rateme12Supabase
latest · 0.11.0Interact with Supabase projects and databases.
- GitHub
- supabase/mcp
Install
Hosted by Supabase; sign in with OAuth when your client asks.
claude mcp add --transport http supabase https://mcp.supabase.com/mcp/mcp confirms it's connected.
Or add it manually in ~/.cursor/mcp.json:
{
"mcpServers": {
"supabase": {
"url": "https://mcp.supabase.com/mcp"
}
}
}In claude_desktop_config.json (Settings → Developer → Edit Config), then restart:
{
"mcpServers": {
"supabase": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.supabase.com/mcp"
]
}
}
}Endpoint, any MCP client:
https://mcp.supabase.com/mcpCommunity score
from web signals · no reviews yet · 3 mentions · 4 reactions (community v3)
- Mentions (reaction sentiment)100/100 · 13% of the weight
- Web signals (ecosystem baseline)61/100 · 87% of the weight
No reviews yet — be the first.
What the web says
Objective public usage & activity (formula v3) — the community score's web-signals input, and its own sort.
- GitHub stars · 8 hours ago
- ★ 3K
- Last commit · 25 days ago
- today
- Issue close rate · 8 hours ago
- 48%
- Latest release · 8 hours ago
- mcp-server-supabase-v0.14.0
- License · 8 hours ago
- Apache-2.0
No package-registry data collected yet.
Not yet found on other registries or list sites.
Quotes7
- Supabase MCP can leak your entire SQL database ↗
- Supported by Asana, Atlassian, Canva, Datadog, Figma, Granola, Linear, Notion, Slack, and Supabase. Developers can also add enterprise-managed auth to their own third-party MCP connectors in the Claude directory. Blog: https://claude.com/bl… ↗
- Supabase: your app can have its own MCP server inside the project you already have, and the user's agent sees only what RLS allows. Supabase's own access clarity scores 34.2. AR 50.6, Kin 42.9 https://apis.io/2026/10/12/supabase-gives-every… ↗
- apply_migration should accept an optional version parameter ↗
Problem apply_migration generates its own timestamp server-side via POST /v1/projects/{ref}/database/migrations. This timestamp never matches the local migration file's timestamp, creating orphan remote-only entries in supabase_migrations.s…
- Supabase scoped personal access tokens went GA Oct. 6. The MCP server now checks token permissions, closing the gap that left AI agents on full-access tokens. #Firebase #Supabase #Security #Authentication ↗
- Destructive-SQL check splits on semicolons inside string literals, so safe UPDATEs with a ";" in a value trigger a confirmation (and hang in clients that cannot answer it) ↗
What happens Since the destructive-SQL confirmation was added, execute_sql asks the client to confirm some statements that are not destructive. Any UPDATE ... WHERE ... whose string value contains a semicolon is flagged as an "UPDATE withou…
- list_tables: schemas says it defaults to all schemas but defaults to ["public"], so the RLS advisory silently reports on a partial database ↗
Bug report I confirm this is a bug with Supabase, not with my own application. I confirm I have searched the Docs, GitHub Discussions, and Discord. Describe the bug The schemas parameter on list_tables advertises three things that cannot al…
No liveness or verification signals yet.
Version history1
- 0.11.0release date unknown
Badge for your README
Shows this page's community score and its sample, kept current, and links readers here to review.
[](https://rateme12.com/servers/seed-supabase)