Skip to main content
Most of these integrations were built using the available online documentation for these providers. If you notice any issues with a provider or have an idea for a more optimal flow, please open an issue and we’ll investigate it as soon as possible.
Providers handle authentication and connection configuration for managed database platforms. Each provider knows how to construct connection strings, manage SSL, and — where supported — obtain IAM tokens automatically.

​
Provider Matrix

​
Provider Details

Provider ID: directThe fallback for any database not hosted on a specific managed platform. Passes connection parameters through without modification. No SSL override.When to use: Self-hosted databases, Docker/Kubernetes-hosted, local dev databases, any provider not listed above.
Provider ID: gcp-cloud-sqlWith password: Provide host, user, and password as normal. SSL defaults to verify-full.With IAM auth: Omit the password. Mori obtains a token via gcloud sql generate-login-token. Requires Google Cloud SDK installed and authenticated (gcloud auth login).
When using Cloud SQL Proxy, the host is typically 127.0.0.1. Mori skips SSL enforcement when a tunnel is configured.
Provider ID: aws-rdsWith password: Provide host, user, and password. SSL enforced.With IAM auth: Omit the password. Mori generates an IAM auth token via aws rds generate-db-auth-token. Requires AWS CLI configured and IAM policy granting rds-db:connect.Extra field: aws_region (required for IAM auth only).
Provider ID: neonServerless PostgreSQL. SSL enforced. Default database neondb, default user neondb_owner.
Copy the connection string directly from the Neon dashboard.
Provider ID: supabaseManaged PostgreSQL. SSL enforced. Default database postgres.
Use the “Direct” connection string from Supabase Settings > Database (not the pooled PgBouncer one).
If the Supabase connection string throws you an error, you might be using an IPV6 address. Try using the IPV4 address instead.
Provider ID: azureWith password: Provide host, user, and password. SSL enforced.With Azure AD auth: Omit the password. Mori obtains a token via az account get-access-token. Requires Azure CLI installed and authenticated (az login).
Provider ID: planetscaleServerless MySQL and PostgreSQL. TLS always enabled — the provider hardcodes TLS in the DSN.
Provider ID: vercel-postgresPowered by Neon. SSL enforced. Supports a connection_url extra field for the full URL.
Copy the POSTGRES_URL from your Vercel project’s environment variables.
Provider ID: digitaloceanNon-standard defaults auto-applied: port 25060, database defaultdb, user doadmin.
Copy the connection string from the DigitalOcean dashboard under Databases > Connection Details.
Provider ID: railwayOne-click database deployments. SSL enforced. Supports a connection_url extra field.
In the Railway dashboard, go to your database service and copy the connection string from the “Connect” tab.
Provider ID: upstashServerless Redis. Always uses TLS — connection strings use rediss:// (double s).
Provider ID: cloudflareCloudflare D1 (SQLite at the edge) and Workers KV. Accessed via the Cloudflare API.Extra fields:
Provider ID: firebaseGoogle Cloud Firestore via Firebase. Provide a GCP project ID and optionally a service account credentials file.Fields:
If GOOGLE_APPLICATION_CREDENTIALS is set, you can omit the credentials file.