"Supabase" matching MCP servers:

MCP server that lets AI coding agents (Claude Code, Cursor, Cline) audit Supabase projects for security misconfigurations AND apply the fixes — without leaving the agent. Tools: audit_project, list_findings, preview_fix (BEGIN/ROLLBACK safety), apply_fix (with confirmation), apply_all_fixes (transactional bulk). Closes the audit-fix loop entirely in the agent — other Supabase scanners only report.

This server enables interaction with Supabase PostgreSQL databases through the MCP protocol, allowing seamless integration with Cursor and Windsurf IDEs for secure and validated database management.

Enables auditing a Supabase project's security beyond the dashboard's Security Advisor, checking anonymous access, RLS policies, and cross-tenant data leaks via read-only probes and a two-account test.

Experimental read-only MCP for Supabase application data: memory_search, memory_get and memory_list_recent under user-bound PostgreSQL RLS. Setup and demo: https://github.com/jryski/Supabase_user_MCP/blob/main/docs/GETTING_STARTED.md . Public preview is POSIX-only and synthetic-only; native Windows, hosted OAuth, one-click installation and writes are not available.

Vercel SupaBase Resend alternative - Agent first Hosting. Headless, fast and cheaper.

Enables IDE access to Supabase databases with SQL query execution, schema management, Auth admin operations, and built-in safety controls to prevent accidental destructive actions.

Query PostgreSQL and inspect schemas over MCP. Connects to local, Docker, RDS, Neon, Supabase, or a database behind an SSH bastion.

One MCP server holding a live session with every client's account at once, so one agent can read across a dozen businesses and write inside only the one you name. It forwards each provider's own MCP tools (Cloudflare, Vercel, Resend, Supabase, Linear, Notion, Sentry, Netlify and more) with that client's credentials, and adds deterministic DNS and email checks that never call a model.

Static security scanner for AI-generated (vibe-coded) Supabase and Next.js apps. Runs as an MCP server so an LLM can scan, explain findings, and produce fixes while it writes code, all locally and offline.

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security from your AI coding agent.

Enables AI coding assistants to check whether an API key is safe to expose, audit Supabase Row Level Security, generate owner-based RLS policy templates, and run a builder-specific pre-launch security checklist. Runs locally over stdio with no network calls, telemetry, or file access.

An MCP server that lets coding agents take a SwiftUI iOS subscription app from idea to the App Store, covering research and validation, design, code scaffolding, Supabase backend, App Store Connect and RevenueCat setup, localization, analytics, ASO, screenshots and TestFlight, with approval gates on irreversible actions and human-only submission.

Read-only MCP server for cloudpin, which pins cloud accounts (Azure, AWS, gcloud, Vercel, GitHub, Kubernetes, Supabase, Cloudflare) to a repository. Its tools tell an agent which account each CLI is using and whether a command would run on the pinned one, before it acts.

Read-only security audit for Supabase. Surfaces RLS gaps, permissive policies, exposed functions and grants, and returns scored findings with fix SQL that is never executed.

A unified MCP server that lets AI agents (Claude Code, Codex, Cursor) deploy web apps and VPS instances, provision Supabase-compatible Postgres/Auth/Storage databases, register DNS domains, and send transactional email using a shared MONA Pass identity and VND wallet. It also embeds MONA Pay tooling for VietQR top-ups, checkout, webhooks and reconciliation, so agents can handle payment requests, budget approvals and resource lifecycles end to end.

Open-source Next.js + Supabase CMS with a per-site MCP server for building and editing sites from any agent

Enables LLM clients to fetch web pages as clean text, tail local logs, search the live web via DuckDuckGo, and run read-only SQL queries against SQLite or Postgres/Supabase.

A universal database adapter that enables read-only queries across PostgreSQL, Supabase, and MongoDB databases via the Model Context Protocol.

A production-grade MCP server for Web3, enabling real-time multi-chain wallet execution, smart contract auto-compilation and deployment, token swaps, and asset hosting via Supabase.