supabase.com
supabase.com logo

Supabase

Integrates with Supabase to enable natural language-driven database schema exploration, management, and read-only SQL qu...

Created byApr 22, 2025

Query | MCP server for Supabase

More than 17k installs via pypi and close to 30k downloads on Smithery.ai in short, this was fun!Thanks to everyone who has been using this server for the past few months, and I hope it was useful for you. Since Supabase has released their own official MCP server, I've decided to no longer actively maintain this one. The official MCP server is as feature-rich, and many more features will be added in the future. Check it out!

Table of contents

Key features

  • Compatible with Cursor, Windsurf, Cline and other MCP clients supporting stdio protocol
  • Control read-only and read-write modes of SQL query execution
  • Runtime SQL query validation with risk level assessment
  • Three-tier safety system for SQL operations: safe, write, and destructive
  • Robust transaction handling for both direct and pooled database connections
  • Automatic versioning of database schema changes
  • Manage your Supabase projects with Supabase Management API
  • Manage users with Supabase Auth Admin methods via Python SDK
  • Pre-built tools to help Cursor & Windsurf work with MCP more effectively
  • Dead-simple install & setup via package manager (uv, pipx, etc.)

Getting Started

Prerequisites

Installing the server requires the following on your system:
  • Python 3.12+
If you plan to install via uv, ensure it's installed.

PostgreSQL Installation

PostgreSQL installation is no longer required for the MCP server itself, as it now uses asyncpg which doesn't depend on PostgreSQL development libraries.
However, you'll still need PostgreSQL if you're running a local Supabase instance:
MacOS
Windows
  • Ensure "PostgreSQL Server" and "Command Line Tools" are selected during installation

Step 1. Installation

Since v0.2.0 I introduced support for package installation. You can use your favorite Python package manager to install the server via:
pipx is recommended because it creates isolated environments for each package.
You can also install the server manually by cloning the repository and running pipx install -e . from the root directory.

Installing from source

If you would like to install from source, for example for local development:

Installing via Smithery.ai

You can find the full instructions on how to use Smithery.ai to connect to this MCP server here.

Step 2. Configuration

The Supabase MCP server requires configuration to connect to your Supabase database, access the Management API, and use the Auth Admin SDK. This section explains all available configuration options and how to set them up.
Important: Since v0.4 MCP server requires an API key which you can get for free at thequery.dev to use this MCP server.

Environment Variables

The server uses the following environment variables:
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
Note: The default values are configured for local Supabase development. For remote Supabase projects, you must provide your own values for SUPABASE_PROJECT_REF and SUPABASE_DB_PASSWORD.
CRITICAL CONFIGURATION NOTE: For remote Supabase projects, you MUST specify the correct region where your project is hosted using SUPABASE_REGION. If you encounter a "Tenant or user not found" error, this is almost certainly because your region setting doesn't match your project's actual region. You can find your project's region in the Supabase dashboard under Project Settings.

Connection Types

Database Connection
  • The server connects to your Supabase PostgreSQL database using the transaction pooler endpoint
  • Local development uses a direct connection to 127.0.0.1:54322
  • Remote projects use the format: postgresql://postgres.[project_ref]:[password]@aws-0-[region].pooler.supabase.com:6543/postgres
Important: Session pooling connections are not supported. The server exclusively uses transaction pooling for better compatibility with the MCP server architecture.
Management API Connection
  • Requires SUPABASE_ACCESS_TOKEN to be set
  • Connects to the Supabase Management API at https://api.supabase.com
  • Only works with remote Supabase projects (not local development)
Auth Admin SDK Connection
  • Requires SUPABASE_SERVICE_ROLE_KEY to be set
  • For local development, connects to http://127.0.0.1:54321
  • For remote projects, connects to https://[project_ref].supabase.co

Configuration Methods

The server looks for configuration in this order (highest to lowest priority):
  1. Environment Variables: Values set directly in your environment
  1. Local `.env` File: A .env file in your current working directory (only works when running from source)
  1. Global Config File:
  1. Default Settings: Local development defaults (if no other config is found)
Important: When using the package installed via pipx or uv, local .env files in your project directory are not detected. You must use either environment variables or the global config file.

