Query MCP is an open-source MCP server that lets your IDE safely run SQL, manage schema changes, call the Supabase Management API, and use Auth Admin SDK — all with built-in safety controls. Getting started • Feature overview • Troubleshooting • - 💻 Compatible with Cursor, Windsurf, Cline and other MCP clients supporting stdio protocol - 🔐 Control read-only and read-write modes of SQL query exec
Add this skill
npx mdskills install alexander-zuev/supabase-mcp-serverWell-documented MCP server for Supabase with comprehensive setup instructions and safety controls
1# Query | MCP server for Supabase23> 🌅 More than 17k installs via pypi and close to 30k downloads on Smithery.ai — in short, this was fun! 🥳4> Thanks to everyone who has been using this server for the past few months, and I hope it was useful for you.5> Since Supabase has released their own [official MCP server](https://github.com/supabase-community/supabase-mcp),6> I've decided to no longer actively maintain this one. The official MCP server is as feature-rich, and many more7> features will be added in the future. Check it out!8910<p class="center-text">11 <strong>Query MCP is an open-source MCP server that lets your IDE safely run SQL, manage schema changes, call the Supabase Management API, and use Auth Admin SDK — all with built-in safety controls.</strong>12</p>131415<p class="center-text">16 <a href="https://pypi.org/project/supabase-mcp-server/"><img src="https://img.shields.io/pypi/v/supabase-mcp-server.svg" alt="PyPI version" /></a>17 <a href="https://github.com/alexander-zuev/supabase-mcp-server/actions"><img src="https://github.com/alexander-zuev/supabase-mcp-server/workflows/CI/badge.svg" alt="CI Status" /></a>18 <a href="https://codecov.io/gh/alexander-zuev/supabase-mcp-server"><img src="https://codecov.io/gh/alexander-zuev/supabase-mcp-server/branch/main/graph/badge.svg" alt="Code Coverage" /></a>19 <a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.12%2B-blue.svg" alt="Python 3.12+" /></a>20 <a href="https://github.com/astral-sh/uv"><img src="https://img.shields.io/badge/uv-package%20manager-blueviolet" alt="uv package manager" /></a>21 <a href="https://pepy.tech/project/supabase-mcp-server"><img src="https://static.pepy.tech/badge/supabase-mcp-server" alt="PyPI Downloads" /></a>22 <a href="https://smithery.ai/server/@alexander-zuev/supabase-mcp-server"><img src="https://smithery.ai/badge/@alexander-zuev/supabase-mcp-server" alt="Smithery.ai Downloads" /></a>23 <a href="https://modelcontextprotocol.io/introduction"><img src="https://img.shields.io/badge/MCP-Server-orange" alt="MCP Server" /></a>24 <a href="LICENSE"><img src="https://img.shields.io/badge/license-Apache%202.0-blue.svg" alt="License" /></a>25</p>2627## Table of contents2829<p class="center-text">30 <a href="#getting-started">Getting started</a> •31 <a href="#feature-overview">Feature overview</a> •32 <a href="#troubleshooting">Troubleshooting</a> •33 <a href="#changelog">Changelog</a>34</p>3536## ✨ Key features37- 💻 Compatible with Cursor, Windsurf, Cline and other MCP clients supporting `stdio` protocol38- 🔐 Control read-only and read-write modes of SQL query execution39- 🔍 Runtime SQL query validation with risk level assessment40- 🛡️ Three-tier safety system for SQL operations: safe, write, and destructive41- 🔄 Robust transaction handling for both direct and pooled database connections42- 📝 Automatic versioning of database schema changes43- 💻 Manage your Supabase projects with Supabase Management API44- 🧑💻 Manage users with Supabase Auth Admin methods via Python SDK45- 🔨 Pre-built tools to help Cursor & Windsurf work with MCP more effectively46- 📦 Dead-simple install & setup via package manager (uv, pipx, etc.)474849## Getting Started5051### Prerequisites52Installing the server requires the following on your system:53- Python 3.12+5455If you plan to install via `uv`, ensure it's [installed](https://docs.astral.sh/uv/getting-started/installation/#__tabbed_1_1).5657### PostgreSQL Installation58PostgreSQL installation is no longer required for the MCP server itself, as it now uses asyncpg which doesn't depend on PostgreSQL development libraries.5960However, you'll