TL;DR
Supabase is a Databases MCP server that lets Claude Code, Cursor, Windsurf and any MCP-compatible AI agent database, auth, storage via Supabase. Install in 1 minute with mcpizy install supabase-mcp.
Supabase
Install verified 10 toolsDatabases
Database, auth, storage via Supabase
Official homepageRepo audit: 94/100 — actively maintained, documented and licensed
Scored on licence, adoption, maintenance and documentation of supabase-community/supabase-mcp. We show the grade whether it flatters the server or not.
last commit yesterday · 2,871 stars · Apache-2.0 licence · 106 open issues
Read the full audit on CheckMCPInstall Supabase
mcpizy install supabase-mcpnpx -y supabase-mcpTools exposed
10 tools availablelist_tablesList all tables in one or more schemas of the project
list_tablesList all tables in one or more schemas of the project
Inputs
schemasstring[]optional
list_extensionsList all Postgres extensions installed in the database
list_extensionsList all Postgres extensions installed in the database
list_migrationsList all migrations applied to the project
list_migrationsList all migrations applied to the project
apply_migrationApply a SQL migration (DDL). Use this for schema changes
apply_migrationApply a SQL migration (DDL). Use this for schema changes
Inputs
namestringrequiredquerystringrequired
execute_sqlExecute raw SQL (DML/queries)
execute_sqlExecute raw SQL (DML/queries)
Inputs
querystringrequired
get_logsFetch logs for a service (api, postgres, auth, storage, realtime)
get_logsFetch logs for a service (api, postgres, auth, storage, realtime)
Inputs
servicestringrequired
get_advisorsGet security and performance advisors for the project
get_advisorsGet security and performance advisors for the project
Inputs
typestringrequired
list_edge_functionsList all Edge Functions in the project
list_edge_functionsList all Edge Functions in the project
deploy_edge_functionDeploy a new or updated Edge Function
deploy_edge_functionDeploy a new or updated Edge Function
Inputs
namestringrequiredfilesobject[]required
generate_typescript_typesGenerate TypeScript types from the current schema
generate_typescript_typesGenerate TypeScript types from the current schema
Configuration
Works identically across clients. Only the config file path differs.
Claude Code~/.claude.json
~/.claude.json{
"mcpServers": {
"supabase-mcp": {
"command": "npx",
"args": [
"-y",
"@supabase/mcp-server-supabase@latest",
"--access-token",
"${SUPABASE_ACCESS_TOKEN}"
],
"env": {
"SUPABASE_ACCESS_TOKEN": "sbp_..."
}
}
}
}Cursor.cursor/mcp.json
.cursor/mcp.json{
"mcpServers": {
"supabase-mcp": {
"command": "npx",
"args": [
"-y",
"@supabase/mcp-server-supabase@latest",
"--access-token",
"${SUPABASE_ACCESS_TOKEN}"
],
"env": {
"SUPABASE_ACCESS_TOKEN": "sbp_..."
}
}
}
}Windsurf~/.codeium/windsurf/mcp_config.json
~/.codeium/windsurf/mcp_config.json{
"mcpServers": {
"supabase-mcp": {
"command": "npx",
"args": [
"-y",
"@supabase/mcp-server-supabase@latest",
"--access-token",
"${SUPABASE_ACCESS_TOKEN}"
],
"env": {
"SUPABASE_ACCESS_TOKEN": "sbp_..."
}
}
}
}Authentication setup
What you can do with Supabase MCP
Paste any of these prompts into Claude Code, Cursor or another MCP-compatible client.
“List every table in the public schema and summarise the columns of `users`”
Uses: list_tables
“Create a new `invoices` table with columns id, user_id, amount, status — generate the migration”
Uses: apply_migration
“Run `SELECT COUNT(*) FROM auth.users` and show me the result”
Uses: execute_sql
“Deploy an Edge Function named `hello` that returns `Hello, world`”
Uses: deploy_edge_function
“Audit my database for security issues and generate fresh TypeScript types”
Uses: get_advisors, generate_typescript_types
Why Supabase MCP matters
Supabase MCP turns the Supabase dashboard into an agent-callable surface. Instead of clicking through the SQL editor or copying schemas into prompts, your AI runs `list_tables`, `apply_migration`, `execute_sql`, `deploy_edge_function` directly — same primitives, same auth model. The server uses a personal access token (not a project anon key), which means anything you can do as the project owner, the agent can do too. That power is the point and the risk.
