VendorSupabase
Transportstdio

Editorial trust

Authentication yes
Maintenance Active · 2026-08
Known CVEs 0
Transport stdio

A signal from public data, not an audit — how scoring works.

Community rating

—

No community reviews yet

Be the first to say whether this server is safe to trust in production.

Write a review

Why this grade

Community-maintained with Supabase involvement. A personal access token grants broad project control, so scope it to a single project and prefer the --read-only flag. Prompt-injection through row data reaching the model is the main residual risk for any DB server.

How to connect

npx -y @supabase/mcp-server-supabase --access-token <token>

Community reviews

No published community reviews yet.

Write a review

One structured review per person. We email you a confirmation link; nothing is published until you confirm it and an editor approves it. Your email address is never shown.

Overall rating
Would you trust this server in production?
Would you recommend it to another team?

Want this integration built and hardened for you?

We build custom, security-reviewed MCP servers and review existing ones.

Start a conversation