still need PostgreSQL if you're running a local Supabase instance:6162**MacOS**63```bash64brew install postgresql@1665```6667**Windows**68 - Download and install PostgreSQL 16+ from https://www.postgresql.org/download/windows/69 - Ensure "PostgreSQL Server" and "Command Line Tools" are selected during installation7071### Step 1. Installation7273Since v0.2.0 I introduced support for package installation. You can use your favorite Python package manager to install the server via:7475```bash76# if pipx is installed (recommended)77pipx install supabase-mcp-server7879# if uv is installed80uv pip install supabase-mcp-server81```8283`pipx` is recommended because it creates isolated environments for each package.8485You can also install the server manually by cloning the repository and running `pipx install -e .` from the root directory.8687#### Installing from source88If you would like to install from source, for example for local development:89```bash90uv venv91# On Mac92source .venv/bin/activate93# On Windows94.venv\Scripts\activate95# Install package in editable mode96uv pip install -e .97```9899#### Installing via Smithery.ai100101You can find the full instructions on how to use Smithery.ai to connect to this MCP server [here](https://smithery.ai/server/@alexander-zuev/supabase-mcp-server).102103104### Step 2. Configuration105106The Supabase MCP server requires configuration to connect to your Supabase database, access the Management API, and use the Auth Admin SDK. This section explains all available configuration options and how to set them up.107108> 🔑 **Important**: Since v0.4 MCP server requires an API key which you can get for free at [thequery.dev](https://thequery.dev) to use this MCP server.109110#### Environment Variables111112The server uses the following environment variables:113114| Variable | Required | Default | Description |115|----------|----------|---------|-------------|116| `SUPABASE_PROJECT_REF` | Yes | `127.0.0.1:54322` | Your Supabase project reference ID (or local host:port) |117| `SUPABASE_DB_PASSWORD` | Yes | `postgres` | Your database password |118| `SUPABASE_REGION` | Yes* | `us-east-1` | AWS region where your Supabase project is hosted |119| `SUPABASE_ACCESS_TOKEN` | No | None | Personal access token for Supabase Management API |120| `SUPABASE_SERVICE_ROLE_KEY` | No | None | Service role key for Auth Admin SDK |121| `QUERY_API_KEY` | Yes | None | API key from thequery.dev (required for all operations) |122123> **Note**: The default values are configured for local Supabase development. For remote Supabase projects, you must provide your own values for `SUPABASE_PROJECT_REF` and `SUPABASE_DB_PASSWORD`.124125> 🚨 **CRITICAL CONFIGURATION NOTE**: For remote Supabase projects, you MUST specify the correct region where your project is hosted using `SUPABASE_REGION`. If you encounter a "Tenant or user not found" error, this is almost certainly because your region setting doesn't match your project's actual region. You can find your project's region in the Supabase dashboard under Project Settings.126127#### Connection Types128129##### Database Connection130- The server connects to your Supabase PostgreSQL database using the transaction pooler endpoint131- Local development uses a direct connection to `127.0.0.1:54322`132- Remote projects use the format: `postgresql://postgres.[project_ref]:[password]@aws-0-[region].pooler.supabase.com:6543/postgres`133134> ⚠️ **Important**: Session pooling connections are not supported. The server exclusively uses transaction pooling for better compatibility with the MCP server architecture.135136##### Management API Connection137- Requires `SUPABASE_ACCESS_TOKEN` to be set138- Connects to the Supabase Management API at `https://api.supabase.com`139- Only works with remote Supabase projects (not local development)140141##### Auth Admin SDK Connection142- Requires `SUPABASE_SERVICE_ROLE_KEY` to be set143- For local development, connects to `http://127.0.0.1:54321`144- For remote projects, connects to `https://[project_ref].supabase.co`145146#### Configuration Methods147148The server looks for configuration in this order (highest to lowest