Supabase MCP
Supabase is rapidly becoming the default backend-as-a-service for modern web applications.
Official Supabase MCP server enabling Claude to manage projects, query databases, manage auth, Edge Functions, and storage. Configurable read-only and project-scoped modes.
- Query your application database by describing what data you need
- Check the structure of your database tables and relationships
- Manage user accounts and authentication settings from one place
Supabase is rapidly becoming the default backend-as-a-service for modern web applications. AI-assisted database management and schema exploration accelerates development — and read-only mode makes this defensible for enterprise.
Development teams using Supabase who want schema introspection, query assistance, and project management in their AI workflow.
https://github.com/supabase/mcp
By Supabase
How to Get It
Add to your MCP client config:
{
"mcpServers": {
"supabase": {
"type": "http",
"url": "https://mcp.supabase.com/mcp?project_ref=<project-ref>&read_only=true"
}
}
}
Replace <project-ref> with your project ID (Supabase project settings). Your MCP client prompts you to log in to Supabase during setup.
Once it’s connected, paste this into Claude:
Help me query my application database by describing what data me need
Trust Signals Reviewed
Data & Access
Community Pulse Active
Discussed on Reddit
- Supabase MCP Server AMA — Reddit · 40 pts
- I built a full-featured travel app with SvelteKit + Supabase, and added an MCP s — Reddit · 16 pts
- Supabase Remote MCP Server Makes It Easier Than Ever to Build Your Apps With AI — Reddit · 14 pts
3 mentions across 1 sources
Reviewer notes
Reviewed review. These are observations, not a security certification.
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 2,785 GitHub stars; 14 contributors; last commit 5d ago; license Apache-2.0.
2026-04-02: LIMITATION: Without explicitly setting read_only=true and project_ref scoping, the MCP has full access to ALL Supabase projects in the account. Default configuration is dangerously broad.
Things to check
- Connecting an LLM to a live database carries risk: Supabase recommends read-only mode (read_only=true) and project scoping (project_ref) by default — without project_ref the server can access all projects in your account. Server is pre-1.0; expect breaking changes. CLI and self-hosted deployments get a limited tool subset and no OAuth 2.1.
How to evaluate tools before deploying →
Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.
Evaluation
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 2,785 GitHub stars; 14 contributors; last commit 5d ago; license Apache-2.0.