We use Supabase MCP for three things daily. First, schema reconciliation: "look at my Postgres schema, compare to the Prisma model in `/db/schema.prisma`, and generate the migration." The agent reads both, drafts the SQL, and applies it after we approve. Second, on-call: "logs from the auth service in the last hour — anything 5xx?" The agent calls `get_logs` and `get_advisors` and surfaces the actual rows. Third, type generation: `generate_typescript_types` regenerates the `Database` type after every migration so the front-end stays in sync.
The honest comparison: Supabase MCP is far more capable than the bare Postgres MCP because it covers the whole platform (auth, storage, realtime, edge functions, advisors). If you're only using Postgres, the lower-surface postgres MCP is faster and has a smaller blast radius. If you're using Supabase end-to-end and want one tool that mirrors the dashboard, this is the right server. Token cost on schema operations is moderate (~1-3k tokens per table inspected); migration generation can spike to 5-10k on complex schemas.
Common pitfalls
The personal access token has full project rights — there is no read-only mode. Treat the MCP exactly like giving someone your Supabase dashboard password. For production, scope a separate project for the agent or run in a managed sandbox.
`apply_migration` and `execute_sql` are different code paths: migrations get versioned and tracked; raw SQL doesn't. If the agent runs DDL via `execute_sql`, the migration history will drift and `db diff` will misbehave. Tell the agent explicitly which to use.
Edge Function deploys via MCP skip the local CLI's import map resolution. If your function imports relative URLs or non-jsr deps, deploy will silently strip them. Test with `supabase functions serve` first, then deploy via MCP.
The advisor tool returns warnings as JSON — agents tend to flag every advisor item as critical. Ask for explicit severity filtering ("only show ERROR-level advisors") to avoid noise.
How Supabase MCP compares
Honest pros/cons against the closest databases MCP servers.
| Server | Strengths | Trade-offs |
|---|---|---|
| Postgres MCP | Smaller blast radius, faster, works with any Postgres | No auth/storage/edge-functions — only DB |
| Neon MCP | Branching primitives (database branches), serverless Postgres | No auth/storage layers — pure DB platform |
| PlanetScale MCP | MySQL with branching, schema diff workflow | MySQL only, no row-level security primitive |
Works with
More Databases MCPs
Alternatives to Supabase
If Supabase doesn't fit your stack, these Databases MCP servers solve similar problems.
Frequently asked questions
What is the Supabase MCP server?
Supabase is listed as an Databases Model Context Protocol server whose documented purpose is to let an MCP-compatible agent database, auth, storage via Supabase. Client support, permissions and authentication remain specific to the upstream project.
How do I install Supabase MCP with Claude Code?
The fastest way is the MCPizy CLI: run `mcpizy install supabase-mcp` and MCPizy will add the server to your `.claude.json` automatically. You can also install it manually by adding an entry under `mcpServers` in `.claude.json` with the command `npx -y supabase-mcp` and restarting Claude Code.
Does MCPizy charge to view or install Supabase MCP?
No. Reading this profile and copying its install guidance is free. Upstream software, API, account or usage costs are separate, and licence coverage should be checked from the linked source when available.
Does Supabase MCP work with Cursor and Windsurf?
The MCP standard is supported by those clients, but a specific server can still have client-specific setup or transport limits. Use the configuration shown on this page when present and verify the upstream instructions before installation.
What can I do with Supabase MCP?
Its documented purpose is to let an MCP-compatible agent database, auth, storage via Supabase. The exact tools, permissions and write capabilities depend on the server version and configuration shown by the upstream project.
Compare before you commit
Put this server beside an alternative, or return to the full evidence directory.
Compare MCP serversBack to directory