priority):1491501. **Environment Variables**: Values set directly in your environment1512. **Local `.env` File**: A `.env` file in your current working directory (only works when running from source)1523. **Global Config File**:153 - Windows: `%APPDATA%\supabase-mcp\.env`154 - macOS/Linux: `~/.config/supabase-mcp/.env`1554. **Default Settings**: Local development defaults (if no other config is found)156157> ⚠️ **Important**: When using the package installed via pipx or uv, local `.env` files in your project directory are **not** detected. You must use either environment variables or the global config file.158159#### Setting Up Configuration160161##### Option 1: Client-Specific Configuration (Recommended)162163Set environment variables directly in your MCP client configuration (see client-specific setup instructions in Step 3). Most MCP clients support this approach, which keeps your configuration with your client settings.164165##### Option 2: Global Configuration166167Create a global `.env` configuration file that will be used for all MCP server instances:168169```bash170# Create config directory171# On macOS/Linux172mkdir -p ~/.config/supabase-mcp173# On Windows (PowerShell)174mkdir -Force "$env:APPDATA\supabase-mcp"175176# Create and edit .env file177# On macOS/Linux178nano ~/.config/supabase-mcp/.env179# On Windows (PowerShell)180notepad "$env:APPDATA\supabase-mcp\.env"181```182183Add your configuration values to the file:184185```186QUERY_API_KEY=your-api-key187SUPABASE_PROJECT_REF=your-project-ref188SUPABASE_DB_PASSWORD=your-db-password189SUPABASE_REGION=us-east-1190SUPABASE_ACCESS_TOKEN=your-access-token191SUPABASE_SERVICE_ROLE_KEY=your-service-role-key192```193194##### Option 3: Project-Specific Configuration (Source Installation Only)195196If you're running the server from source (not via package), you can create a `.env` file in your project directory with the same format as above.197198#### Finding Your Supabase Project Information199200- **Project Reference**: Found in your Supabase project URL: `https://supabase.com/dashboard/project/<project-ref>`201- **Database Password**: Set during project creation or found in Project Settings → Database202- **Access Token**: Generate at https://supabase.com/dashboard/account/tokens203- **Service Role Key**: Found in Project Settings → API → Project API keys204205#### Supported Regions206207The server supports all Supabase regions:208209- `us-west-1` - West US (North California)210- `us-east-1` - East US (North Virginia) - default211- `us-east-2` - East US (Ohio)212- `ca-central-1` - Canada (Central)213- `eu-west-1` - West EU (Ireland)214- `eu-west-2` - West Europe (London)215- `eu-west-3` - West EU (Paris)216- `eu-central-1` - Central EU (Frankfurt)217- `eu-central-2` - Central Europe (Zurich)218- `eu-north-1` - North EU (Stockholm)219- `ap-south-1` - South Asia (Mumbai)220- `ap-southeast-1` - Southeast Asia (Singapore)221- `ap-northeast-1` - Northeast Asia (Tokyo)222- `ap-northeast-2` - Northeast Asia (Seoul)223- `ap-southeast-2` - Oceania (Sydney)224- `sa-east-1` - South America (São Paulo)225226#### Limitations227228- **No Self-Hosted Support**: The server only supports official Supabase.com hosted projects and local development229- **No Connection String Support**: Custom connection strings are not supported230- **No Session Pooling**: Only transaction pooling is supported for database connections231- **API and SDK Features**: Management API and Auth Admin SDK features only work with remote Supabase projects, not local development232233### Step 3. Usage234235In general, any MCP client that supports `stdio` protocol should work with this MCP server. This server was explicitly tested to work with:236- Cursor237- Windsurf238- Cline239- Claude Desktop240241Additionally, you can also use smithery.ai to install this server a number of clients, including the ones above.242243Follow the guides below to install this MCP server in your client.244245#### Cursor246Go to Settings -> Features -> MCP Servers and add a new server with this configuration:247```bash248# can be set to any name249name: supabase250type: command251# if you installed with pipx252command: