HeapDeck: Postgres® Monitor for iPhone
Paged about Postgres with your laptop at home? HeapDeck shows who is blocking and how close the server is to wraparound, and you act from your iPhone. Contain the incident on the phone, then fix the cause at your desk.
Locks builds the blocking tree from pg_blocking_pids() and puts the root blocker on top: its pid, user@app, how long it has held the lock and what it is running. Under it, every session stuck in the queue.
idle in transaction. The count on the button covers the sessions waiting on the root itself, and the confirmation lists their pids. PRO RowExclusiveLock on public.orders. HeapDeck marks a root sitting idle in transaction and flags a deadlock as a deadlock. Vacuum & Bloat shows how close the server is to transaction ID wraparound, as a share of 2³¹, with the oldest tables by relfrozenxid age. At the limit, PostgreSQL refuses writes with database is not accepting commands to avoid wraparound data loss.
DROP INDEX CONCURRENTLY for you and never runs it itself. VACUUM (ANALYZE) or ANALYZE on a table from the list. VACUUM FULL asks you to type the table name first. PRO HeapDeck connects your iPhone straight to your server or through your SSH bastion. You need no account, and no HeapDeck server stands between you and your data. If you set up the AI assistant, it talks to the provider you chose, with your key.
sslmode=require by default. HeapDeck pins the certificate's SHA-256 fingerprint and holds the connection if the certificate changes, until you decide. GRANT pg_monitor for the rest. Each card starts with what you see when it goes wrong and links to a guide with the SQL, the thresholds and the screen to open.
sorry, too many clients already Your app can't get a connection. Health shows sessions against max_connections and how many sit idle in transaction, and Activity lists who holds them. Free up connections pg_stat_statements. Find the slow query You can see all of this for free on one server. Stopping a session, VACUUM and dropping a slot need Pro, a one-time $19.99.
Ten health tiles up front and a native screen behind each one, so you skip typing psql on a phone keyboard. The SQL console covers the rest and classifies each statement before it runs.
Ten tiles: sessions against max_connections, blocked sessions, the longest query, TPS, cache hit, autovacuum, wraparound, replication, database size and slow queries. A Warning or Critical verdict names the tiles behind it. Refreshes every 10 seconds while open.
Sessions from pg_stat_activity, waiting ones first. Filter by active, idle in transaction, longer than 10 s or waiting. Swipe a row to cancel or terminate it.
Replay lag per standby, broken down by WAL phase. Slots with the WAL they retain, and a warning when an inactive slot is filling your disk.
The 300 heaviest statements from pg_stat_statements, sorted by total time, mean, calls or rows. A statement's detail shows its role, database, timings and I/O, and the sessions running it now (PostgreSQL 14+).
Browse tables, filter on the server, follow foreign keys, export a page as CSV or JSON. The console classifies each statement as you type; on Free, reads run inside BEGIN READ ONLY.
Explains an incident or a lock chain and drafts the fix, with your own API key or your own Ollama. It reads a redacted snapshot and leaves running anything to you.
HeapDeck's built-in demo, in dark and light like iOS.
Cancel root The sessions it frees, before you confirm.
Vacuum & Bloat Dead tuples and unused indexes, with the space they hold.
Activity Waiting sessions first.
Replication Lag per standby, slots holding WAL.
Slow queries From pg_stat_statements.
Limited access No pg_monitor? The screen names the hidden data and the fix.
SQL classifier Its verdict on a DELETE without WHERE.
AI assistant It explains a lock chain.
What the model sees The exact text, before you send it.
Data 200-row pages, filtered on the server.
Try it on your own production first: the monitoring screens cost nothing for one server. Pro adds more servers and the actions for $19.99, once. No subscription, no account.
forever
Point it at one production server and see what is going on.
$19.99
one-time purchase
For the moment you need to act.
VACUUM, ANALYZE and dropping a replication slot Pro actions stay visible on Free, marked PRO, so you can see what they would do. The assistant works for free on the built-in demo incident. Outside the US, the App Store shows the price in your currency.
HeapDeck works with any PostgreSQL 13–19 your iPhone can reach, self-hosted or managed, primary or standby. If your role is not a superuser, the screens mark the data PostgreSQL hides from it and show the GRANT pg_monitor that fixes it.
