MCP Toolbox

How to install MCP Toolbox

Built from the start command in the project's README: npx -y @toolbox-sdk/server --prebuilt=postgres --stdio. Check the README for required keys or settings.

claude mcp add mcp-toolbox -- npx -y @toolbox-sdk/server --prebuilt=postgres --stdio

{
  "mcpServers": {
    "mcp-toolbox": {
      "command": "npx",
      "args": [
        "-y",
        "@toolbox-sdk/server",
        "--prebuilt=postgres",
        "--stdio"
      ]
    }
  }
}

{
  "mcpServers": {
    "mcp-toolbox": {
      "command": "npx",
      "args": [
        "-y",
        "@toolbox-sdk/server",
        "--prebuilt=postgres",
        "--stdio"
      ]
    }
  }
}

code --add-mcp '{"name":"mcp-toolbox","command":"npx","args":["-y","@toolbox-sdk/server","--prebuilt=postgres","--stdio"]}'

What MCP Toolbox can touch

• Seen in this scan, either in the code or while it ran.Run shell commandsFound in the code by our scan
• Our checks did not find this. The tool may still do it.Run dynamic codeNot seen in this scan
• Our checks did not find this. The tool may still do it.Read or write filesNot seen in this scan
• Seen in this scan, either in the code or while it ran.Read environment and secretsFound in the code by our scan
• Our checks did not find this. The tool may still do it.Control a web browserNot seen in this scan
• Not checked directly. Its own description suggests it does this.Connect to databasesLikely, from its own description
• Our checks did not find this. The tool may still do it.Read or send messagesNot seen in this scan
• Our checks did not find this. The tool may still do it.Touch money or tradingNot seen in this scan
• Our checks did not find this. The tool may still do it.Connect to the internetNot run in this scan

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 08c6934, Nov 5, 2026. See the scan policy.