AI code editor with agents, cloud agents and code review, offered with a free Hobby tier and paid plans.
Free stops at: Limited Agent requests
Listed Not yet reviewed
Free · paid from $20/mo US · checked Sep 29
MCP server Official
Supabase MCP Server
Connect Supabase projects to AI assistants to manage tables, fetch config and query data.
- Author
- Supabase Community
- Works with
- Any MCP client, Cursor, Windsurf
- License
- Apache-2.0
- Documented
- Oct 2, 2026
What Supabase MCP Server is
Standardizes how LLMs talk to Supabase so assistants can manage tables, fetch config and query data. The hosted server is at https://mcp.supabase.com/mcp with OAuth login; local CLI and self-hosted setups expose a limited subset.
What it does
- Manage tables and schema in a Supabase project
- Fetch project configuration
- Query data
- Scope to one project with project_ref and read_only=true URL parameters
- Filter tool groups with the features parameter
When to use it
Good fit
- Developing against a Supabase project from Cursor, Claude or Windsurf
- Read-only inspection of a project
Not for
- Unreviewed production data: the README points to security risks of connecting an LLM to projects
- Local CLI or self-hosted use needing full tools: only a limited subset and no OAuth 2.1
How to install Supabase MCP Server
You need: Supabase account; MCP client with remote HTTP support
- Read the Supabase security best practices first
- Add the server URL https://mcp.supabase.com/mcp to your MCP client
- Log in to Supabase when prompted and pick the right organization
- Optionally generate a project-specific URL in the dashboard MCP connection tab
{
"mcpServers": {
"supabase": {
"type": "http",
"url": "https://mcp.supabase.com/mcp"
}
}
}Permissions and security
What it can access
- Acts on your Supabase organization/projects as authorized at login; read_only and project_ref narrow it
Security notes from the maintainers
- README recommends reading Supabase security best practices before setup
Review the source before granting an agent access to credentials or production systems. We document what the maintainers state; we do not audit code.
Limitations
- CLI and self-hosted servers offer a limited tool subset and no OAuth 2.1
- Server does not send structuredContent in tool results
Tools it extends
AI coding IDE, formerly Windsurf, now Devin Desktop: manage local and cloud coding agents inside a full IDE.
Free stops at: Light quota for agent usage, resets daily and weekly, Limited model availability
Listed Not yet reviewed
Verified windsurf.com (opens Devin Desktop (formerly Windsurf) website in a new tab)
Free · paid from $20/mo US · checked Sep 29
Frequently asked questions
How do I make Supabase MCP read-only?
Add read_only=true to the server URL, e.g. https://mcp.supabase.com/mcp?project_ref=&read_only=true. source
Where does the Supabase MCP server run?
Hosted at https://mcp.supabase.com/mcp; locally via Supabase CLI at http://localhost:54321/mcp with fewer tools. source
Is Supabase MCP the official server?
It is in the supabase-community org and linked from supabase.com docs; the README calls it the Supabase MCP Server. source
Related guides
Sources and gaps
- https://raw.githubusercontent.com/supabase-community/supabase-mcp/main/README.md readme, checked Oct 2, 2026
- https://supabase.com/docs/guides/getting-started/mcp docs, checked Oct 2, 2026
Not stated by the maintainers: Official status inferred from supabase.com docs links, not an explicit statement; last_release date not visible in the checked README.