Setting Up Configuration

Option 1: Client-Specific Configuration (Recommended)
Set environment variables directly in your MCP client configuration (see client-specific setup instructions in Step 3). Most MCP clients support this approach, which keeps your configuration with your client settings.
Option 2: Global Configuration
Create a global .env configuration file that will be used for all MCP server instances:
Add your configuration values to the file:
Option 3: Project-Specific Configuration (Source Installation Only)
If you're running the server from source (not via package), you can create a .env file in your project directory with the same format as above.

Finding Your Supabase Project Information

  • Project Reference: Found in your Supabase project URL: https://supabase.com/dashboard/project/<project-ref>
  • Database Password: Set during project creation or found in Project Settings Database
  • Service Role Key: Found in Project Settings API Project API keys

Supported Regions

The server supports all Supabase regions:
  • us-west-1 - West US (North California)
  • us-east-1 - East US (North Virginia) - default
  • us-east-2 - East US (Ohio)
  • ca-central-1 - Canada (Central)
  • eu-west-1 - West EU (Ireland)
  • eu-west-2 - West Europe (London)
  • eu-west-3 - West EU (Paris)
  • eu-central-1 - Central EU (Frankfurt)
  • eu-central-2 - Central Europe (Zurich)
  • eu-north-1 - North EU (Stockholm)
  • ap-south-1 - South Asia (Mumbai)
  • ap-southeast-1 - Southeast Asia (Singapore)
  • ap-northeast-1 - Northeast Asia (Tokyo)
  • ap-northeast-2 - Northeast Asia (Seoul)
  • ap-southeast-2 - Oceania (Sydney)
  • sa-east-1 - South America (S o Paulo)

Limitations

  • No Self-Hosted Support: The server only supports official Supabase.com hosted projects and local development
  • No Connection String Support: Custom connection strings are not supported
  • No Session Pooling: Only transaction pooling is supported for database connections
  • API and SDK Features: Management API and Auth Admin SDK features only work with remote Supabase projects, not local development

Step 3. Usage

In general, any MCP client that supports stdio protocol should work with this MCP server. This server was explicitly tested to work with:
  • Cursor
  • Windsurf
  • Cline
  • Claude Desktop
Additionally, you can also use smithery.ai to install this server a number of clients, including the ones above.
Follow the guides below to install this MCP server in your client.

Cursor

Go to Settings -> Features -> MCP Servers and add a new server with this configuration:
If configuration is correct, you should see a green dot indicator and the number of tools exposed by the server. How successful Cursor config looks like

Windsurf

Go to Cascade -> Click on the hammer icon -> Configure -> Fill in the configuration:
If configuration is correct, you should see green dot indicator and clickable supabase server in the list of available servers.
How successful Windsurf config looks like

Claude Desktop

Claude Desktop also supports MCP servers through a JSON configuration. Follow these steps to set up the Supabase MCP server:
  1. Find the full path to the executable (this step is critical):Copy the full path that is returned (e.g., /Users/username/.local/bin/supabase-mcp-server).
  1. Configure the MCP server in Claude Desktop:
Important: Unlike Windsurf and Cursor, Claude Desktop requires the full absolute path to the executable. Using just the command name (supabase-mcp-server) will result in a "spawn ENOENT" error.
If configuration is correct, you should see the Supabase MCP server listed as available in Claude Desktop.
How successful Windsurf config looks like

Cline

Cline also supports MCP servers through a similar JSON configuration. Follow these steps to set up the Supabase MCP server:
  1. Find the full path to the executable (this step is critical):Copy the full path that is returned (e.g., /Users/username/.local/bin/supabase-mcp-server).
  1. Configure the MCP server in Cline:
If configuration is correct, you should see a green indicator next to the Supabase MCP server in the Cline MCP Servers list, and a message confirming "supabase MCP server connected" at the bottom of the panel.
How successful configuration in Cline looks like

