# Midplane

> Midplane is the MCP gateway for Postgres. It lets your AI assistant (Claude, ChatGPT, Cursor, VS Code, or any MCP client) answer questions from your production database without breaking anything. It stops mass changes like an UPDATE with no WHERE, keeps sensitive fields hidden even from clever questions, holds risky changes until a human approves them, and runs next to your database, so your rows and your database password never leave your network. The gateway is open source (MIT): run it on your laptop in local mode, or deploy it into your own cloud and manage rules, approvals and the query log from Midplane Cloud. A linked gateway gets a public HTTPS URL through Midplane's relay, which passes encrypted traffic without reading it, so claude.ai and ChatGPT can reach it with no open ports, even in a private network.

## Docs

- [What is Midplane?](https://midplane.ai/docs): the gateway between AI agents and your Postgres databases, and what it enforces
- [Get started](https://midplane.ai/docs/get-started): from a new Midplane Cloud project to an agent's first query through your gateway
- [How it works](https://midplane.ai/docs/how-it-works): the gateway, the relay, your databases, projects and agents, how agents reach the gateway, and what stays in your network
- [Security](https://midplane.ai/docs/security): what Midplane Cloud and the relay can and can't see, the relay's DNS caveat, and Certificate Transparency checks
- [Prepare your database](https://midplane.ai/docs/prepare-database): a read-only role for the gateway, its connection string, and a first check
- [Connect Supabase](https://midplane.ai/docs/prepare-database/supabase): read-only role, session pooler connection string, Supabase's certificate
- [Connect Neon](https://midplane.ai/docs/prepare-database/neon): read-only role and the direct connection string
- [Connect Amazon RDS or Aurora](https://midplane.ai/docs/prepare-database/rds): the gateway in your VPC, read-only role, the RDS certificate
- [Connect Railway](https://midplane.ai/docs/prepare-database/railway): TCP proxy to Railway's Postgres and a read-only role
- [Deploy the gateway](https://midplane.ai/docs/gateway/deploy): run it on your computer, on a server with Docker, or on a platform
- [Run the gateway on AWS](https://midplane.ai/docs/gateway/aws): a CloudFormation stack in your VPC, next to RDS or Aurora, with nothing inbound
- [Run the gateway on Fly.io](https://midplane.ai/docs/gateway/fly): one machine with a volume and no IP address
- [Run the gateway on Render](https://midplane.ai/docs/gateway/render): a background worker with a disk, from a Blueprint
- [Run the gateway on Kubernetes](https://midplane.ai/docs/gateway/kubernetes): a Helm chart, one pod with its own disk and no Service
- [Local mode](https://midplane.ai/docs/gateway/local-mode): the gateway with no Midplane Cloud, the policy in midplane.yaml
- [Configuration](https://midplane.ai/docs/gateway/configuration): every key in midplane.yaml, including the policy
- [Reaching a gateway from hosted agents](https://midplane.ai/docs/gateway/hosted-agents): claude.ai, ChatGPT and other hosted agents, through the relay, a vendor tunnel or your own endpoint
- [Connect Claude Code](https://midplane.ai/docs/agents/claude-code): add the gateway, sign in, and choose which databases it may use
- [Connect claude.ai](https://midplane.ai/docs/agents/claude-ai): add the gateway's URL as a custom connector
- [Connect ChatGPT](https://midplane.ai/docs/agents/chatgpt): add the gateway's URL as a custom MCP server
- [Connect Cursor](https://midplane.ai/docs/agents/cursor): one-click install from the Agents page, or by hand
- [Connect VS Code](https://midplane.ai/docs/agents/vs-code): GitHub Copilot querying Postgres through the gateway
- [MCP tools](https://midplane.ai/docs/agents/tools): query (reads), write (writes), list_tables, describe_table and check_approval, and how clients gate them
- [Masking](https://midplane.ai/docs/policies/masking): the masking transforms, unreviewed columns, and the known limits
- [Approvals and taint](https://midplane.ai/docs/policies/approvals-and-taint): writes that wait for a person, and containment of agents that read untrusted text
- [Audit](https://midplane.ai/docs/audit): the gateway's audit log, what goes to Midplane Cloud, retention, export and verification
- [Verifying a release](https://midplane.ai/docs/releases): npm provenance, and the image's cosign signature and SBOM
- [Troubleshooting](https://midplane.ai/docs/troubleshooting): what each message from the gateway and the dashboard means
- [Full docs index](https://midplane.ai/docs/llms.txt): machine-readable list of all documentation pages
- [Full docs text](https://midplane.ai/docs/llms-full.txt): every documentation page in one file
- [Docs MCP server](https://midplane.ai/docs/mcp): search and read these docs from any MCP client (Streamable HTTP, no auth)

## Product

- [Landing page](https://midplane.ai): what Midplane is and why
- [Blog](https://midplane.ai/blog): guides and notes on giving AI agents safe access to Postgres ([RSS](https://midplane.ai/blog/rss.xml))
- [GitHub](https://github.com/midplaneai/midplane): open-source gateway, MIT
- [Local quickstart](https://github.com/midplaneai/midplane/tree/main/examples/quickstart): try the gateway on your machine, no Midplane Cloud

## Optional

- [Privacy policy](https://midplane.ai/privacy)
- [Terms of service](https://midplane.ai/terms)