We checked Neon, Supabase and Amazon RDS live. Paste the connection string from the Connect panel in Neon or Supabase; for RDS, enter the instance endpoint from the RDS console. Neon works over its direct host and its -pooler host. Supabase's direct host has only an IPv6 address: on a network without IPv6, HeapDeck says so and points you to the Session pooler string.
verify-full works when the certificate chains to a root that iOS trusts, as Neon's does. Amazon RDS signs with its own root CA, which iOS doesn't ship; for RDS and providers like it, use sslmode=require: the connection is encrypted and HeapDeck pins the certificate fingerprint on first connect.
Yes. Turn on the SSH tunnel in the connection and enter the bastion's host, user and a password or key. HeapDeck reads Ed25519, ECDSA and RSA keys in OpenSSH, PEM, PKCS#8 or PuTTY format, with or without a passphrase, and can create a Secure Enclave key that never leaves your iPhone.
Behind more than one hop, add up to two jump hosts, each with its own login. HeapDeck answers two-factor prompts and pins each host key on first connect. Client certificates (mTLS) aren't supported.
HeapDeck connects straight to your server or through your SSH bastion, with no server of ours in between. You need no account. Passwords, SSH keys and pinned fingerprints stay in the iOS Keychain on this device, without iCloud sync.
Two things can leave the phone, both under your control: a question to the AI provider you set up (Pro), and crash reports and usage counts, which you can switch off on first launch or in Settings. Neither contains SQL, table names, hostnames, values or credentials. The details are in the privacy policy.
No. A role with pg_monitor covers the monitoring screens: GRANT pg_monitor TO your_role;. Without it HeapDeck still works and labels what the server hides from your role. Cancelling other roles' sessions needs the usual PostgreSQL rights, such as pg_signal_backend; without them, HeapDeck gives you the command to hand to your DBA.
Cancel (pg_cancel_backend) stops the query a session is running; the session and its transaction stay open. Terminate (pg_terminate_backend) kills the whole session and rolls its transaction back.
A session that is idle in transaction has no running query, so cancel does nothing to it: terminate is what releases its locks. HeapDeck asks you to type the pid before terminating the root of a lock chain or a session on a Production connection.
Free can't write: console reads run inside BEGIN READ ONLY … ROLLBACK. On Pro, a write passes four checks in order: Pro, the connection's Read-only switch, the SQL classifier and your confirmation.
VACUUM FULL, dropping a slot and terminating a lock root ask you to type the table name, slot name or pid first. A connection marked Production gets a PROD badge and stricter confirmations.
You still can. HeapDeck gives each incident question its own screen, so you don't type queries on a phone keyboard: who is blocking and how many wait, what the root is running, how close wraparound is, which slot holds WAL. It reads the lock chain again before acting and asks you to confirm.
A redacted snapshot of the screen you asked about. It never contains host, port, passwords or keys, and values become placeholders like $1. For cloud models, HeapDeck hides database, table and column names by default and puts them back on your phone when the answer arrives.
Requests go from your iPhone to the provider you chose with your own key (Anthropic, OpenAI, OpenRouter, Z.ai), or to your own Ollama or OpenAI-compatible server. “What the model sees” shows the exact text before you send it. The assistant is part of Pro and leaves running SQL to you.
No. One server is free to monitor, and Pro, with unlimited servers and the actions, is a single purchase of $19.99 tied to your Apple ID. There is no account and no trial clock.
No. HeapDeck works while it is open and does no background monitoring. Keep your alerting where it is: HeapDeck is the screen you open after the page.
Yes. On iPad, HeapDeck runs full screen in every orientation, with a sidebar in place of the tab bar. Locks shows the lock tree beside the selected session, and the SQL console takes the full width. Pro follows your Apple ID, so one purchase covers your iPhone and iPad.
Amazon Web Services, AWS and Amazon RDS are trademarks of Amazon.com, Inc. or its affiliates. Neon, Supabase, Google Cloud SQL and Microsoft Azure are trademarks of their respective owners. HeapDeck is not affiliated with or endorsed by any of them.
The problems that page you at night, one page each: the SQL to check by hand and what HeapDeck shows.
Add a server, pin its certificate, and use the monitoring screens for free. Pro unlocks the actions for the night you need them.