supabase-rls-check
Related Servers
Alternatives to supabase-rls-check
No user-submitted related servers found.
Related Servers
- AlicenseBqualityBmaintenanceRead-only security audit for Supabase. Surfaces RLS gaps, permissive policies, exposed functions and grants, and returns scored findings with fix SQL that is never executed.451MIT
- AlicenseAqualityDmaintenanceAudits PostgreSQL/Supabase schemas for security issues like missing RLS, permissive policies, and sensitive data exposure during AI conversations.3MIT
- AlicenseAqualityBmaintenanceRead-only Supabase RLS check: explains in Arabic which tables anyone can read or change. No keys.2151 npmMIT
- AlicenseNot gradedqualityCmaintenanceEnables AI coding agents to audit Supabase or Postgres databases for Row Level Security and multi-tenant isolation holes, reading tables, grants, policies and functions for static findings and optionally probing those policies inside a rolled-back transaction. It reports each hole with an explanation and a fix, so an agent can verify the migrations it just wrote before declaring them done.1MIT
- AlicenseAqualityCmaintenanceEnables AI coding assistants to check whether an API key is safe to expose, audit Supabase Row Level Security, generate owner-based RLS policy templates, and run a builder-specific pre-launch security checklist. Runs locally over stdio with no network calls, telemetry, or file access.5MIT
- AlicenseAqualityBmaintenanceScan a deployed site for an exposed Supabase service_role key and audit Row Level Security from your AI coding agent.246 npmMIT
TDQS
Scored across 2 tools
The two tools operate on completely different inputs: one validates/summarizes a local metadata export file, the other returns static documentation for a rule. There is no plausible way for an agent to confuse them.
Both names use the same snake_case verb_noun pattern (analyze_sql_export, explain_rule) with clear, specific nouns. No stylistic drift between the two.
Two tools is thin for a domain that includes running the check, enumerating rules, and interpreting results. It is defensible given a narrow scan-and-explain scope, but the surface feels minimal rather than well-scoped.
There is no way to list available rules (so explain_rule requires guessing rule names) and no tool to actually run or re-run check.sql, only to analyze a pre-existing export. Remediation is described in prose via explain_rule but never produced as SQL, leaving notable dead ends.