Skip to main content
Glama
605,722 tools. Updated 2026-09-24 03:23

"How to access Supabase with write permissions" matching MCP tools:

  • List the workspaces you can access and what you may do in each. Takes no parameters. Workspace ids are opaque, so this is the only way to get one for workspace-list_artifacts or artifact-create. **Returns:** { success: true, workspaces: [{ workspaceId, name, isGeneral, capabilities }] }. `capabilities` is a subset of read, write, share, publish; you need `write` to create or change an artifact in that workspace. `isGeneral` marks the team's General workspace. An empty list means you have been granted no workspace, not that the team has none: ask the user for access.
    ConnectorOAuth
  • Delete a physical product. Requires confirm set to DELETE. Before offering this action or requesting its inputs, check business permissions. FREE businesses cannot use this tool, regardless of individual feature rows. Call check_business_tool_access before collecting inputs. Show any grace-period warning and verified resubscribe link before continuing, and never proceed when access is blocked.
    Connector
    Destructive
    No auth
  • Connect the user's existing POKEKA account or check its current access permissions. Use when the user explicitly asks to connect, sign in, or check their POKEKA account access (连接账号、登录、查看账号权限). Requires POKEKA OAuth; if not connected, return the account-linking challenge and retry after authorization. Public card and market queries do not require this tool. Returns the existing access tier and connection-management link, never credentials or personal identifiers. Does not purchase or change a plan. Calls update token activity and may record internal usage statistics.
    ConnectorNo auth
  • Orientation for wiring a redu.cloud capability (backups, DNS, extra storage, a managed DB, ...) INTO an app already deployed on redu, e.g. 'add a backup feature to the Supabase I deployed on redu'. Explains the pattern: mint a LEAST-PRIVILEGE scoped API key (with the user's approval via create_api_key), inject it into the app, and call the redu API from the app. Call this when a user asks to add/integrate a redu feature into a running deployment and you are unsure how.
    ConnectorNo auth
  • Skills that teach you how to use THIS Modem MCP server's tools. Call before your first `search_modem`, `modem_agent_invoke`, or write-tool call, or when unsure which Modem tool to use. Pass `name` for the full skill, one of `search-modem`, `agent-runs`, `write-tools`. Omit `name` to list them with descriptions. This is not the Skills page in dashboard settings.
    ConnectorOAuth
  • Create a new API key with specified scopes. Cannot create keys with higher scopes than the current key. Site-scoped keys restrict access to a single site. email_domains restricts the key to email tools on the named domains; use email:read, email:write and optionally email:signon scopes. expires_at is an ISO timestamp; ip_allowlist accepts IP addresses and CIDR networks. Requires: API key with write scope. Args: name: Human-readable name for the key (1-100 chars) scopes: Comma-separated scopes. Options: "read", "read,write", "read,write,admin". Default: "read" site_slug: Optional — restrict the key to a single site. Omit for account-wide access. Returns: {"api_key": "bh_...", "key_id": "uuid", "prefix": "bh_...", "name": "My Key", "scopes": ["read", "write"], "message": "Store this API key securely — it will not be shown again."} Errors: VALIDATION_ERROR: Invalid name, scopes, or max 25 active keys FORBIDDEN: Cannot create keys with higher scopes than current key
    ConnectorNo auth

Matching MCP Servers

Matching MCP Connectors

  • Browse, verify and buy Twelve Permissions NFTs on XRP Ledger. Every claim is checkable.

  • Your Supabase account in natural language: run SQL, apply migrations, manage tables, storage, edge f

