Build my server

Directory / Databases & Data Stores

Supabase MCP Server

Official hosted Supabase server to manage projects, run SQL, and inspect schema.

Verdict: Supabase MCP Server is graded A (strong public trust signals) in TrustedMCP's assessment from public signals, last updated 2 Nov 2026. It is at full marks on 3 of 4 checks (upkeep, known bugs and connection) and loses points on login. Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.

Grade A Login: login required, broad accessUpkeep: actively maintainedKnown bugs: 0 openConnection: safe for how it connects

3 of 4 checks at full marks · How we check

Source Docs Setup & security guide
VendorSupabase
CategoryDatabases & Data Stores
Connects overhttp, stdio

Our grade: 4 checks

Login Login required, broad access
Upkeep Active · 2026-10
Known bugs 0 open
Connection http, stdio

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

4.4 5 reviews
100% would trust it in production
  • 5 2
  • 4 3
  • 3 0
  • 2 0
  • 1 0

Trust in production

  • Trust it - 100%
  • With caveats - 0%
  • Wouldn't - 0%

100% would recommend this server

How reviewers scored it

  • Setup & docs 4.4
  • Auth experience 4.2
  • Reliability 4.0
  • Maintainer responsiveness 4.2

Why it got an A

Now in the official Supabase org, hosted over HTTPS with OAuth 2.1 sign-in, very active and with no advisories. Biggest deduction: the OAuth grant covers a whole organization with all scopes, and project scoping and read-only mode are off unless you add ?project_ref= and ?read_only=true to the URL. Without them, an instruction injected through row data can reach every project you authorized.

How to connect

// .cursor/mcp.json (or ~/.cursor/mcp.json for all projects)
{
  "mcpServers": {
    "supabase": {
      "url": "https://mcp.supabase.com/mcp"
    }
  }
}

Is Supabase MCP Server safe?

Is Supabase MCP Server safe to use?

Supabase MCP Server grades A (strong public trust signals). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.

Does Supabase MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does Supabase MCP Server support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Alternatives in Databases & Data Stores

Compare all Databases & Data Stores MCP servers

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade A

Markdown

[![TrustedMCP grade A](https://trustedmcp.io/badge/supabase-mcp-server.svg)](https://trustedmcp.io/servers/supabase-mcp-server)

HTML

<a href="https://trustedmcp.io/servers/supabase-mcp-server"><img src="https://trustedmcp.io/badge/supabase-mcp-server.svg" alt="TrustedMCP grade A" height="80"></a>

Community reviews

Lucas Silva Eng lead, fintech
Trusts in production Recommends

Our team uses it every day

Tried it on a side project first, then rolled it out at work. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. I gave it a database user that can only read the tables it needs. Auth is handled properly, and revoking access later was one click. Would recommend without hesitation.

Used for Prototyping queries before writing code

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5
Leah Cohen CTO, early-stage startup
Trusts in production Recommends

Good defaults, good docs

Of the Supabase integrations I tried, this one is the most predictable. I like that access goes through a proper sign-in instead of a long-lived secret on disk. You can tell it is actively maintained, the rough edges keep getting fixed.

Used for Incident investigation

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Isabel Costa Backend engineer
Trusts in production Recommends

Easy win for our agent setup

Clear tool names, sensible outputs, very few surprises. The scope options are worth reading carefully, the defaults are broader than I wanted. Good choice if you need Supabase in your agent.

Used for Checking data quality after imports

  • Setup & docs 3/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5
Andre Dubois Full-stack developer
Trusts in production Recommends

Better than the DIY script it replaced

I use this almost daily. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Turned on read-only mode on day one, highly recommend doing the same. Happy to run it in production.

Used for Read-only analytics questions

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Oscar Lund Developer, healthtech
Trusts in production Recommends

Does what it says, no drama

Set this up for our team after comparing a few options. Filed an issue and got a reply within two days.

Used for Answering support questions from the database

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you