-generated hosted tools. - package.json at the same commit: name mcp-server, license Apache-2.0, TypeScript and @modelcontextprotocol/sdk dependencies. - LICENSE at the same commit: Apache-2.0; byte-identical at HEAD 169a641ecabecdc52e92824a49b334903fa551bb on 2026-10-13. ### Our findings - The selectable surface is the hosted endpoint; the repository is partial source, not a standalone deployment. - Scope choice at authorisation time, not tool exposure alone, determines whether writes are possible. - The documentation moved: https://planetscale.com/docs/connect/mcp now redirects to https://planetscale.com/docs/mcp-server, and every URL here points at the new page. - Correction on 2026-10-13: the description quoted until now ("Hosted MCP server for PlanetScale organizations, databases and branches.") is not on the documentation page or in the README; it is replaced with the page's own opening sentence. - The documentation lists planetscale_execute_read_query and planetscale_execute_write_query among the hosted tools, and says organisation administrators can set MCP query access to none, read-only or read and write (the default) for new authorisations. - Upstream on 2026-10-13: the repository is not archived, HEAD 169a641ecabecdc52e92824a49b334903fa551bb is ahead of this pin, and package.json and LICENSE there still say mcp-server and Apache-2.0. ### Not established by this review - Server connection, authentication and query execution were not tested. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://planetscale.com/docs/mcp-server) DOCUMENTED COMMAND claude mcp add --transport http "planetscale" https://mcp.pscale.dev/mcp/planetscale Copy command ↗ Copying does not execute this command. It may retrieve a newer version than the reviewed source. - The command above is the documentation's Claude Code line. Run /mcp in Claude Code afterwards and complete the PlanetScale sign-in in the browser. It was not run. - Choose read-only scopes unless the deployment explicitly requires database writes, or use the insights-only server URL to leave out query execution. ### Before you start - A PlanetScale account with access to the target organisations. ### Documented configuration example Use the client and authentication context described in the setup guidance. Configuration formats vary between hosts. { "mcpServers": { "planetscale": { "url": "https://mcp.pscale.dev/mcp/planetscale" } } } Copy configuration ↗ ### Compatibility MCP clients supporting Streamable HTTP remote servers with OAuth. · A PlanetScale account with organisations the assistant may access. ### Implementation TypeScript ### Transports Streamable HTTP ### PlanetScale account / OAuth or service token - Reads organisations, databases, branches, schema and Insights data within granted scopes. - Full-access scopes may change databases, branches and schema; payment access is separately gated. - Authentication: OAuth with no, read-only or full access chosen per organisation or per database at sign-in; service tokens for CI and headless clients carry their own grants. Each query runs with short-lived credentials created on demand and deleted after execution. ### Cost model PlanetScale plan and usage entitlements apply; the source licence does not include hosted usage. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [PlanetScale hosted MCP documentation ↗](https://planetscale.com/docs/mcp-server) Checked 2026-10-13 https://planetscale.com/docs/mcp-server Supports: summary, upstreamDescription, install, compatibility, access, transports, configExample, whySelected, bestFor, limitations, review - [Repository licence ↗](https://github.com/planetscale/mcp-server/blob/2911c85b8c46f19d5ed40968b5619007e80ee1d0/LICENSE) Checked 2026-10-13 https://github.com/planetscale/mcp-server/blob/2911c85b8c46f19d5ed40968b5619007e80ee1d0/LICENSE Supports: license - [Repository README at pinned revision ↗](https://github.com/planetscale/mcp-server/blob/2911c85b8c46f19d5ed40968b5619007e80ee1d0/README.md) Checked 2026-10-13 https://github.com/planetscale/mcp-server/blob/2911c85b8c46f19d5ed40968b5619007e80ee1d0/README.md Supports: limitations, review - [package.json at pinned revision ↗](https://github.com/planetscale/mcp-server/blob/2911c85b8c46f19d5ed40968b5619007e80ee1d0/package.json) Checked 2026-10-13 https://github.com/planetscale/mcp-server/blob/2911c85b8c46f19d5ed40968b5619007e80ee1d0/package.json Supports: language, license KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Aurora MySQL MCP ↗ AWS Labs MCP server that turns natural language into SQL for Aurora MySQL on the same host as the client, with a keyword guard the README says is not a security boundary.](/mcp-servers/awslabs-mysql/)[### Aurora DSQL MCP ↗ AWS Labs MCP server that turns questions into Postgres-compatible SQL for Aurora DSQL, read-only unless --allow-writes is passed, and only on the same host as the client.](/mcp-servers/awslabs-aurora-dsql/)[### AWS Labs Postgres MCP ↗ Pins the AWS Labs Postgres server whose read-only guard parses SQL with pglast and still tells operators to use a least-privilege role.](/mcp-servers/awslabs-postgres/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)