Agent Upstart

Cool things people are building with agents — and practical help getting the most out of them.

Skills · last verified 2026-10-24

supabase-community/supabase-mcp — install for MCP clients

github.com/supabase-community/supabase-mcp · MCP server · hosted, OAuth login

What it does

The Supabase MCP server connects an agent to a Supabase project so it can manage tables, fetch configuration and query data, as described in the repo README. The hosted setup asks the user to log in to Supabase during configuration and pick the organization holding the project.

The README points readers to Supabase's security best practices before setup, and notes the server can be scoped with URL options such as a project reference, read-only mode and feature groups (for example database and docs only). Read-only mode is worth using when the agent only needs to look, not change anything.

Install

MCP client configuration (verified against the repo README's Setup section — the README gives a JSON config, not a CLI command):

{
  "mcpServers": {
    "supabase": {
      "type": "http",
      "url": "https://mcp.supabase.com/mcp"
    }
  }
}

The README also documents a local CLI endpoint (http://localhost:54321/mcp) with a limited tool subset and no OAuth, and a self-hosted endpoint option.

Verified against github.com/supabase-community/supabase-mcp (README, Setup), 2026-10-24.

Trust score: not scored

No score is given for this page. This is a hosted server: the code that runs is not the code in the repo alone, and the server source was not fully read in this pass, so a scored review would not be honest. What was checked is listed under Verification below. Note the capability itself: with a normal (non-read-only) setup, an agent can change database content, so the read-only and project-scoped options deserve a look before connecting a production project.

Verification

Checked 2026-10-24 against the author's own repository. No install was run and no account was connected for this check.

What was checked: Author README (Setup, configuration JSON, configuration options) was read from a fresh clone of the repo. The hosted service itself and the server source code were not fully reviewed.

Limits: Configuration checked against the author README; not executed in this pass, and no Supabase account was connected. No full code read was done, so no trust score is given.

Sources: github.com/supabase-community/supabase-mcp (README, Setup)

Also in this series

Back to: Skills index