Troubleshooting

Here are some tips & tricks that might help you:
  • Debug installation - run supabase-mcp-server directly from the terminal to see if it works. If it doesn't, there might be an issue with the installation.
  • MCP Server configuration - if the above step works, it means the server is installed and configured correctly. As long as you provided the right command, IDE should be able to connect. Make sure to provide the right path to the server executable.
  • "No tools found" error - If you see "Client closed - no tools available" in Cursor despite the package being installed:
  • Environment variables - to connect to the right database, make sure you either set env variables in mcp_config.json or in .env file placed in a global config directory (~/.config/supabase-mcp/.env on macOS/Linux or %APPDATA%\supabase-mcp\.env on Windows).
  • Accessing logs - The MCP server writes detailed logs to a file:
If you are stuck or any of the instructions above are incorrect, please raise an issue.

MCP Inspector

A super useful tool to help debug MCP server issues is MCP Inspector. If you installed from source, you can run supabase-mcp-inspector from the project repo and it will run the inspector instance. Coupled with logs this will give you complete overview over what's happening in the server.
Running supabase-mcp-inspector, if installed from package, doesn't work properly - I will validate and fix in the coming release.

Feature Overview

Database query tools

Since v0.3+ server provides comprehensive database management capabilities with built-in safety controls:
  • SQL Query Execution: Execute PostgreSQL queries with risk assessment
  • SQL Parsing and Validation:
  • Automatic Migration Versioning:
  • Safety Controls:
  • Available Tools:

Management API tools

Since v0.3.0 server provides secure access to the Supabase Management API with built-in safety controls:
  • Available Tools:
  • Safety Controls:
Note: Management API tools only work with remote Supabase instances and are not compatible with local Supabase development setups.

Auth Admin tools

I was planning to add support for Python SDK methods to the MCP server. Upon consideration I decided to only add support for Auth admin methods as I often found myself manually creating test users which was prone to errors and time consuming. Now I can just ask Cursor to create a test user and it will be done seamlessly. Check out the full Auth Admin SDK method docs to know what it can do.
Since v0.3.6 server supports direct access to Supabase Auth Admin methods via Python SDK:
  • Includes the following tools:
  • Supported methods:

Why use Auth Admin SDK instead of raw SQL queries?

The Auth Admin SDK provides several key advantages over direct SQL manipulation:
  • Functionality: Enables operations not possible with SQL alone (invites, magic links, MFA)
  • Accuracy: More reliable then creating and executing raw SQL queries on auth schemas
  • Simplicity: Offers clear methods with proper validation and error handling

Logs & Analytics

The server provides access to Supabase logs and analytics data, making it easier to monitor and troubleshoot your applications:
  • Available Tool: retrieve_logs - Access logs from any Supabase service
  • Log Collections:
  • Features: Filter by time, search text, apply field filters, or use custom SQL queries
Simplifies debugging across your Supabase stack without switching between interfaces or writing complex queries.

Automatic Versioning of Database Changes

"With great power comes great responsibility." While execute_postgresql tool coupled with aptly named live_dangerously tool provide a powerful and simple way to manage your Supabase database, it also means that dropping a table or modifying one is one chat message away. In order to reduce the risk of irreversible changes, since v0.3.8 the server supports:
  • automatic creation of migration scripts for all write & destructive sql operations executed on the database
  • improved safety mode of query execution, in which all queries are categorized in:

Universal Safety Mode

Since v0.3.8 Safety Mode has been standardized across all services (database, API, SDK) using a universal safety manager. This provides consistent risk management and a unified interface for controlling safety settings across the entire MCP server.
All operations (SQL queries, API requests, SDK methods) are categorized into risk levels:
  • Low risk: Read-only operations that don't modify data or structure (SELECT queries, GET API requests)
  • Medium risk: Write operations that modify data but not structure (INSERT/UPDATE/DELETE, most POST/PUT API requests)
  • High risk: Destructive operations that modify database structure or could cause data loss (DROP/TRUNCATE, DELETE API endpoints)
  • Extreme risk: Operations with severe consequences that are blocked entirely (deleting projects)
Safety controls are applied based on risk level:
  • Low risk operations are always allowed
  • Medium risk operations require unsafe mode to be enabled
  • High risk operations require unsafe mode AND explicit confirmation
  • Extreme risk operations are never allowed

