Supabase MCP Server

✓ verified

Manage Supabase projects, run SQL, and inspect schemas.

Don't have ToolPiper? We'll take you to the download.

Open repository →

Publisher

Supabase

License

Apache-2.0

Transport

Local subprocess

Tools

5

What this server does

Supabase's official server gives the assistant access to your Postgres-backed projects: list projects, run SQL, inspect tables and schemas, read logs, and (in write mode) apply migrations and manage config. The configuration here launches with --read-only, which is the recommended default: the model can explore and query but cannot change your data or schema. Drop the flag when you specifically want the assistant to evolve a schema or seed data, ideally against a development project first.

Tools included

  • list_projects

    List your Supabase projects.

  • execute_sql

    Run a SQL query against a project's database.

  • list_tables

    List tables in a project.

  • get_logs

    Read recent service logs.

  • apply_migration

    Apply a SQL migration (write mode only).

The authoritative list comes from the server's tools/list at runtime. This catalog entry may lag the upstream until the next ToolPiper release.

Install in ToolPiper

ToolPiper handles the JSON configuration. Click Install, fill in any required tokens, and the server is ready in your chat.

Don't have ToolPiper? We'll take you to the download.

Install in another client

Install in another MCP client (Claude Desktop, Cursor, Continue, Cline)

Add this to ~/Library/Application Support/Claude/claude_desktop_config.json.

{
  "mcpServers": {
    "supabase": {
      "command": "npx",
      "args": [
        "-y",
        "@supabase/mcp-server-supabase@latest",
        "--read-only",
        "--access-token",
        "${SUPABASE_ACCESS_TOKEN}"
      ]
    }
  }
}

Example prompts

  • "List my Supabase projects and the table count in each."

  • "Query the production project for users created in the last week."

  • "Show me the schema of the orders table and any foreign keys."

Security notes

The personal access token controls your Supabase account across projects, so treat it as a high-value credential and rotate it at supabase.com/dashboard/account/tokens if it leaks. The --read-only flag in the default config blocks writes; remove it only deliberately, and prefer a development project when you do. Logs and tables can contain PII.

Related tools