Supabase Mcp Server
Query MCP enables end-to-end management of Supabase via chat interface: read & write query executions, management API support, automatic migration versioning, access to logs and much more.
StaleNot tested
79No CVEsstale4 toolsApache-2.0
Quick Install
{
"mcpServers": {
"supabase": {
"env": {
"QUERY_API_KEY": "your-api-key",
"SUPABASE_REGION": "us-east-1",
"SUPABASE_DB_PASSWORD": "your-db-password",
"SUPABASE_PROJECT_REF": "your-project-ref",
"SUPABASE_ACCESS_TOKEN": "your-access-token",
"SUPABASE_SERVICE_ROLE_KEY": "your-service-role-key"
},
"command": "/Users/username/.local/bin/supabase-mcp-server"
}
}
}Should you use this server?
Query MCP enables end-to-end management of Supabase via chat interface: read & write query executions, management API support, automatic migration versioning, access to logs and much more.
✓
Is it safe?
No known CVEs for supabase-mcp-server.
No authentication — any process on your machine can connect.
Apache-2.0. View license →
~
Is it maintained?
Last commit 190 days ago. 816 stars.
i
Will it work with my client?
Transport: stdio, sse, http. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.
A
Context cost
4 tools. ~200 tokens (0.1% of 200K).
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx supabase-mcp-server 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Tools (4)
execute_queryExecute SQL queries against Supabase database with safety controls and risk assessment
manage_schemaManage schema changes with automatic versioning
call_management_apiCall the Supabase Management API to manage projects
auth_admin_methodsManage users with Supabase Auth Admin SDK
Help improve this page
This server is missing a description.If you've used it, help the community.
Add informationScore Breakdown
Security
29/30No known vulnerabilities.
✓
✗
Tool safety — Found: code execution
✓
Tool poisoning — No poisoning indicators detected
✓
Injection vectors — No injection vectors detected
○
Tool stability — First scan — baseline recorded
○
Dependency health — found on deps.dev
✓
License — License: Apache-2.0
○
Authentication