# Supabase MCP review

> Supabase MCP is a Model Context Protocol server that connects Supabase projects to AI assistants such as Cursor, Claude, and Windsurf.

Devtoolwatch Board, the week of Oct 25–31, 2026. Canonical page: https://index.devtoolwatch.com/tools/supabase-mcp/

## TL;DR

Supabase MCP is an MCP server that lets AI assistants manage tables, fetch config, and query data in your Supabase projects. It is for developers who build on Supabase and use AI coding tools. It runs as a hosted HTTP endpoint with browser login, and you can scope it to one project, set it to read-only, or limit its feature groups.

## Supabase MCP at a glance

- **Category:** [MCP and agent tools](https://index.devtoolwatch.com/categories/mcp-servers/)
- **Maintained by:** Supabase (organization, [@supabase](https://github.com/supabase) on GitHub)
- **License:** Apache 2.0
- **Language:** TypeScript, JavaScript, Shell
- **Repository:** [github.com/supabase/mcp](https://github.com/supabase/mcp)
- **Website:** [supabase.com/mcp](https://supabase.com/mcp)
- **npm package:** [@supabase/mcp-server-supabase](https://www.npmjs.com/package/@supabase/mcp-server-supabase) 0.14.0
- **Latest release:** [mcp-server-supabase-v0.14.0](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.14.0) on GitHub, Oct 14, 2026
- **First published:** Dec 20, 2024

## What Supabase MCP does

- Supabase MCP lets AI assistants manage tables, fetch config, and query data in your Supabase projects.
- Supabase MCP organizes its tools into feature groups such as docs, account, database, debugging, development, functions, and branching.
- Supabase MCP can be scoped to a single project. If no project is selected, all projects are accessible.
- Supabase MCP offers a read-only option that excludes mutating tools.
- Supabase MCP asks for confirmation of destructive SQL and of project or branch costs through elicitation in supporting clients.
- Supabase MCP includes advisor tools, including health advisor support and grouped lints in get_advisors responses.
- Supabase MCP exports createToolSchemas() so Vercel AI SDK can treat its tools as typed static tools with client-side validation.

### How it works

Supabase MCP runs as a remote HTTP server at https://mcp.supabase.com/mcp. You add that URL to your MCP client, then log in to Supabase in a browser and grant access to an organization. URL parameters set the project, read-only mode, and feature groups. Local Supabase CLI and self-hosted setups expose their own endpoints. The npm package can also serve the tools from your own endpoint.

## How to install Supabase MCP

**With Claude Code**

```
claude mcp add --scope project --transport http supabase "https://mcp.supabase.com/mcp?features=docs%2Caccount%2Cdatabase%2Cdebugging%2Cdevelopment%2Cfunctions%2Cbranching"
```

### Requirements

- A Supabase account. Login happens in a browser, and no personal access token is needed.
- An MCP client that supports HTTP transport, such as Cursor, Claude Code, or Windsurf.

### First steps

1. Read the Supabase MCP security best practices to understand the risks of connecting an LLM to your projects.
2. Add the server URL https://mcp.supabase.com/mcp to your MCP client's config, or generate a custom URL in the dashboard's MCP connection tab.
3. Authenticate in the browser and choose the organization that contains the project you want to work with.
4. Verify access by asking your assistant: "What tables are there in the database? Use MCP tools."

## Who Supabase MCP is for

- Developers on Supabase who want AI coding assistants to query and manage their databases.
- Teams using Vercel AI SDK who want typed Supabase tool schemas.
- Developers who need to serve Supabase MCP tools from their own HTTP endpoint.

### Limitations

- Supabase MCP on a local Supabase CLI or a self-hosted install offers only a limited subset of tools and no OAuth 2.1.
- Supabase states that connecting an LLM to your Supabase projects carries security risks.
- The self-hosted handler speaks only the current protocol revision. Clients that only speak the 2025-era protocol receive an HTTP 400.
- Supabase MCP does not send structuredContent in tool results, so AI SDK falls back to parsing JSON from the content text.

## Usage data (the week of Oct 25–31, 2026)

- Board rank: #146 overall, #19 in MCP and agent tools, momentum score 54
- Downloads that week: 176.6k (+86% vs 4-week average)
- New GitHub stars per week (last 12 weeks): Aug 9: 11; Aug 16: 7; Aug 23: 11; Aug 30: 12; Sep 6: 16; Sep 13: 12; Sep 20: 8; Sep 27: 10; Oct 4: 16; Oct 11: 15; Oct 18: 14; Oct 25: 20

