FeatherDB is a native Postgres client for macOS with one MCP gateway your AI tools connect to. Live databases are read-only — enforced inside the transaction, not requested in a prompt. Sandboxes are real local clones with the personal data masked, so the agent can break something that costs nothing.
Version 1.0.3 · 68 MB · signed & notarized · 14-day trial, no account, no telemetry.
A write to a live database is refused before anything executes.
Every statement an AI sends to a live database runs inside
BEGIN READ ONLY and is rolled back afterwards. A write is not talked out of
it — Postgres refuses it, and the AI gets a message to relay to you. The capability is
decided by what kind of database it is, never by how the request was worded.
{ "database": "production",
"sql": "DELETE FROM customers WHERE created_at < now() - interval '1 year'" }
featherdb gateway
REFUSED — `production` is a LIVE database and AI writes to live are disabled in this version of FeatherDB. Nothing was executed or changed. RELAY THIS TO YOUR USER: to change live data they can run the SQL themselves in FeatherDB's SQL editor, or clone a sandbox and iterate there first. A reviewed live-change flow (your SQL plus a mandatory rationale, in-app review and confirm, backup/rollback points, up/down migration files) is on the FeatherDB roadmap.
Staged conversation — but the refusal is the gateway's actual message, byte for byte.
One click clones a live database into an embedded Postgres on your Mac.
Emails, names and phone numbers are replaced before they land — fail-closed, so a column the classifier cannot vouch for is not copied at all. The AI gets full read and write there, and the mask report shows exactly what happened to every column. Anything the agent breaks costs nothing.
Sandbox changes worth keeping become an ordered, safety-linted plan.
Each step is graded — DANGER for the ones that rewrite a table,
WARN for the ones that lock it — and split into phases:
transactional first, CONCURRENTLY indexes outside. Dangerous plans require an
explicit confirmation, and a drift guard catches production changing underneath you.
The first four install themselves — one click, no token to copy. Everything else gets the standard MCP config to paste. One gateway serves every database you expose; the AI names which one it wants, and what it may do there is decided by the kind of database it is, not by the request.
Checkout by Polar.sh, the merchant of record — your receipt and any VAT come from them. Activation is immediate: open the app, type your purchase email, enter the 6-digit code it sends you. No key to wait for.
No. FeatherDB connects your Mac directly to your databases — rows, schemas, credentials, and query results never touch our servers. The app contacts a server in exactly three situations: buying, activating, and checking for updates, and the privacy policy lists precisely what each involves.
Your AI tools connect to one local MCP gateway. On a live
database they can read, and only read — every statement runs inside
BEGIN READ ONLY, so a write is refused by Postgres itself, not by a
prompt. On a sandbox they get full read and write, because a sandbox is a
disposable local clone with personal data already masked.
Postgres — connected directly over TLS (Supabase, Neon, RDS, and other managed hosts) or through an SSH tunnel to a box you own. Sandboxes run in an embedded Postgres 17 on your Mac; cloning from older servers works, and the diff planner flags version drift so you review those migrations by hand.
No account. Buy, open FeatherDB, type the email from your receipt, and enter the 6-digit code it sends you. One purchase covers two Macs — deactivate a machine in the app to free its seat. After activation the licence verifies offline; air-gapped Macs can paste a licence key instead.
Nothing. The version you have keeps working forever, offline. Renewing ($29/year) is optional and only buys continued updates — skip it and come back whenever a new version is worth it to you.
No — FeatherDB is a native macOS app, built for macOS 15 or later on Apple Silicon and Intel. Going deep on one platform is what keeps it fast and native-feeling.