supabase-mcp-server253# if you installed with uv254command: uv run supabase-mcp-server255# if the above doesn't work, use the full path (recommended)256command: /full/path/to/supabase-mcp-server # Find with 'which supabase-mcp-server' (macOS/Linux) or 'where supabase-mcp-server' (Windows)257```258259If configuration is correct, you should see a green dot indicator and the number of tools exposed by the server.260261262#### Windsurf263Go to Cascade -> Click on the hammer icon -> Configure -> Fill in the configuration:264```json265{266 "mcpServers": {267 "supabase": {268 "command": "/Users/username/.local/bin/supabase-mcp-server", // update path269 "env": {270 "QUERY_API_KEY": "your-api-key", // Required - get your API key at thequery.dev271 "SUPABASE_PROJECT_REF": "your-project-ref",272 "SUPABASE_DB_PASSWORD": "your-db-password",273 "SUPABASE_REGION": "us-east-1", // optional, defaults to us-east-1274 "SUPABASE_ACCESS_TOKEN": "your-access-token", // optional, for management API275 "SUPABASE_SERVICE_ROLE_KEY": "your-service-role-key" // optional, for Auth Admin SDK276 }277 }278 }279}280```281If configuration is correct, you should see green dot indicator and clickable supabase server in the list of available servers.282283284285#### Claude Desktop286Claude Desktop also supports MCP servers through a JSON configuration. Follow these steps to set up the Supabase MCP server:2872881. **Find the full path to the executable** (this step is critical):289 ```bash290 # On macOS/Linux291 which supabase-mcp-server292293 # On Windows294 where supabase-mcp-server295 ```296 Copy the full path that is returned (e.g., `/Users/username/.local/bin/supabase-mcp-server`).2972982. **Configure the MCP server** in Claude Desktop:299 - Open Claude Desktop300 - Go to Settings → Developer -> Edit Config MCP Servers301 - Add a new configuration with the following JSON:302303 ```json304 {305 "mcpServers": {306 "supabase": {307 "command": "/full/path/to/supabase-mcp-server", // Replace with the actual path from step 1308 "env": {309 "QUERY_API_KEY": "your-api-key", // Required - get your API key at thequery.dev310 "SUPABASE_PROJECT_REF": "your-project-ref",311 "SUPABASE_DB_PASSWORD": "your-db-password",312 "SUPABASE_REGION": "us-east-1", // optional, defaults to us-east-1313 "SUPABASE_ACCESS_TOKEN": "your-access-token", // optional, for management API314 "SUPABASE_SERVICE_ROLE_KEY": "your-service-role-key" // optional, for Auth Admin SDK315 }316 }317 }318 }319 ```320321> ⚠️ **Important**: Unlike Windsurf and Cursor, Claude Desktop requires the **full absolute path** to the executable. Using just the command name (`supabase-mcp-server`) will result in a "spawn ENOENT" error.322323If configuration is correct, you should see the Supabase MCP server listed as available in Claude Desktop.324325326327#### Cline328Cline also supports MCP servers through a similar JSON configuration. Follow these steps to set up the Supabase MCP server:3293301. **Find the full path to the executable** (this step is critical):331 ```bash332 # On macOS/Linux333 which supabase-mcp-server334335 # On Windows336 where supabase-mcp-server337 ```338 Copy the full path that is returned (e.g., `/Users/username/.local/bin/supabase-mcp-server`).3393402. **Configure the MCP server** in Cline:341 - Open Cline in VS Code342 - Click on the "MCP Servers" tab in the Cline sidebar343 - Click "Configure MCP Servers"344 - This will open the `cline_mcp_settings.json` file345 - Add the following configuration:346347 ```json348 {349 "mcpServers": {350 "supabase": {351 "command": "/full/path/to/supabase-mcp-server", // Replace with the actual path from step 1352 "env": {353 "QUERY_API_KEY": "your-api-key", // Required - get your API key at thequery.dev354 "SUPABASE_PROJECT_REF": "your-project-ref",355 "SUPABASE_DB_PASSWORD": "your-db-password",356 "SUPABASE_REGION": "us-east-1", // optional, defaults to us-east-1357 "SUPABASE_ACCESS_TOKEN": "your-access-token", // optional, for management API358 "SUPABASE_SERVICE_ROLE_KEY": "your-service-role-key" // optional, for Auth Admin SDK359 }360 }361 }362 }363 ```364365If configuration is correct, you should see a green indicator next to the Supabase