pREST v2.5.2 Security Release: Stored Query RCE, Catalog Auth and Plugin Path Fixes
pREST v2.5.2 fixes three advisories in every release up to v2.5.1, including a CVSS 9.0 stored-query RCE. Check if you're affected, what changes, and how to upgrade.
MCP
Everything tagged MCP, newest first.
Tagged MCP
pREST v2.5 Adds MySQL: A REST API and MCP Server for Your MySQL Database
pREST v2.5 turns a MySQL 8 database into a REST API and an MCP endpoint for AI agents. Set engine = "mysql" and point it at your database. Docker quickstart, auth, and what differs from Postgres.
pREST in 10 Minutes: Docker Compose to REST API to MCP Endpoint
Run pREST v2.4.2 with Docker Compose, query a Postgres table over REST, turn on JWT auth and a table ACL, add a bound custom query and call /_mcp.
pREST v2.4.1 and v2.4.2: You Cannot Blacklist Your Way Out of SQL Injection
pREST v2.4.1 closes an 8.6 SQL injection in _QUERIES templates and an /_mcp catalog-exposure bypass — then its SQL-keyword blacklist silently blanked 17.5% of one production catalog. v2.4.2 replaces screening with real parameter binding, adds script path-traversal containment, and enforces RFC 7518 minimum JWT key sizes.
Postgres MCP Servers Compared: Read-Only Posture, Auth and Auditability
Six Postgres MCP servers compared on write posture, auth and audit trail: Anthropic's archived reference, Postgres MCP Pro, Supabase, Neon, pgEdge, pREST.
Vault: A Search-First File Manager to Replace Finder
Vault is a minimal, cross-platform file manager built around search instead of folder trees — Go and Wails under a React UI, 353ms cold start, ~80MB idle RAM, OS-trash-only deletes, and an MCP server so an AI client can drive it.
pREST AI Tooling — MCP Adapter, Cursor Plugin, and OpenClaw Skills
pREST AI tooling ships prest-mcp stdio adapter, Cursor plugin rules/skills, and OpenClaw ClawHub skills — read-only PostgreSQL access for agents via the /_mcp endpoint.
How to Use pREST's MCP Server — Query PostgreSQL from Cursor, Claude, or curl
pREST v2.1.0 MCP server exposes read-only PostgreSQL queries over HTTP — connect from Cursor, Claude Desktop, or curl with permission-aware ACL and no separate MCP process.
pREST v2.0.0 and v2.1.0 — PostgreSQL REST API with Multi-Database and MCP
pREST v2 is a Go PostgreSQL REST API with multi-database registry in v2.0.0 GA and a read-only MCP server in v2.1.0 — permission-aware Postgres queries for agents and API clients.