Qora

Talk to your data. Get clear answers, insights, and analysis.

Qora is an MCP server that lets AI assistants like Cursor and Claude explore your PostgreSQL database in plain English. Ask how many orders landed last month, which products sell most, or how customer tables relate. Qora looks it up and returns safe results. It is read-only by design: inspect and query, never insert, update, or delete.

Source

Claude using Qora to answer how many users are on each plan, with a bar chart of Free, Pro, and Enterprise

Connect

Point Cursor or Claude Desktop at Qora over stdio MCP. Set DATABASE_URL to a read-only Postgres user first.

{
  "mcpServers": {
    "qora": {
      "command": "node",
      "args": ["--env-file=.env", "./node_modules/tsx/dist/cli.mjs", "src/server.ts"],
      "cwd": "/absolute/path/to/qora",
      "env": {
        "TRANSPORT": "stdio"
      }
    }
  }
}

Tools

list_schemas
See the main areas of your data.
list_tables
See what tables exist in a schema.
describe_table
Inspect columns and shape without opening a database client.
run_query
Ask a read-only question and get rows back safely.

Read-only by design

Giving an AI a database connection is risky if a wrong tool call can mutate production. Qora stacks several protections so exploration stays useful while writes stay impossible, even when the assistant makes a mistake.

Read-only queries
Qora rejects anything that is not a data-retrieving statement, so writes never reach Postgres through the tool.
Read-only DB user
You connect with a Postgres account that has no insert, update, or delete rights, so even a bad query cannot change rows.
Result limits
Responses are size-capped so an accidental SELECT * on a huge table does not flood the assistant with megabytes of rows.
Host restrictions
When Qora runs over HTTP, you can allowlist which hosts may call the endpoint instead of leaving it open.