Explore 2387 PostgreSQL extensions from PGEXT, maintained by Pigsty.
142 extensions found. Clear filters
| Name | Version | Description | Category | License | Language | PG Version | Stars |
|---|---|---|---|---|---|---|---|
| supabase_custom_claims | 1.0 | How to implement custom claims with Supabase | SEC | — | JavaScript | — | 678 |
| supa_audit | 0.3.1 | Trigger-based table audit history with stable UUID record identities and JSONB row versions. | SEC | Apache-2.0 | SQL | 12–16 | 672 |
| cedarling_pg | 0.1.0 | PostgreSQL integration for Cedarling authorization decisions, including JWT-aware checks and RLS-oriented helpers. | SEC | Apache-2.0 | Rust | — | 646 |
| sql_firewall | 0.8 | Cluster-wide query allowlist firewall with learning, enforcing, permissive, and disabled modes keyed by user and parse-tree fingerprint. | SEC | PostgreSQL | C | — | 176 |
| launchql-base32 | 0.0.3 | RFC6238 TOTP implementation in pure PostgreSQL plpgsql | SEC | MIT | C | — | 118 |
| pg_enquo | 0.0 | PostgreSQL extension for encrypted query operations | SEC | MIT | Rust | 12–17 | 79 |
| pg_credereum | 0.1 | Cryptographically verifiable database auditing backed by blockchain-style transaction blocks. | SEC | GPL-3.0 | C | 10 | 62 |
| keyhippo | 1.2.5 | RLS-compatible API keys for PostgreSQL | SEC | MIT | SQL | 15 | 59 |
| libx509pq | 1.3 | X.509 certificate parsing library for PostgreSQL | SEC | GPL-3.0 | C | 12–18 | 54 |
| pg-audit-json | 1.0.2 | Trigger-based PostgreSQL table auditing with JSONB row snapshots and recursive change diffs. | SEC | PostgreSQL | SQL | 10–18 | 47 |
| pg_themis | 1.0 | PostgreSQL encryption and decryption functions backed by the Themis cryptographic library. | SEC | Apache-2.0 | C | — | 33 |
| eql | 2.2.1 | Encrypt Query Language provides PostgreSQL types, functions, operators, and index support for searchable encrypted data. | SEC | MIT | SQL | 14–17 | 29 |
| check_access | 0.1 | Functions and views to facilitate PostgreSQL object access inspection | SEC | PostgreSQL | SQL | 10–18 | 28 |
| hello-world | 0.0.1 | RLS demo extension with users and products tables | SEC | MIT | C | — | 23 |
| supabase | 0.0.1 | A friendly playground for building and validating Supabase Row‑Level Security (RLS) | SEC | MIT | C | — | 23 |
| aiven_extras | 1.1.20 | Aiven PostgreSQL extras for non-superuser access to selected database features. | SEC | Apache-2.0 | C | 12–18 | 22 |
| custom_properties | 0.0.3 | Supabase RLS helper tables and functions for managing user properties and custom claims. | SEC | — | SQL | — | 20 |
| pg_diffix | fir | Provides strong dynamic anonymization for PostgreSQL query results. | SEC | MIT | C | 13–18 | 19 |
| pg_fhe | 0.1 | Microsoft SEAL-backed CKKS operations over encrypted values stored in PostgreSQL. | SEC | — | C++ | — | 18 |
| pgzan | 0.0.0 | Proof-of-concept pgrx extension for evaluating Zanzibar-style authorization inside PostgreSQL row-level security policies. | SEC | — | Rust | 11–15 | 18 |
| pgspeck | 1.0 | Encrypt and decrypt 32-bit and 48-bit integer blocks with the Speck symmetric cipher | SEC | MIT | C | 10–18 | 17 |
| open_pg_tde | 2.4.0 | Transparent data encryption for upstream PostgreSQL using the tde_heap access method, including tables, indexes, TOAST, WAL, and temporary files. | SEC | PostgreSQL | C | 16–18 | 14 |
| pgpm-jwt-claims | 0.15.5 | Agentic DB - Give your agent a brain | SEC | MIT | C | — | 14 |