## Supabase MCP alternatives

| Rank | Tool | Stars | Downloads/wk |
|---|---|---|---|
| #1 | [REA](https://index.devtoolwatch.com/tools/morluto-rea/) | 415.5k | 760.6k |
| #2 | [ha-mcp](https://index.devtoolwatch.com/tools/homeassistant-ai-ha-mcp/) | 5.4k | 118.1k |
| #3 | [Treg](https://index.devtoolwatch.com/tools/superdesigndev-treg/) | 6.9k | 6.7k |
| #4 | [Chrome DevTools MCP](https://index.devtoolwatch.com/tools/chrome-devtools-mcp/) | 54.6k | 2.7M |
| #5 | [codebase-memory-mcp](https://index.devtoolwatch.com/tools/deusdata-codebase-memory-mcp/) | 47.9k | – |
| #6 | [open-computer-use](https://index.devtoolwatch.com/tools/ifuryst-open-computer-use/) | 2.8k | – |

## Supabase MCP FAQ

### Is Supabase MCP free and open source?

Yes. Supabase MCP's source code is on GitHub (supabase/mcp) under the Apache 2.0 license, so you can use it for free.

### How do I install Supabase MCP?

Run `claude mcp add --scope project --transport http supabase "https://mcp.supabase.com/mcp?features=docs%2Caccount%2Cdatabase%2Cdebugging%2Cdevelopment%2Cfunctions%2Cbranching"`. The install section above has the other options from the project's README.

### Is Supabase MCP still maintained?

Yes. The supabase/mcp repository was last updated on Oct 21, 2026, and the latest release, mcp-server-supabase-v0.14.0 on GitHub, came out on Oct 14, 2026.

### How popular is Supabase MCP?

Supabase MCP has 3k GitHub stars as of Nov 1, 2026. It gained 20 new stars in the week of Oct 25–31, 2026, against a 12-week average of 13 a week. Its main package had about 176.6k downloads that week, +86% against its own 4-week average. That made it #19 among MCP servers and agent tools on the Devtoolwatch Board.

### What are the best alternatives to Supabase MCP?

Other MCP servers and agent tools on the Devtoolwatch Board in the week of Oct 25–31, 2026, by momentum: REA (#1), ha-mcp (#2), Treg (#3), Chrome DevTools MCP (#4), codebase-memory-mcp (#5). The alternatives table above has their numbers.

### What is the Supabase MCP server used for?

The Supabase MCP server connects AI assistants to your Supabase projects. Once connected, the assistants can manage tables, fetch config, and query data on your behalf.

### Is Supabase MCP read only?

Supabase MCP is not read-only by default. It has a read-only option, set with read_only=true in the server URL, that excludes mutating tools.

### Is Supabase MCP safe?

Supabase says connecting an LLM to your projects carries security risks and recommends reading its security best practices first. To reduce risk, you can use read-only mode, scope the server to one project, and confirm destructive SQL through elicitation in supporting clients.

### How do I use Supabase MCP in Claude Code?

Add the server with the claude mcp add command shown on the Supabase docs, or add the config to .mcp.json. Then run claude /mcp in a regular terminal, not the IDE extension. Select the "supabase" server and choose "Authenticate" to start the login flow.

### How do I use Supabase MCP in Cursor?

Add the Supabase MCP server URL to Cursor's MCP config, then sign in to Supabase when prompted. Check the connection under Settings > Cursor Settings > Tools & MCP. You may need to restart Cursor so it detects all the tools.

### Should I use Supabase MCP with the hosted platform or the Supabase CLI?

Supabase MCP works with both. When you run Supabase locally with the Supabase CLI, the server is available at http://localhost:54321/mcp. That local endpoint offers a limited subset of tools and no OAuth 2.1.

## Sources

1. [supabase/mcp on GitHub](https://github.com/supabase/mcp)
2. [Supabase MCP README](https://github.com/supabase/mcp/blob/main/README.md)
3. [@supabase/mcp-server-supabase on npm](https://www.npmjs.com/package/@supabase/mcp-server-supabase)
4. [Supabase MCP website](https://supabase.com/mcp)
5. [Release mcp-server-supabase-v0.14.0 (Oct 14, 2026)](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.14.0)
6. [Release mcp-utils-v0.9.0 (Oct 14, 2026)](https://github.com/supabase/mcp/releases/tag/mcp-utils-v0.9.0)
7. [Release mcp-server-supabase-v0.13.0 (Sep 17, 2026)](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.13.0)
8. [Hacker News: Postgres WASM](https://news.ycombinator.com/item?id=33067962)
9. [Hacker News: Supabase Storage now supports the S3 protocol](https://news.ycombinator.com/item?id=40083807)
10. [Hacker News: Pg_GraphQL: A GraphQL Extension for PostgreSQL](https://news.ycombinator.com/item?id=29430720)
11. [Devtoolwatch Board, the week of Oct 25–31, 2026](https://index.devtoolwatch.com/)