Supabase MCP

Supabase's own MCP server connects your agent to your Supabase projects. Once it's connected, your agent can manage tables, write and apply migrations, query data, check logs and advisors, and deploy Edge Functions for you, and search Supabase's docs as it works. What you can do with it - List tables, extensions and migrations, apply migrations and run SQL - Query your project's logs and get its security and performance advisors - Get a project's API URL and publishable keys, and generate TypeScript types from your schema - List, read and deploy Edge Functions - List, create, pause and restore projects, and look up organizations - Create, merge, reset and rebase development branches (experimental, on paid plans) - Search the Supabase documentation How it connects Supabase hosts it at https://mcp.supabase.com/mcp. The first time your agent uses it, a browser window opens so you can sign in to Supabase and choose the organization it can reach; you don't need a personal access token. For CI, where a browser sign-in isn't possible, pass a personal access token as a bearer token instead. If you run Supabase locally with the Supabase CLI, the server is at http://localhost:54321/mcp, with fewer tools and no OAuth. Choose what it can do Add options to the address. read_only=true runs every query as a read-only Postgres user, project_ref=<your project ref> limits it to one project (and turns off the account tools), and features=database,docs keeps only the tool groups you name. The groups are docs, account, database, debugging, development, functions, branching and storage; storage is off unless you add it. For example: https://mcp.supabase.com/mcp?project_ref=<your project ref>&read_only=true Good to know Supabase recommends using it as a developer tool, not giving it to your customers, and keeping production data out of reach: scope it to one project, turn on read-only mode, work on a development branch and review each tool call before it runs. Where your agent supports it, the server asks you to confirm the cost before it creates a project or branch, and to confirm SQL it detects as destructive.

• “What tables are there in the database?”

  1. list_tables
  Copy

• “Add a plan column to profiles with a default of 'free'.”

  1. apply_migration
  Copy

• “Check my project for security and performance issues.”

  1. get_advisors
  Copy

• “Look through the logs for errors from the last hour.”

  1. query_logs

No changes at all? Connect to https://mcp.supabase.com/mcp?read_only=true instead: it only ever offers the tools that read.