📋 Copy MCP Install CLI { } Inspect JSON API Ground-Truth Source ↗

⚡ 1-Click Agent & Developer Install

Zero Auth · Ready for Grok Bot, Claude Code & Cursor

### Server Architecture & Capability Summary **Supabase Official MCP — Postgres Schema, RLS & Edge Functions** (`supabase-mcp`) is a verified **STDIO** Model Context Protocol (MCP) server curated with **@supabase** for Grok Bot, Claude Code, and Cursor. Official Supabase MCP server: execute read/write SQL migrations, inspect Row-Level Security (RLS) policies, query logs, and deploy Deno Edge Functions. ### 1-Click CLI Installation Run the command below to register `supabase-mcp` in Claude Code or your MCP client: ```bash claude mcp add supabase -- npx -y @supabase/mcp-server-supabase@latest --access-token=$SUPABASE_ACCESS_TOKEN ``` ### Standard `mcpServers` JSON Configuration (`.cursor/mcp.json` / `claude_desktop_config.json`) ```json { "mcpServers": { "supabase-mcp": { "command": "access-token=$SUPABASE_ACCESS_TOKEN", "args": [], "env": { "SUPABASE_ACCESS_TOKEN": "sbp_your_personal_access_token" } } } } ``` ### Exposed MCP Tools - `execute_sql` — Deterministic JSON-RPC 2.0 tool exposed by `supabase-mcp`. - `apply_migration` — Deterministic JSON-RPC 2.0 tool exposed by `supabase-mcp`. - `list_tables_and_rls` — Deterministic JSON-RPC 2.0 tool exposed by `supabase-mcp`. - `get_project_logs` — Deterministic JSON-RPC 2.0 tool exposed by `supabase-mcp`. - `generate_typescript_types` — Deterministic JSON-RPC 2.0 tool exposed by `supabase-mcp`. ### Authentication & Environment Variables - **Transport Protocol:** `stdio` - **Auth Mechanism:** `api_key` - `SUPABASE_ACCESS_TOKEN`: `sbp_your_personal_access_token` - **Documentation / Source:** [https://github.com/supabase-community/supabase-mcp](https://github.com/supabase-community/supabase-mcp)

Tags: #supabase-mcp#stdio#engineering#mcp-server#execute-sql#apply-migration

View All 3 Items by @supabase →

skill · ⚡ 87

Supabase Postgres Row-Level Security (RLS) Audit Playbook

Audit every table in a Supabase `public` schema for missing RLS policies, insecure `USING (true)` clauses, unindexed foreign keys, and leaked `service_role

use case · ⚡ 90

Nightly Staging vs Production Postgres Schema & RLS Drift Auditor

Compares table definitions, indexes, and Row-Level Security policies between staging and production every night—alerting on unmigrated drift or exposed tab