How confirmation flow works

Any high-risk operations (be it a postgresql or api request) will be blocked even in unsafe mode. Every high-risk operation is blocked You will have to confirm and approve every high-risk operation explicitly in order for it to be executed. Explicit approval is always required

Changelog

  • Simplified installation via package manager - (v0.2.0)
  • Support for different Supabase regions - (v0.2.2)
  • Programmatic access to Supabase management API with safety controls - (v0.3.0)
  • Read and read-write database SQL queries with safety controls - (v0.3.0)
  • Robust transaction handling for both direct and pooled connections - (v0.3.2)
  • Support methods and objects available in native Python SDK - (v0.3.6)
  • Stronger SQL query validation (v0.3.8)
  • Automatic versioning of database changes (v0.3.8)
  • Radically improved knowledge and tools of api spec (v0.3.8)
  • Improved consistency of migration-related tools for a more organized database vcs (v0.3.10)
  • Query MCP is released (v0.4.0)
For a more detailed roadmap, please see this discussion on GitHub.

Star History

![Star History Chart](https://api.star-history.com/svg?repos=alexander-zuev/supabase-mcp-server&type=Date)
Enjoy!

Query | MCP server for Supabase

More than 17k installs via pypi and close to 30k downloads on Smithery.ai in short, this was fun!Thanks to everyone who has been using this server for the past few months, and I hope it was useful for you. Since Supabase has released their own official MCP server, I've decided to no longer actively maintain this one. The official MCP server is as feature-rich, and many more features will be added in the future. Check it out!

Table of contents

Key features

  • Compatible with Cursor, Windsurf, Cline and other MCP clients supporting stdio protocol
  • Control read-only and read-write modes of SQL query execution
  • Runtime SQL query validation with risk level assessment
  • Three-tier safety system for SQL operations: safe, write, and destructive
  • Robust transaction handling for both direct and pooled database connections
  • Automatic versioning of database schema changes
  • Manage your Supabase projects with Supabase Management API
  • Manage users with Supabase Auth Admin methods via Python SDK
  • Pre-built tools to help Cursor & Windsurf work with MCP more effectively
  • Dead-simple install & setup via package manager (uv, pipx, etc.)

Getting Started

Prerequisites

Installing the server requires the following on your system:
  • Python 3.12+
If you plan to install via uv, ensure it's installed.

PostgreSQL Installation

PostgreSQL installation is no longer required for the MCP server itself, as it now uses asyncpg which doesn't depend on PostgreSQL development libraries.
However, you'll still need PostgreSQL if you're running a local Supabase instance:
MacOS
Windows
  • Ensure "PostgreSQL Server" and "Command Line Tools" are selected during installation

Step 1. Installation

Since v0.2.0 I introduced support for package installation. You can use your favorite Python package manager to install the server via:
pipx is recommended because it creates isolated environments for each package.
You can also install the server manually by cloning the repository and running pipx install -e . from the root directory.

Installing from source

If you would like to install from source, for example for local development:

Installing via Smithery.ai

You can find the full instructions on how to use Smithery.ai to connect to this MCP server here.

Step 2. Configuration

The Supabase MCP server requires configuration to connect to your Supabase database, access the Management API, and use the Auth Admin SDK. This section explains all available configuration options and how to set them up.
Important: Since v0.4 MCP server requires an API key which you can get for free at thequery.dev to use this MCP server.

