rateme12Supabase
latest · 0.13.0MCP server for interacting with the Supabase platform
- GitHub
- supabase/mcp
- Homepage
- supabase.com
- MCP registry
- com.supabase/mcp
Install
Needs an env var: SUPABASE_ACCESS_TOKEN — replace the <placeholders> with your values.
claude mcp add com-supabase-mcp --env SUPABASE_ACCESS_TOKEN=<SUPABASE_ACCESS_TOKEN> -- npx @supabase/mcp-server-supabase/mcp confirms it's connected.
Or add it manually in ~/.cursor/mcp.json:
{
"mcpServers": {
"com-supabase-mcp": {
"command": "npx",
"args": [
"@supabase/mcp-server-supabase"
],
"env": {
"SUPABASE_ACCESS_TOKEN": "<SUPABASE_ACCESS_TOKEN>"
}
}
}
}In claude_desktop_config.json (Settings → Developer → Edit Config), then restart:
{
"mcpServers": {
"com-supabase-mcp": {
"command": "npx",
"args": [
"@supabase/mcp-server-supabase"
],
"env": {
"SUPABASE_ACCESS_TOKEN": "<SUPABASE_ACCESS_TOKEN>"
}
}
}
}Config entry, any MCP client:
{
"command": "npx",
"args": [
"@supabase/mcp-server-supabase"
],
"env": {
"SUPABASE_ACCESS_TOKEN": "<SUPABASE_ACCESS_TOKEN>"
}
}Community score
from web signals · no reviews yet · 3 mentions · 4 reactions (community v3)
- Mentions (reaction sentiment)100/100 · 13% of the weight
- Web signals (ecosystem baseline)61/100 · 87% of the weight
No reviews yet — be the first.
What the web says
Objective public usage & activity (formula v3) — the community score's web-signals input, and its own sort.
- GitHub stars · 27 days ago
- ★ 2.9K
- Last commit · 27 days ago
- today
- Issue close rate · 27 days ago
- 49%
No package-registry data collected yet.
Not yet found on other registries or list sites.
Quotes11
- Supabase MCP can leak your entire SQL database ↗
- Supabase Storage now supports the S3 protocol ↗
- Supabase – Realtime: Multiplayer Edition ↗
- Supabase Edge Runtime: Self-Hosted Deno Functions ↗
- Fly Postgres, Managed by Supabase ↗
- Supported by Asana, Atlassian, Canva, Datadog, Figma, Granola, Linear, Notion, Slack, and Supabase. Developers can also add enterprise-managed auth to their own third-party MCP connectors in the Claude directory. Blog: https://claude.com/bl… ↗
- Supabase: your app can have its own MCP server inside the project you already have, and the user's agent sees only what RLS allows. Supabase's own access clarity scores 34.2. AR 50.6, Kin 42.9 https://apis.io/2026/10/12/supabase-gives-every… ↗
- apply_migration should accept an optional version parameter ↗
Problem apply_migration generates its own timestamp server-side via POST /v1/projects/{ref}/database/migrations. This timestamp never matches the local migration file's timestamp, creating orphan remote-only entries in supabase_migrations.s…
- Supabase scoped personal access tokens went GA Oct. 6. The MCP server now checks token permissions, closing the gap that left AI agents on full-access tokens. #Firebase #Supabase #Security #Authentication ↗
- Destructive-SQL check splits on semicolons inside string literals, so safe UPDATEs with a ";" in a value trigger a confirmation (and hang in clients that cannot answer it) ↗
What happens Since the destructive-SQL confirmation was added, execute_sql asks the client to confirm some statements that are not destructive. Any UPDATE ... WHERE ... whose string value contains a semicolon is flagged as an "UPDATE withou…
- list_tables: schemas says it defaults to all schemas but defaults to ["public"], so the RLS advisory silently reports on a partial database ↗
Bug report I confirm this is a bug with Supabase, not with my own application. I confirm I have searched the Docs, GitHub Discussions, and Discord. Describe the bug The schemas parameter on list_tables advertises three things that cannot al…
No liveness or verification signals yet.
Version history2
- 0.13.0release date unknown
- 0.11.0release date unknown
Badge for your README
Shows this page's community score and its sample, kept current, and links readers here to review.
[](https://rateme12.com/servers/f74dd432-a6ac-47b3-b3bc-5ccde8e0aac1)