DATABASE DEVELOPMENT / Supabase
Supabase MCP
Connects an assistant to Supabase project data and configuration, with project, feature-group and read-only restrictions available in the server URL.
“Connect your Supabase projects to Cursor, Claude, Windsurf, and other AI assistants.”
01 / THE REASONING
Why this made the selection.
- Documents project scoping and feature selection alongside a read-only mode.
- Keeps hosted OAuth setup distinct from the reduced local and self-hosted tool surfaces.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- README.md (installation, capability and permission sections)
- packages/mcp-server-supabase/package.json
- packages/mcp-server-supabase/src/index.ts
- LICENSE
Our findings
- The createToolSchemas readOnly option defaults false and is not itself a permission boundary; server URL restrictions must match.
- The package exports an MCP server and HTTP handler, rather than establishing an interchangeable hosted/local feature set.
Not established by this review
- Server startup, authentication and tool execution were not tested.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Connect a server deliberately.
- Use the Supabase dashboard or official guide to create a project-scoped server URL.
- For exploration, enable read_only=true and limit features before completing OAuth.
- Use the official URL builder for the intended project; copy its project_ref/read_only/features settings into your client’s own configuration format.
Before you start
- A Supabase account and permission to the intended project.
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
- Official documentation ↗Checked
https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/README.md
Supports: summary, whySelected, bestFor, limitations, install, access, compatibility, transports
- Applicable source licence ↗Checked
https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/LICENSE
Supports: license
https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/packages/mcp-server-supabase/package.json
Supports: language, review
https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/packages/mcp-server-supabase/src/index.ts
Supports: language, review