App MCP
App MCP
Turn an existing Supabase database and Edge Functions into an MCP server you can install in Cursor, Claude, ChatGPT, or any MCP client.
This is not the official Supabase management MCP. That product runs SQL, migrations, and org admin. This one exposes your app: selected tables (with RLS) and your Edge Functions as tools.
What you get
Connect a Supabase project.
Pick tables and operations, register Edge Functions with a JSON Schema.
Install the same tool catalog two ways:
Hosted: paste a Streamable HTTP URL and API key into any client.
Self-host: run the server on your machine so Supabase keys never leave it.
Monorepo
apps/web Dashboard + hosted /mcp/:projectId endpoint
packages/mcp-core Schema introspect, tool catalog, executors
packages/mcp-server MCP factory, stdio CLI, local HTTP
examples/mcp-config.json Sample self-host configDashboard
npm install
cp .env.example .env
npm run devOpen http://localhost:3000. Persistence defaults to apps/web/data/store.json. Set DASHBOARD_PASSWORD to lock the UI. Set PRODUCT_SUPABASE_URL and PRODUCT_SUPABASE_SERVICE_ROLE_KEY (and run supabase/migrations/001_init.sql) to store projects in your own Supabase instead.
Customer service_role keys are encrypted at rest. Table tools use the anon key so RLS applies unless you opt into the service role.
Self-host / local MCP
cp .env.example .env
# fill SUPABASE_URL and SUPABASE_ANON_KEY
npm run mcp -- tools
npm run mcp -- serve --stdio
npm run mcp -- serve --http --port 3333Cursor mcp.json:
{
"mcpServers": {
"my-app": {
"command": "npx",
"args": ["tsx", "packages/mcp-server/src/cli.ts", "serve", "--stdio"],
"env": {
"SUPABASE_URL": "https://xxxx.supabase.co",
"SUPABASE_ANON_KEY": "eyJ...",
"MCP_CONFIG": "./examples/mcp-config.json"
}
}
}
}Inspector:
npx @modelcontextprotocol/inspector npx tsx packages/mcp-server/src/cli.ts serve --stdioHosted clients use:
{
"mcpServers": {
"my-app": {
"url": "http://localhost:3000/mcp/PROJECT_ID",
"headers": {
"Authorization": "Bearer smcp_..."
}
}
}
}Tests
npm testLatest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/elvinbaghele/your-supabase-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server