--- title: "Supabase MCP: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/supabase/ description: "Connects an assistant to Supabase project data and configuration, with project, feature-group and read-only restrictions available in the server URL." --- # Supabase MCP: review, setup & limitations · Undominated.ai > Connects an assistant to Supabase project data and configuration, with project, feature-group and read-only restrictions available in the server URL. [← Explore all mcp servers](/mcp-servers/) DATABASE DEVELOPMENT / Supabase # Supabase MCP Connects an assistant to Supabase project data and configuration, with project, feature-group and read-only restrictions available in the server URL. See setup guidance ↓Original source ↗ SOURCE REVIEW Reviewed 2026-09-21 Evidence 4 linked sources Publisher Supabase Licence Apache-2.0 ↗ Revision 6c411e221ae2 Read what was—and wasn’t—checked ↓ “Connect your Supabase projects to Cursor, Claude, Windsurf, and other AI assistants.” Supabase · upstream description ↗ Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Documents project scoping and feature selection alongside a read-only mode. - Keeps hosted OAuth setup distinct from the reduced local and self-hosted tool surfaces. ### A good fit for - Exploring a development project’s schema and preparing database changes with an explicitly scoped connection. ### Weigh up before choosing - Read-only mode is opt-in; the standard connection includes mutating capabilities. - Local CLI and self-hosted endpoints expose fewer tools and do not provide the hosted OAuth flow. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - README.md (installation, capability and permission sections) - packages/mcp-server-supabase/package.json - packages/mcp-server-supabase/src/index.ts - LICENSE ### Our findings - The createToolSchemas readOnly option defaults false and is not itself a permission boundary; server URL restrictions must match. - The package exports an MCP server and HTTP handler, rather than establishing an interchangeable hosted/local feature set. ### Not established by this review - Server startup, authentication and tool execution were not tested. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. Upstream setup instructions ↗ - Use the Supabase dashboard or official guide to create a project-scoped server URL. - For exploration, enable read_only=true and limit features before completing OAuth. - Use the official URL builder for the intended project; copy its project_ref/read_only/features settings into your client’s own configuration format. ### Before you start - A Supabase account and permission to the intended project. ### Compatibility An MCP client supporting Streamable HTTP. · A Supabase account and permission to the intended project. ### Implementation TypeScript ### Transports Streamable HTTP ### Database development / Remote service - Reads project schema, data and configuration. - Unrestricted tool groups can change database objects and project state. ### Cost model Supabase project and service usage determine cost; the source licence does not cover hosted service usage. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - Official documentation ↗ Checked 2026-09-21 https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/README.md Supports: summary, whySelected, bestFor, limitations, install, access, compatibility, transports - Applicable source licence ↗ Checked 2026-09-21 https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/LICENSE Supports: license - Implementation: packages/mcp-server-supabase/package.json ↗ Checked 2026-09-21 https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/packages/mcp-server-supabase/package.json Supports: language, review - Implementation: packages/mcp-server-supabase/src/index.ts ↗ Checked 2026-09-21 https://github.com/supabase-community/supabase-mcp/blob/6c411e221ae2a44a9b2e905d04ea80d132edf9d2/packages/mcp-server-supabase/src/index.ts Supports: language, review KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Neon MCP Server ↗ Manages Neon Postgres projects, branches and SQL through a hosted connection with project and grant-based tool filtering.](/mcp-servers/neon/)[### Prisma MCP ↗ Manage Prisma Postgres databases, connection strings, recovery and object-store resources from an authenticated client.](/mcp-servers/prisma/)[### Brave Search MCP ↗ Provides web, news, image, video and place search using the Brave Search API.](/mcp-servers/brave/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)