neon-init

MCP server · npm · graded 2026-10-24Source linked

Initialize Neon projects

No outside reports on file

This tool can create and access your cloud databases, so it requires strong authentication controls, spending limits, and careful monitoring to prevent accidental or malicious misuse.

Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for Neon Init helpful?

What it can access

Local filesNo local folder access notedLOW
Command executionNo shell command runner notedLOW
Network reachConnects to outside service APINOTED
CredentialsRequires API key or tokenREVIEW
Package sourcenpm (neon-init)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

npx -y neon-init

All setup options ↓

Check this skill Watch it in my stack Compare README badge View project

Everything known

We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.

0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30

Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-24.

Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.

Check a specific version →

About Neon Init

neon-init is a tool that helps set up and initialize new Neon database projects. Neon is a serverless PostgreSQL database service. This connector likely automates the setup process for connecting to and configuring Neon databases.

Who it’s for

Developers building applications that need PostgreSQL databases in the cloud. Teams using Neon who want to automate project initialization through Claude or other AI tools.

Alternatives

Neon CLI: Official command-line tool for Neon project management
Terraform: Infrastructure-as-code tool with Neon provider for reproducible setup
AWS RDS: Amazon's managed PostgreSQL service with similar initialization tools
Supabase: Open-source PostgreSQL backend with automated setup features

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README for MCP server setup instructions. Typically, this would be configured in Claude Desktop's mcpServers JSON, but exact steps depend on the Neon authentication method and your environment.

Why this grade

CC — Moderate risk signals

Signal-based grade (3/7 points): public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

35/100

Weekly npm downloads: 69.8k
Listing last refreshed: 2026-10-27

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Risks to watch for

Database credentials: The tool likely needs API keys or connection strings to access your Neon account and create databases, which could be leaked if misconfigured
Project creation: An AI using this connector could create expensive database resources without proper limits, running up cloud costs
Malicious prompts: User instructions could trick the AI into initializing databases with weak security settings or in unintended projects
Scope creep: The tool might have permissions to modify or delete existing databases beyond just initialization
Unencrypted storage: Database credentials in config files could be readable by other tools or processes on your computer

How to lower the risk

Least-privilege permissions

Create a dedicated Neon API key with only initialization permissions, not full account access
Use separate Neon projects for testing and production

Network isolation

Run this MCP server in a sandboxed environment if possible
Restrict which Claude conversations can access this connector

Monitoring

Log all database initialization requests to detect unusual activity
Set up Neon billing alerts to catch unexpected resource creation

Red flags to watch for

Requests to initialize databases in the wrong project or environment
Attempts to access or modify credentials outside the initialization flow
Unusual frequency of initialization requests in a short time period

Questions

How do I install Neon Init?

Run npx -y neon-init in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page.

Are there security reports about Neon Init?

No reports found for this package in our research (last checked 2026-10-30). Neon Init currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include database credentials, project creation, malicious prompts.

Is Neon Init actively maintained?

Neon Init has 69.8k weekly npm downloads, with its latest repository commit pushed on 2026-10-24. Our directory data was last refreshed on 2026-10-27. Check recent commit activity, release tags, and open issues before pinning it in production.

What are alternatives to Neon Init?

Notable alternatives to Neon Init include Neon CLI (Official command-line tool for Neon project management), Terraform (Infrastructure-as-code tool with Neon provider for reproducible setup), AWS RDS (Amazon's managed PostgreSQL service with similar initialization tools), Supabase (Open-source PostgreSQL backend with automated setup features). You can also compare Neon Init side by side with other MCP servers in the Related tools section on this page.

Maintain or use Neon Init? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

GitHub README Markdown:

markdown

[![AgentArmorHQ Risk Grade for Neon Init](https://agentarmorhq.com/api/badge/neondatabase-neon-pkgs)](https://agentarmorhq.com/skills/neondatabase-neon-pkgs)

HTML embed:

html

<a href="https://agentarmorhq.com/skills/neondatabase-neon-pkgs"><img src="https://agentarmorhq.com/api/badge/neondatabase-neon-pkgs" alt="AgentArmorHQ Risk Grade for Neon Init" height="20" /></a>

Terminal check:

terminal

curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "neondatabase-neon-pkgs"

Share with your security lead

Need sign-off to use neon-init? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: neon-init
- **Listing URL:** https://agentarmorhq.com/skills/neondatabase-neon-pkgs
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0

#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** npm (neon-init)

#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts neon-init`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type: App connector
Install command: npm install neon-init
Est. context load: ~650 tokens / turn (~4 tool schemas, 0.33% of 200k context)
Popularity: 69.8k weekly npm downloads
Last updated: 2026-10-27
Last graded: 2026-10-24

Community

Discussions for Neon Init

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for Neon Init helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude