Base44
Build and edit Base44 apps from an AI assistant, and query data your app's users submit.
Prisma
Create, query and delete Prisma Postgres databases from an AI agent.
Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.
Paste it into any MCP client. Setup docs
What the Prisma connector does
The Prisma MCP server connects Prisma Postgres to Claude and any MCP-compatible agent. Its 18 tools create and delete databases, manage connection strings and backups, run SQL and schema updates, and handle object-store buckets. Sign-in is OAuth — and the only scope on offer is workspace:admin.
Connection verified
Connection checked by Agentman on .
Listed in Anthropic’s Connectors Directory at community tier — a listing, not a partner-level review.
Anthropic states this reflects the level of review a connector received, not a security audit.
Prisma tools (18)
- create_object_store_bucket
- create_object_store_bucket_key
- create_prisma_postgres_connection_string
- create_prisma_postgres_database
- create_prisma_postgres_recovery
- delete_object_store_bucket
- delete_object_store_bucket_key
- delete_prisma_postgres_connection_string
- delete_prisma_postgres_database
- execute_prisma_postgres_schema_update
- execute_sql_query
- fetch_workspace_details
- introspect_database_schema
- list_object_store_buckets
- list_prisma_postgres_backups
- list_prisma_postgres_connection_strings
- list_prisma_postgres_databases
- search_prisma_documentation
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- There is no read-only grant. The only scopes are
workspace:adminandoffline_access. - Bucket deletion is permanent, per Prisma's own wording, and takes every object and access key with it. Deleting an access key breaks anything using it immediately.
- No documented confirmation step on any destructive tool. The client's approval prompt is the only gate.
- Recovery creates a new database, so restoring is not an in-place undo, and it needs a backup that already exists.
- Prisma Postgres only. The data tools do not reach other databases.
- We did not read tool schemas. The endpoint requires OAuth, so names come from Anthropic's directory and behaviour from Prisma's documentation. We exercised no tool.
Frequently asked questions
What can the Prisma MCP server actually delete?
Databases, connection strings and object-store buckets. Prisma documents delete_prisma_postgres_database as deleting a database by id, and delete_object_store_bucket as permanently deleting a bucket, every object in it, and all its access keys. Deleting a bucket access key stops that key working immediately. No two-phase confirmation is documented.
Why does the Prisma MCP server ask for workspace admin?
Because its only scope is workspace:admin. The server advertises just that plus offline_access at its RFC 9728 metadata endpoint, so there is no read-only grant to choose. Approving the connection gives an agent the same workspace authority you hold, including database and bucket deletion. Review it on that basis.
Can an AI agent run SQL against my Prisma Postgres database?
Yes. execute_sql_query runs a SQL query against a database by id, and execute_prisma_postgres_schema_update applies a schema change. Prisma also exposes introspect_database_schema for reading structure first. These are ordinary tool calls, so whatever approval prompt your client shows is the only gate in front of them.
Does the Prisma MCP server work with databases other than Prisma Postgres?
No. Every data tool names Prisma Postgres specifically, and Prisma describes the server as letting AI tools manage Prisma Postgres databases. The one exception is search_prisma_documentation, which answers questions about Prisma ORM, Postgres, Compute, schema design and migrations from the official docs.
Can I recover a Prisma Postgres database deleted through MCP?
Only from a backup you already had. Prisma exposes list_prisma_postgres_backups and create_prisma_postgres_recovery, which restores a backup to a new database. Recovery creates a new database rather than restoring in place, and nothing in the documented tool set recovers a bucket, whose deletion Prisma calls permanent.
Is the Prisma documentation search tool read-only?
Yes. Prisma states search_prisma_documentation is read-only and needs no setup beyond the MCP connection. It returns a cited answer with links back to the official documentation, so answers reflect the current docs rather than a model's training data. It is the only tool on the server that touches no workspace resource.
Sources
- Prisma MCP server documentation (read as Markdown via the
.mdvariant Prisma publishes for AI agents; retrieved 2026-09-13) · retrieved 2026-09-13 - Live OAuth posture check against
https://mcp.prisma.io/mcp— HTTP 401 with awww-authenticateBearer challenge, and RFC 9728 metadata athttps://mcp.prisma.io/.well-known/oauth-protected-resource/mcpreturningscopes_supportedofworkspace:adminandoffline_access, withhttps://auth.prisma.ioas the authorization server (2026-09-13) · retrieved 2026-09-13 - Anthropic Connectors Directory entry (retrieved 2026-09-13) · retrieved 2026-09-13
- Prisma support — · Privacy
More Developer Tools connectors
CircleCI
Diagnose failed builds, read job logs, inspect test results and rerun or roll back deployments from your AI assistant.
Claude Managed Agents
Create, run, monitor and debug Anthropic's Claude Managed Agents from inside Claude itself.
Product names and logos belong to their owners. Agentman is not affiliated with a connector's maker unless the page says the connector is built and run by Agentman.
Use it in an agent
Put Prisma to work.
Connect Prisma once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.