How do I connect Supabase MCP Server to Claude?

Run `claude mcp add supabase-mcp-server -- uvx supabase-mcp-server` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.

Is Supabase MCP Server free?

The listed licence is Apache-2.0. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.

What can Supabase MCP Server do?

Supabase MCP Server documents 27 tools to the agent, including blocked, call_auth_admin_method, confirm_destructive_operation. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.

Supabase MCP Server

Unclaimed

by alexander-zuev

Query MCP enables end-to-end management of Supabase via chat interface: read & write query executions, management API support, automatic migration versioning, access to logs and much more.

Set up this server

Compare servers My Stack

01 / Choose your client

02 / Before you connect

Authentication is not specified. Check the project instructions before connecting.

Install the runtime required by the project and make it available to your client.

Project instructionsEnvironment variable names (optional)

Use names from the project instructions, separated by commas. Enter names only, never secret values.

03 / Add the configuration

Source: generated from public install instructions

claude mcp add --transport stdio 'supabase-mcp-server' -- 'uvx' 'supabase-mcp-server'

Run in your terminal after replacing any placeholders.

04 / Check it in your client

Open your client’s MCP settings and confirm the server connects and lists its tools. A copied configuration does not confirm a working connection.

cursormodel-context-protocolsupabasewindsurf

Is this your MCP server?

This listing was auto-indexed from the public record. Claim it to edit the page, set compatibility and unlock growth tools. Takes under two minutes.

Claim this server

Security profile

Claimed and verified servers get a weekly static scan that shows what the code can reach: external services, environment variables, shell commands, agent configuration folders, plus any dependencies with known advisories. Claim this listing to get one. How the security profile works

27 of 27 tools

Documented tools (27)

From project documentation. A server handshake does not verify each tool’s description or behavior.

blocked

Destructive operations (delete project, etc.) - never allowed

call_auth_admin_method

to directly invoke Auth Admin methods with proper parameter handling

confirm_destructive_operation

Executes high-risk operations after confirmation

create_user

Create a new user

delete_factor

Delete a factor on a user (currently not implemented in SDK)

delete_user

Delete a user by their ID

destructive

Schema changes (DROP, CREATE) - require unsafe mode + confirmation

execute_postgresql

Executes SQL statements against your database

generate_link

Generate an email link for various authentication purposes

get_auth_admin_methods_spec

to retrieve documentation for all available Auth Admin methods

get_management_api_safety_rules

Gets all safety rules with human-readable explanations

get_management_api_spec

Gets the enriched API specification with safety information

get_schemas

Lists schemas with sizes and table counts

get_table_schema

Gets detailed table structure (columns, keys, relationships)

get_tables

Lists tables, foreign tables, and views with metadata

get_user_by_id

Retrieve a user by their ID

invite_user_by_email

Send an invite link to a user's email

list_users

List all users with pagination

live_dangerously

Toggles between safe and unsafe modes

magiclink

and recovery links require the user to already exist in the system

retrieve_migrations

Gets migrations with filtering and pagination options

safe

Read-only operations (SELECT) - always allowed

send_management_api_request

Sends arbitrary requests to Supabase Management API with auto-injection of project ref

signup

links don't require the user to exist

unsafe

State-changing operations (POST, PUT, PATCH, DELETE) - require unsafe mode

update_user_by_id

Update user attributes by ID

write

Data modifications (INSERT, UPDATE, DELETE) - require unsafe mode

Tool change history

Compared across complete checks of the same configuration. Tools were listed, not invoked. Input-schema changes are not measured here.

No complete tool checks yet.

FAQ

Questions about Supabase MCP Server

How do I connect Supabase MCP Server to Claude?: Run `claude mcp add supabase-mcp-server -- uvx supabase-mcp-server` in Claude Code, or add the same command and arguments under mcpServers in Cursor's mcp.json or Claude Desktop's claude_desktop_config.json, then restart the client. The blocks above are ready to paste.
Is Supabase MCP Server free?: The listed licence is Apache-2.0. Check the upstream terms for permitted use and commercial requirements; a public repository does not by itself mean the software is free or open source. Connected APIs and hosted services may have separate charges.
What can Supabase MCP Server do?: Supabase MCP Server documents 27 tools to the agent, including blocked, call_auth_admin_method, confirm_destructive_operation. The descriptions above come from project documentation. A live handshake does not test individual tool behavior.