My Credentials

You set up a secure MCP server that lets you interact with a PostgreSQL database and generate credentials through Claude Desktop. It provides read and write database operations, schema discovery, and a suite of credential generation tools with robust security and audit logging.

How to use

Connect Claude Desktop to the MCP server using the provided client command. Once connected, you can issue natural-language requests to query and modify your PostgreSQL database, discover schema details, and generate a wide range of credentials. All actions are exercised within role-based permissions and are audited for accountability. Use the credential tools to generate identifiers, passwords, API keys, tokens, cryptographic elements, and service-specific credentials. You can also submit product feedback and track improvement suggestions from within the same interface.

How to install

Prerequisites you need before you start:

• Node.js 18+

• PostgreSQL database access

• Cloudflare account (free tier works)

• GitHub account for OAuth (for single-user access)

How to install

# 1) Clone the MCP project and install dependencies
git clone https://github.com/preangelleo/my-credentials-mcp.git
cd my-credentials-mcp
npm install

# 2) Prepare your environment
# Create a .dev.vars file with the required configuration values

# 3) Configure environment variables
# Example keys you will provide in .dev.vars
GITHUB_CLIENT_ID=your_github_client_id
GITHUB_CLIENT_SECRET=your_github_client_secret
COOKIE_ENCRYPTION_KEY=your_random_32_byte_key
DATABASE_URL=postgresql://user:pass@host:5432/db
```,

4. Set up GitHub OAuth App to enable single-user access. Create an OAuth App with a Homepage URL of http://localhost:8792 and a Callback URL of http://localhost:8792/callback. Copy the Client ID and Secret to your .dev.vars file.

5. Configure user access by editing the allowed user list in the code if you are running locally. You will specify your GitHub username to restrict access.

6. Deploy the HTTP API wrapper for reliable database connections.

# Deploy the HTTP API wrapper
cd mcp-api-wrapper
cp .env.example .env
# Fill .env with your database credentials
npm install
node server.js

# Deploy to Cloudflare Workers
# Install Wrangler
npm install -g wrangler

# Login to Cloudflare
wrangler login

# Create a KV namespace for OAuth (required for storing tokens)
wrangler kv namespace create "OAUTH_KV"
# Use the returned namespace ID in your config

# Set production secrets
wrangler secret put GITHUB_CLIENT_ID
wrangler secret put GITHUB_CLIENT_SECRET
wrangler secret put COOKIE_ENCRYPTION_KEY
wrangler secret put DATABASE_URL

# Deploy the worker
wrangler deploy

7. Connect Claude Desktop to the MCP server by adding a connection entry that uses the remote MCP endpoint example.

Additional setup to connect Claude Desktop

{
  "mcpServers": {
    "my_credentials": {
      "command": "npx",
      "args": [
        "mcp-remote",
        "https://your-worker-name.your-subdomain.workers.dev/mcp"
      ]
    }
  }
}

Security and deployment notes

This MCP server enforces single-user access via GitHub authentication, validates SQL inputs to prevent injection, uses HTTPS for all communication, and logs all operations for an audit trail. Store all sensitive configuration in environment variables rather than in code. Test changes in a development environment before deploying to production, and perform regular security audits.

Troubleshooting

If you encounter HTTP 500 errors, check the API wrapper logs and the server's connection to PostgreSQL. Ensure your environment variables are correctly set, and that the GitHub OAuth App credentials and cookie encryption key are valid. Verify that the Cloudflare Worker is deployed and reachable at the expected URL.

Available tools

listTables

Discover database schema and structure by listing available tables and their columns.

queryDatabase

Execute read-only SQL queries via natural language instructions.

executeDatabase

Perform write operations (insert, update, delete) with role-based permissions.

submitProductSuggestion

Submit improvement suggestions or bug reports to the product team.

getProductSuggestions

Browse and filter submitted suggestions and bug reports.

updateSuggestionStatus

Update the status of submitted suggestions (developers only).

generateUuid

Generate unique identifiers in UUID4 format.

generatePassword

Create secure passwords with configurable complexity rules.

generateApiKey

Generate API keys in various formats (hex, base64, base64url).

generateToken

Create tokens such as Bearer tokens, JWT secrets, session tokens, and CSRF tokens.

generateCrypto

Produce cryptographic elements like salts, IVs, and HMAC keys.

generateServiceCredential

Generate service-specific credentials (e.g., AWS, GitHub, database passwords).

generateBatch

Generate multiple credentials in a single operation.