Environment Variables

The server uses the following environment variables:
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
[object Object]
Note: The default values are configured for local Supabase development. For remote Supabase projects, you must provide your own values for SUPABASE_PROJECT_REF and SUPABASE_DB_PASSWORD.
CRITICAL CONFIGURATION NOTE: For remote Supabase projects, you MUST specify the correct region where your project is hosted using SUPABASE_REGION. If you encounter a "Tenant or user not found" error, this is almost certainly because your region setting doesn't match your project's actual region. You can find your project's region in the Supabase dashboard under Project Settings.

Connection Types

Database Connection
  • The server connects to your Supabase PostgreSQL database using the transaction pooler endpoint
  • Local development uses a direct connection to 127.0.0.1:54322
  • Remote projects use the format: postgresql://postgres.[project_ref]:[password]@aws-0-[region].pooler.supabase.com:6543/postgres
Important: Session pooling connections are not supported. The server exclusively uses transaction pooling for better compatibility with the MCP server architecture.
Management API Connection
  • Requires SUPABASE_ACCESS_TOKEN to be set
  • Connects to the Supabase Management API at https://api.supabase.com
  • Only works with remote Supabase projects (not local development)
Auth Admin SDK Connection
  • Requires SUPABASE_SERVICE_ROLE_KEY to be set
  • For local development, connects to http://127.0.0.1:54321
  • For remote projects, connects to https://[project_ref].supabase.co

Configuration Methods

The server looks for configuration in this order (highest to lowest priority):
  1. Environment Variables: Values set directly in your environment
  1. Local `.env` File: A .env file in your current working directory (only works when running from source)
  1. Global Config File:
  1. Default Settings: Local development defaults (if no other config is found)
Important: When using the package installed via pipx or uv, local .env files in your project directory are not detected. You must use either environment variables or the global config file.

Setting Up Configuration

Option 1: Client-Specific Configuration (Recommended)
Set environment variables directly in your MCP client configuration (see client-specific setup instructions in Step 3). Most MCP clients support this approach, which keeps your configuration with your client settings.
Option 2: Global Configuration
Create a global .env configuration file that will be used for all MCP server instances:
Add your configuration values to the file:
Option 3: Project-Specific Configuration (Source Installation Only)
If you're running the server from source (not via package), you can create a .env file in your project directory with the same format as above.

Finding Your Supabase Project Information

  • Project Reference: Found in your Supabase project URL: https://supabase.com/dashboard/project/<project-ref>
  • Database Password: Set during project creation or found in Project Settings Database
  • Service Role Key: Found in Project Settings API Project API keys

Supported Regions

The server supports all Supabase regions:
  • us-west-1 - West US (North California)
  • us-east-1 - East US (North Virginia) - default
  • us-east-2 - East US (Ohio)
  • ca-central-1 - Canada (Central)
  • eu-west-1 - West EU (Ireland)
  • eu-west-2 - West Europe (London)
  • eu-west-3 - West EU (Paris)
  • eu-central-1 - Central EU (Frankfurt)
  • eu-central-2 - Central Europe (Zurich)
  • eu-north-1 - North EU (Stockholm)
  • ap-south-1 - South Asia (Mumbai)
  • ap-southeast-1 - Southeast Asia (Singapore)
  • ap-northeast-1 - Northeast Asia (Tokyo)
  • ap-northeast-2 - Northeast Asia (Seoul)
  • ap-southeast-2 - Oceania (Sydney)
  • sa-east-1 - South America (S o Paulo)

Limitations

  • No Self-Hosted Support: The server only supports official Supabase.com hosted projects and local development
  • No Connection String Support: Custom connection strings are not supported
  • No Session Pooling: Only transaction pooling is supported for database connections
  • API and SDK Features: Management API and Auth Admin SDK features only work with remote Supabase projects, not local development

Step 3. Usage

In general, any MCP client that supports stdio protocol should work with this MCP server. This server was explicitly tested to work with:
  • Cursor
  • Windsurf
  • Cline
  • Claude Desktop
Additionally, you can also use smithery.ai to install this server a number of clients, including the ones above.
Follow the guides below to install this MCP server in your client.