MCP server in the Cline MCP Servers list, and a message confirming "supabase MCP server connected" at the bottom of the panel.366367368369### Troubleshooting370371Here are some tips & tricks that might help you:372- **Debug installation** - run `supabase-mcp-server` directly from the terminal to see if it works. If it doesn't, there might be an issue with the installation.373- **MCP Server configuration** - if the above step works, it means the server is installed and configured correctly. As long as you provided the right command, IDE should be able to connect. Make sure to provide the right path to the server executable.374- **"No tools found" error** - If you see "Client closed - no tools available" in Cursor despite the package being installed:375 - Find the full path to the executable by running `which supabase-mcp-server` (macOS/Linux) or `where supabase-mcp-server` (Windows)376 - Use the full path in your MCP server configuration instead of just `supabase-mcp-server`377 - For example: `/Users/username/.local/bin/supabase-mcp-server` or `C:\Users\username\.local\bin\supabase-mcp-server.exe`378- **Environment variables** - to connect to the right database, make sure you either set env variables in `mcp_config.json` or in `.env` file placed in a global config directory (`~/.config/supabase-mcp/.env` on macOS/Linux or `%APPDATA%\supabase-mcp\.env` on Windows).379- **Accessing logs** - The MCP server writes detailed logs to a file:380 - Log file location:381 - macOS/Linux: `~/.local/share/supabase-mcp/mcp_server.log`382 - Windows: `%USERPROFILE%\.local\share\supabase-mcp\mcp_server.log`383 - Logs include connection status, configuration details, and operation results384 - View logs using any text editor or terminal commands:385 ```bash386 # On macOS/Linux387 cat ~/.local/share/supabase-mcp/mcp_server.log388389 # On Windows (PowerShell)390 Get-Content "$env:USERPROFILE\.local\share\supabase-mcp\mcp_server.log"391 ```392393If you are stuck or any of the instructions above are incorrect, please raise an issue.394395### MCP Inspector396A super useful tool to help debug MCP server issues is MCP Inspector. If you installed from source, you can run `supabase-mcp-inspector` from the project repo and it will run the inspector instance. Coupled with logs this will give you complete overview over what's happening in the server.397> 📝 Running `supabase-mcp-inspector`, if installed from package, doesn't work properly - I will validate and fix in the coming release.398399## Feature Overview400401### Database query tools402403Since v0.3+ server provides comprehensive database management capabilities with built-in safety controls:404405- **SQL Query Execution**: Execute PostgreSQL queries with risk assessment406 - **Three-tier safety system**:407 - `safe`: Read-only operations (SELECT) - always allowed408 - `write`: Data modifications (INSERT, UPDATE, DELETE) - require unsafe mode409 - `destructive`: Schema changes (DROP, CREATE) - require unsafe mode + confirmation410411- **SQL Parsing and Validation**:412 - Uses PostgreSQL's parser (pglast) for accurate analysis and provides clear feedback on safety requirements413414- **Automatic Migration Versioning**:415 - Database-altering operations operations are automatically versioned416 - Generates descriptive names based on operation type and target417418419- **Safety Controls**:420 - Default SAFE mode allows only read-only operations421 - All statements run in transaction mode via `asyncpg`422 - 2-step confirmation for high-risk operations423424- **Available Tools**:425 - `get_schemas`: Lists schemas with sizes and table counts426 - `get_tables`: Lists tables, foreign tables, and views with metadata427 - `get_table_schema`: Gets detailed table structure (columns, keys, relationships)428 - `execute_postgresql`: Executes SQL statements against your database429 - `confirm_destructive_operation`: Executes high-risk operations after confirmation430 - `retrieve_migrations`: Gets migrations with filtering and pagination options431 - `live_dangerously`: Toggles between safe and unsafe modes432433### Management API tools434435Since v0.3.0 server provides secure access to the