DOCUMENTATION

Connect PostgreSQL safely.

1. Create a database role

Create a dedicated role that can connect and read only the schemas and relations Claude needs. Do not use an owner, migration, or application-write credential.

GRANT CONNECT ON DATABASE analytics TO claude_reader;
GRANT USAGE ON SCHEMA reporting TO claude_reader;
GRANT SELECT ON ALL TABLES IN SCHEMA reporting TO claude_reader;

2. Make the endpoint reachable

The endpoint must use a public hostname and TLS with hostname verification. Loam rejects private, loopback, link-local, reserved, mixed unsafe DNS, and cloud-metadata destinations. Private networking requires a future tunnel or agent and is not available today.

3. Test and connect

Sign in with Loam, select a workspace, enter the endpoint and read-only credential, and optionally allow only named schemas. Testing occurs from the selected regional Loam data plane. Passwords and custom CA material are write-only.

4. Install in Claude

After acceptance, the Anthropic Connectors Directory entry will use https://dataconnector.ai/api/mcp. Authorization selects your Loam workspace and produces a token that cannot be replayed against the Database or canonical Loam MCP resources.

Available tools

list_data_sources lists governed live sources.
search_data_catalog searches permitted cached metadata.
describe_data_source describes a permitted PostgreSQL relation.
query_data_source runs one bounded read-only query.

Source freshness reflects live discovery. Reads are not snapshots and concurrent upstream changes can affect results.