Cursor

Go to Settings -> Features -> MCP Servers and add a new server with this configuration:
If configuration is correct, you should see a green dot indicator and the number of tools exposed by the server. How successful Cursor config looks like

Windsurf

Go to Cascade -> Click on the hammer icon -> Configure -> Fill in the configuration:
If configuration is correct, you should see green dot indicator and clickable supabase server in the list of available servers.
How successful Windsurf config looks like

Claude Desktop

Claude Desktop also supports MCP servers through a JSON configuration. Follow these steps to set up the Supabase MCP server:
  1. Find the full path to the executable (this step is critical):Copy the full path that is returned (e.g., /Users/username/.local/bin/supabase-mcp-server).
  1. Configure the MCP server in Claude Desktop:
Important: Unlike Windsurf and Cursor, Claude Desktop requires the full absolute path to the executable. Using just the command name (supabase-mcp-server) will result in a "spawn ENOENT" error.
If configuration is correct, you should see the Supabase MCP server listed as available in Claude Desktop.
How successful Windsurf config looks like

Cline

Cline also supports MCP servers through a similar JSON configuration. Follow these steps to set up the Supabase MCP server:
  1. Find the full path to the executable (this step is critical):Copy the full path that is returned (e.g., /Users/username/.local/bin/supabase-mcp-server).
  1. Configure the MCP server in Cline:
If configuration is correct, you should see a green indicator next to the Supabase MCP server in the Cline MCP Servers list, and a message confirming "supabase MCP server connected" at the bottom of the panel.
How successful configuration in Cline looks like

Troubleshooting

Here are some tips & tricks that might help you:
  • Debug installation - run supabase-mcp-server directly from the terminal to see if it works. If it doesn't, there might be an issue with the installation.
  • MCP Server configuration - if the above step works, it means the server is installed and configured correctly. As long as you provided the right command, IDE should be able to connect. Make sure to provide the right path to the server executable.
  • "No tools found" error - If you see "Client closed - no tools available" in Cursor despite the package being installed:
  • Environment variables - to connect to the right database, make sure you either set env variables in mcp_config.json or in .env file placed in a global config directory (~/.config/supabase-mcp/.env on macOS/Linux or %APPDATA%\supabase-mcp\.env on Windows).
  • Accessing logs - The MCP server writes detailed logs to a file:
If you are stuck or any of the instructions above are incorrect, please raise an issue.

MCP Inspector

A super useful tool to help debug MCP server issues is MCP Inspector. If you installed from source, you can run supabase-mcp-inspector from the project repo and it will run the inspector instance. Coupled with logs this will give you complete overview over what's happening in the server.
Running supabase-mcp-inspector, if installed from package, doesn't work properly - I will validate and fix in the coming release.

Feature Overview

Database query tools

Since v0.3+ server provides comprehensive database management capabilities with built-in safety controls:
  • SQL Query Execution: Execute PostgreSQL queries with risk assessment
  • SQL Parsing and Validation:
  • Automatic Migration Versioning:
  • Safety Controls:
  • Available Tools:

Management API tools

Since v0.3.0 server provides secure access to the Supabase Management API with built-in safety controls:
  • Available Tools:
  • Safety Controls:
Note: Management API tools only work with remote Supabase instances and are not compatible with local Supabase development setups.

Auth Admin tools

I was planning to add support for Python SDK methods to the MCP server. Upon consideration I decided to only add support for Auth admin methods as I often found myself manually creating test users which was prone to errors and time consuming. Now I can just ask Cursor to create a test user and it will be done seamlessly. Check out the full Auth Admin SDK method docs to know what it can do.
Since v0.3.6 server supports direct access to Supabase Auth Admin methods via Python SDK:
  • Includes the following tools:
  • Supported methods:

Why use Auth Admin SDK instead of raw SQL queries?