Supabase Management API with built-in safety controls:436437- **Available Tools**:438 - `send_management_api_request`: Sends arbitrary requests to Supabase Management API with auto-injection of project ref439 - `get_management_api_spec`: Gets the enriched API specification with safety information440 - Supports multiple query modes: by domain, by specific path/method, or all paths441 - Includes risk assessment information for each endpoint442 - Provides detailed parameter requirements and response formats443 - Helps LLMs understand the full capabilities of the Supabase Management API444 - `get_management_api_safety_rules`: Gets all safety rules with human-readable explanations445 - `live_dangerously`: Toggles between safe and unsafe operation modes446447- **Safety Controls**:448 - Uses the same safety manager as database operations for consistent risk management449 - Operations categorized by risk level:450 - `safe`: Read-only operations (GET) - always allowed451 - `unsafe`: State-changing operations (POST, PUT, PATCH, DELETE) - require unsafe mode452 - `blocked`: Destructive operations (delete project, etc.) - never allowed453 - Default safe mode prevents accidental state changes454 - Path-based pattern matching for precise safety rules455456**Note**: Management API tools only work with remote Supabase instances and are not compatible with local Supabase development setups.457458### Auth Admin tools459460I was planning to add support for Python SDK methods to the MCP server. Upon consideration I decided to only add support for Auth admin methods as I often found myself manually creating test users which was prone to errors and time consuming. Now I can just ask Cursor to create a test user and it will be done seamlessly. Check out the full Auth Admin SDK method docs to know what it can do.461462Since v0.3.6 server supports direct access to Supabase Auth Admin methods via Python SDK:463 - Includes the following tools:464 - `get_auth_admin_methods_spec` to retrieve documentation for all available Auth Admin methods465 - `call_auth_admin_method` to directly invoke Auth Admin methods with proper parameter handling466 - Supported methods:467 - `get_user_by_id`: Retrieve a user by their ID468 - `list_users`: List all users with pagination469 - `create_user`: Create a new user470 - `delete_user`: Delete a user by their ID471 - `invite_user_by_email`: Send an invite link to a user's email472 - `generate_link`: Generate an email link for various authentication purposes473 - `update_user_by_id`: Update user attributes by ID474 - `delete_factor`: Delete a factor on a user (currently not implemented in SDK)475476#### Why use Auth Admin SDK instead of raw SQL queries?477478The Auth Admin SDK provides several key advantages over direct SQL manipulation:479- **Functionality**: Enables operations not possible with SQL alone (invites, magic links, MFA)480- **Accuracy**: More reliable then creating and executing raw SQL queries on auth schemas481- **Simplicity**: Offers clear methods with proper validation and error handling482483 - Response format:484 - All methods return structured Python objects instead of raw dictionaries485 - Object attributes can be accessed using dot notation (e.g., `user.id` instead of `user["id"]`)486 - Edge cases and limitations:487 - UUID validation: Many methods require valid UUID format for user IDs and will return specific validation errors488 - Email configuration: Methods like `invite_user_by_email` and `generate_link` require email sending to be configured in your Supabase project489 - Link types: When generating links, different link types have different requirements:490 - `signup` links don't require the user to exist491 - `magiclink` and `recovery` links require the user to already exist in the system492 - Error handling: The server provides detailed error messages from the Supabase API, which may differ from the dashboard interface493 - Method availability: Some methods like `delete_factor` are exposed in the API but not fully implemented in the SDK494495### Logs & Analytics496497The server provides access to Supabase logs and analytics data, making it easier to monitor and