Supabase MCP Server

Run SQL queries and manage Supabase projects directly from your AI agent interface.

Data last scanned yesterday · Reviewed today

40 3 dangerous tools13 tools★ 830PythonApache-2.0

Overview

This MCP server provides a bridge to the Supabase ecosystem, enabling users to execute SQL queries, perform schema changes, and interact with the Supabase Management API. It includes a three-tier safety system for SQL operations, categorizing queries into safe, write, and destructive levels to manage execution risks.

Our verdict

With a high-risk security score of 40/100, this project is community-maintained and has not been editorially reviewed. Users should note that the author has officially deprecated this server in favor of the official Supabase community-maintained MCP alternative. Given the lack of active maintenance and external audit, this tool is recommended only for legacy workflows or evaluation purposes.

Supports fine-grained SQL safety tiers for query execution
Zero direct dependencies reduce the supply chain attack surface
Provides automated versioning for database schema modifications
Licensed under the permissive Apache-2.0 open-source license

Project is officially deprecated by the author
High security risk due to lack of editorial review
Single contributor maintenance creates high bus-factor risk
Authentication and read-only mode security remain unverified

Tools

Tool	Description	Risk
get_schemas	Lists schemas with sizes and table counts	low
get_tables	Lists tables, foreign tables, and views with metadata	low
get_table_schema	Gets detailed table structure (columns, keys, relationships)	low
execute_postgresql	Executes SQL statements against your database	high
confirm_destructive_operation	Executes high-risk operations after confirmation	high
retrieve_migrations	Gets migrations with filtering and pagination options	low
live_dangerously	Toggles between safe and unsafe modes	medium
send_management_api_request	Sends arbitrary requests to Supabase Management API with auto-injection of project ref	high
get_management_api_spec	Gets the enriched API specification with safety information	low
get_management_api_safety_rules	Gets all safety rules with human-readable explanations	low

Compatibility

Client	Local	Docker	Remote	Read-only
Claude Desktop
Cursor
VS Code
Windsurf
ChatGPT

Frequently asked questions

›Is this server still being actively maintained?

No, the author has decided to stop actively maintaining this project in favor of the official Supabase MCP server.

›What are the system requirements to run the server?

You need Python 3.12 or higher installed on your system.

›Are there any required API keys to use the server?

Yes, you are required to provide an API key from thequery.dev to use the server.

›Do I need to install PostgreSQL to run the server?

The server itself does not require PostgreSQL development libraries, but you still need PostgreSQL if you are running a local Supabase instance.

›Which MCP clients are compatible with this server?

The server is compatible with Cursor, Windsurf, Cline, and any other MCP clients that support the stdio protocol.

›What safety mechanisms are included for SQL operations?

The server features a three-tier safety system consisting of safe, write, and destructive levels, along with runtime SQL query validation and risk assessment.