The Auth Admin SDK provides several key advantages over direct SQL manipulation:
  • Functionality: Enables operations not possible with SQL alone (invites, magic links, MFA)
  • Accuracy: More reliable then creating and executing raw SQL queries on auth schemas
  • Simplicity: Offers clear methods with proper validation and error handling

Logs & Analytics

The server provides access to Supabase logs and analytics data, making it easier to monitor and troubleshoot your applications:
  • Available Tool: retrieve_logs - Access logs from any Supabase service
  • Log Collections:
  • Features: Filter by time, search text, apply field filters, or use custom SQL queries
Simplifies debugging across your Supabase stack without switching between interfaces or writing complex queries.

Automatic Versioning of Database Changes

"With great power comes great responsibility." While execute_postgresql tool coupled with aptly named live_dangerously tool provide a powerful and simple way to manage your Supabase database, it also means that dropping a table or modifying one is one chat message away. In order to reduce the risk of irreversible changes, since v0.3.8 the server supports:
  • automatic creation of migration scripts for all write & destructive sql operations executed on the database
  • improved safety mode of query execution, in which all queries are categorized in:

Universal Safety Mode

Since v0.3.8 Safety Mode has been standardized across all services (database, API, SDK) using a universal safety manager. This provides consistent risk management and a unified interface for controlling safety settings across the entire MCP server.
All operations (SQL queries, API requests, SDK methods) are categorized into risk levels:
  • Low risk: Read-only operations that don't modify data or structure (SELECT queries, GET API requests)
  • Medium risk: Write operations that modify data but not structure (INSERT/UPDATE/DELETE, most POST/PUT API requests)
  • High risk: Destructive operations that modify database structure or could cause data loss (DROP/TRUNCATE, DELETE API endpoints)
  • Extreme risk: Operations with severe consequences that are blocked entirely (deleting projects)
Safety controls are applied based on risk level:
  • Low risk operations are always allowed
  • Medium risk operations require unsafe mode to be enabled
  • High risk operations require unsafe mode AND explicit confirmation
  • Extreme risk operations are never allowed

How confirmation flow works

Any high-risk operations (be it a postgresql or api request) will be blocked even in unsafe mode. Every high-risk operation is blocked You will have to confirm and approve every high-risk operation explicitly in order for it to be executed. Explicit approval is always required

Changelog

  • Simplified installation via package manager - (v0.2.0)
  • Support for different Supabase regions - (v0.2.2)
  • Programmatic access to Supabase management API with safety controls - (v0.3.0)
  • Read and read-write database SQL queries with safety controls - (v0.3.0)
  • Robust transaction handling for both direct and pooled connections - (v0.3.2)
  • Support methods and objects available in native Python SDK - (v0.3.6)
  • Stronger SQL query validation (v0.3.8)
  • Automatic versioning of database changes (v0.3.8)
  • Radically improved knowledge and tools of api spec (v0.3.8)
  • Improved consistency of migration-related tools for a more organized database vcs (v0.3.10)
  • Query MCP is released (v0.4.0)
For a more detailed roadmap, please see this discussion on GitHub.

Star History

![Star History Chart](https://api.star-history.com/svg?repos=alexander-zuev/supabase-mcp-server&type=Date)
Enjoy!

Related servers

magicslides
magicslides logo

MagicSlides MCP Server

A server that implements the Model Context Protocol (MCP) to generate PowerPoint presentations from text, YouTube videos, or structured JSON data.

A server that implements the Model Context Protocol (MCP) to generate PowerPoint presentations from text, YouTube videos, or structured JSON data.

Zerodha
Zerodha logo

Zerodha MCP Integration

Mcp server to connect with zerodha's kite trade apis

Mcp server to connect with zerodha's kite trade apis

tddt
tddt logo

Stock Info (AKShare)

Provides real-time financial market data from Chinese and global markets through AKShare API integration for traders and...

Provides real-time financial market data from Chinese and global markets through AKShare API integration for traders and...

Aaron Allsbury
Aaron Allsbury logo

QuickBooks Time

Integrates with QuickBooks Time API to provide unified access for managing timesheets, users, projects, and generating r...

Integrates with QuickBooks Time API to provide unified access for managing timesheets, users, projects, and generating r...