troubleshoot your applications:498499- **Available Tool**: `retrieve_logs` - Access logs from any Supabase service500501- **Log Collections**:502 - `postgres`: Database server logs503 - `api_gateway`: API gateway requests504 - `auth`: Authentication events505 - `postgrest`: RESTful API service logs506 - `pooler`: Connection pooling logs507 - `storage`: Object storage operations508 - `realtime`: WebSocket subscription logs509 - `edge_functions`: Serverless function executions510 - `cron`: Scheduled job logs511 - `pgbouncer`: Connection pooler logs512513- **Features**: Filter by time, search text, apply field filters, or use custom SQL queries514515Simplifies debugging across your Supabase stack without switching between interfaces or writing complex queries.516517### Automatic Versioning of Database Changes518519"With great power comes great responsibility." While `execute_postgresql` tool coupled with aptly named `live_dangerously` tool provide a powerful and simple way to manage your Supabase database, it also means that dropping a table or modifying one is one chat message away. In order to reduce the risk of irreversible changes, since v0.3.8 the server supports:520- automatic creation of migration scripts for all write & destructive sql operations executed on the database521- improved safety mode of query execution, in which all queries are categorized in:522 - `safe` type: always allowed. Includes all read-only ops.523 - `write`type: requires `write` mode to be enabled by the user.524 - `destructive` type: requires `write` mode to be enabled by the user AND a 2-step confirmation of query execution for clients that do not execute tools automatically.525526### Universal Safety Mode527Since v0.3.8 Safety Mode has been standardized across all services (database, API, SDK) using a universal safety manager. This provides consistent risk management and a unified interface for controlling safety settings across the entire MCP server.528529All operations (SQL queries, API requests, SDK methods) are categorized into risk levels:530- `Low` risk: Read-only operations that don't modify data or structure (SELECT queries, GET API requests)531- `Medium` risk: Write operations that modify data but not structure (INSERT/UPDATE/DELETE, most POST/PUT API requests)532- `High` risk: Destructive operations that modify database structure or could cause data loss (DROP/TRUNCATE, DELETE API endpoints)533- `Extreme` risk: Operations with severe consequences that are blocked entirely (deleting projects)534535Safety controls are applied based on risk level:536- Low risk operations are always allowed537- Medium risk operations require unsafe mode to be enabled538- High risk operations require unsafe mode AND explicit confirmation539- Extreme risk operations are never allowed540541#### How confirmation flow works542543Any high-risk operations (be it a postgresql or api request) will be blocked even in `unsafe` mode.544545You will have to confirm and approve every high-risk operation explicitly in order for it to be executed.546547548549## Changelog550551- 📦 Simplified installation via package manager - ✅ (v0.2.0)552- 🌎 Support for different Supabase regions - ✅ (v0.2.2)553- 🎮 Programmatic access to Supabase management API with safety controls - ✅ (v0.3.0)554- 👷♂️ Read and read-write database SQL queries with safety controls - ✅ (v0.3.0)555- 🔄 Robust transaction handling for both direct and pooled connections - ✅ (v0.3.2)556- 🐍 Support methods and objects available in native Python SDK - ✅ (v0.3.6)557- 🔍 Stronger SQL query validation ✅ (v0.3.8)558- 📝 Automatic versioning of database changes ✅ (v0.3.8)559- 📖 Radically improved knowledge and tools of api spec ✅ (v0.3.8)560- ✍️ Improved consistency of migration-related tools for a more organized database vcs ✅ (v0.3.10)561- 🥳 Query MCP is released (v0.4.0)562563564For a more detailed roadmap, please see this [discussion](https://github.com/alexander-zuev/supabase-mcp-server/discussions/46) on GitHub.565566567## Star History568569[](https://star-history.com/#alexander-zuev/supabase-mcp-server&Date)570571---572573Enjoy! ☺️574
Full transparency — inspect the skill content before installing.