| webauthn | 1.6 | Pure-SQL PostgreSQL implementation of WebAuthn credential registration and assertion verification. | SEC | MIT | SQL | — | 14 |
| veil2 | 0.9.3 | Provides the basis for a Virtual Private Database implementation. | SEC | GPL-3.0 | SQL | — | 12 |
| veil2_demo | 0.9.3 | Provides a demo database for the veil2 extension. | SEC | GPL-3.0 | SQL | — | 12 |
| veil2_minimal_demo | 0.9.3 | Provides a minimal but complete demo database for the veil2 extension. | SEC | GPL-3.0 | SQL | — | 12 |
| pg_audit | 0.1.3 | An extension for creating audit tables | SEC | BSD-2-Clause | SQL | 10–18 | 10 |
| pg_cel | 0.1.0 | A pure PostgreSQL implementation of the Google Zanzibar / OpenFGA authorization model. | SEC | Apache-2.0 | Rust | — | 10 |
| grants_manager | 0.0.1 | Declarative PL/pgSQL toolkit for snapshotting, reporting, and aligning database object grants. | SEC | — | SQL | — | 9 |
| pgjwt_rs | 0.1.2 | JWT verification for RS256 and Ed25519 tokens inside PostgreSQL | SEC | MIT | Rust | 13–18 | 8 |
| drop_role_helper | 1.0 | Generates SQL to revoke all privileges held by a role in the current database. | SEC | PostgreSQL | SQL | — | 7 |
| noddl | 1.0 | Cluster-wide DDL blocker with role and database exceptions. | SEC | MIT | C | — | 7 |
| pg_pii_vault | 0.0.0 | PostgreSQL extension for GDPR-compliant column-level encryption using HashiCorp Vault Transit Engine. | SEC | MIT | Rust | 13–18 | 6 |
| pgseccomp | 1.0 | provide seccomp syscall filtering for PostgreSQL | SEC | PostgreSQL | C | — | 6 |
| roleman | 0.3.0 | Parameterized role and privilege management functions for PostgreSQL. | SEC | PostgreSQL | SQL | 10–18 | 6 |
| accumulo_access_pg | 0.1.5 | PostgreSQL extension for parsing and evaluating Accumulo Access Expressions. | SEC | MIT | Rust | 15 | 5 |
| blake2b | 1.0 | PostgreSQL extension for fast secure hashing | SEC | MIT | C | — | 5 |
| email_guard | 0.35.0 | Supabase Auth signup guard that blocks disposable email domains and normalizes Gmail addresses. | SEC | Apache-2.0 | SQL | — | 5 |
| password_profile | 1.0.0 | password_profile: Advanced password security and policy enforcement | SEC | GPL-3.0 | Rust | — | 5 |
| pgx-s3sign | 1.0 | Sign S3 requests, fast: Created by pgx | SEC | MIT | Rust | — | 5 |
| uniphant | 1.5 | PostgreSQL-centric authentication and authorization demo integrating WebAuthn, PostgREST, and role-based access control. | SEC | MIT | SQL | 13 | 5 |
| ac | 0.0.1 | Access Control Postgres extension (with dev environment) | SEC | — | SQL | — | 4 |
| otp | 1.0.0 | Implementation of TOTP compatible with Google Authenticator | SEC | PostgreSQL | SQL | 10–18 | 4 |
| pg_ed25519 | 0.2 | Ed25519 signing and signature-verification functions for PostgreSQL | SEC | MIT | C | 10–18 | 4 |
| pg_role_fkey_trigger_functions | 1.0.4 | A bunch of trigger functions to help establish and/or maintain referential integrity for columns that reference PostgreSQL ROLE NAMEs. | SEC | PostgreSQL | SQL | — | 4 |
| pg_sulog | 1.0 | PostgreSQL superuser operation logging and blocking extension | SEC | PostgreSQL | C | — | 4 |
| rls_oso | 0.0.0 | PoC postgres plugin to use oso authorization in row level security policies | SEC | — | Rust | — | 4 |
| tce | 0.10.0-dev | Transparent column encryption for PostgreSQL using per-role envelope keys and external key-management services. | SEC | PostgreSQL | Rust | 15–18 | 4 |
| tcle | 1.0 | Experimental table access method for transparent AES-256-CBC encryption of selected column types. | SEC | PostgreSQL | C | 12–13 | 4 |