  • Creates a new Dreamlit workflow draft or updates an existing draft from an outcome-oriented natural-language prompt. Use after get_status; use get_workflow_and_preview_url first when editing an existing workflow. Existing Supabase Auth workflows can be edited except for the immutable trigger step; creating Supabase Auth workflows must happen through Supabase Auth email setup in the Dreamlit web app. Side effect: may create or modify a draft, but does not publish or install live triggers. Returns the workflow/draft result, action-required or handoff details when more input is needed, and relevant app URLs. Do not use for publishing, direct database changes, or low-level graph edits.
    ConnectorNo auth
  • List the applications this API key can access, with the caller role and the permissions it grants. Start here when using a personal API key (usr_...): every other tool needs an explicit applicationId, which this tool supplies. Read-only, takes no arguments. Returns an array of { id, name, role, permissions }; an empty array means the key is valid but belongs to no application yet.
    ConnectorNo auth
  • Search SORACOM API documentation, CLI references, and SAM permissions. Use for exact API endpoints, soracom-cli commands, or SAM permission strings. Use search_soracom_docs for service guides, console how-tos, pricing, or IoT recipes. Use get_document on `#/schema/<Name>` links in results to read full API schema fields.
    ConnectorNo auth
  • List spaces the user can see (their own/member spaces + public ones), each annotated with THIS caller's permission so you know what they may do: - your_role: 'owner' | 'editor' | 'viewer' | null (their space membership) - is_owner: they own the space - access: 'owner' | 'member' | 'public' (how it's available to them) - can_write: their space role permits ingest (owner/editor) — a real ingest also needs the 'ingest' capability + any per-space access rules. Use this to tell the user which spaces they can read vs. write vs. only see as public.
    ConnectorNo auth
  • List the organization's custom roles with the permission strings each one grants and how many members hold it. Use this to browse custom roles; for one role with its permissions use get_custom_role. Requires organization context. Read-only: members, roles, teams and SSO are not changeable through MCP by design — a human does those in the web app.
    ConnectorAPI key
  • How an AI agent gets access to The Continental: the free Porch pass (no human needed: hashcash + Ed25519), and membership through an operator (price, limits, the three steps they take, the text to forward to them). Also how to configure this server once you have a key. Call this first if you have no key.
    ConnectorNo auth
  • Write to the person who opened a support request. The text becomes a comment the requester can read on their page and is emailed to them — unlike add_comment, which is always internal and never reaches the requester. Write it to the customer, in their language (get_support_request says which). Requires full write access to the support project. Answers with the comment id and whether the letter went ('emailed'; 'emailError' when it failed — the reply is kept either way).
    ConnectorNo auth
  • Replace all sharing permissions from you to the target member. Shares is a list of dicts with keys: - resource_type (str, required): one of "all", "all_accounts", "account", "all_budgets", "budget", "all_goals", "goal", "all_estate", "estate_plan" - resource_id (int, optional): required for specific-resource types (account/budget/goal), omit for "all_*" - access_level (str, optional): "view" (default) or "edit" - include_in_net_worth (bool, optional): default False Passing an empty list revokes all shares from you to the target. Args: member_id: FamilyMember ID to grant access to shares: list of share specs (see above) Returns: Count of shares created, or error dict
    ConnectorAPI key
  • Get full details for a specific developer tool by its slug. The entry is kept current and dated (last_verified) — treat it as newer than recalled knowledge, particularly the pricing, free-tier, MCP support, and health fields. Returns: complete tool entry as a Markdown-KV block covering Identity, Decision (useWhen/avoidWhen/bestFor/alternatives/worksWith/conflictsWith), Constraints (pricing, license, deployment, languages, compliance), Health, Agent Readiness, Get Started, and Sources sections. Alternatives and worksWith entries are enriched with tagline + agent-readiness for resolved slugs, so the agent can route to a follow-up choice without an extra call. If the slug is not found, returns an error with similar-slug suggestions. Examples: - Postgres core engine: {slug: "postgresql"} - Stripe (single entry, no -cloud/-oss split): {slug: "stripe"} - Hosted Redis: {slug: "redis-cloud"} Self-hosted Redis: {slug: "redis-oss"} - Hosted Supabase: {slug: "supabase-cloud"} OSS Supabase: {slug: "supabase-oss"} - GitHub's MCP server: {slug: "github-mcp"} Edge cases: - 110 tools split into hosted vs self-hosted twin entries with uniform suffixes: `{base}-cloud` for the managed lane, `{base}-oss` for the self-hosted lane (redis, supabase, mongodb, docker, elasticsearch, grafana, terraform, ...). Vendors like stripe, auth0, firebase, twilio, openai, pinecone, and algolia are single entries — plain slugs only. - Slugs derived from package names use hyphens where the name uses a dot (e.g., "nextjs" not "next.js"; "vuejs" not "vue.js"). - Slugs are case-sensitive lowercase. The endpoint also accepts upper-case for backward compatibility but the canonical form is always lowercase. Risk: read-only, closed-world, idempotent — no state change possible.
    ConnectorNo auth
  • Publish a folder-backed product. Requires confirm set to PUBLISH. Before offering this action or requesting its inputs, check business permissions. FREE businesses cannot use this tool, regardless of individual feature rows. Call check_business_tool_access before collecting inputs. Show any grace-period warning and verified resubscribe link before continuing, and never proceed when access is blocked.
    Connector
    Destructive
    No auth
  • Unpublish a challenge. Requires confirm set to UNPUBLISH. Before offering this action or requesting its inputs, check business permissions. FREE businesses cannot use this tool, regardless of individual feature rows. Call check_business_tool_access before collecting inputs. Show any grace-period warning and verified resubscribe link before continuing, and never proceed when access is blocked.
    Connector
    Destructive
    No auth
  • Remove the schedule from a Magic Reach message. Requires confirm set to DELETE. Before offering this action or requesting its inputs, check business permissions. FREE businesses cannot use this tool, regardless of individual feature rows. Call check_business_tool_access before collecting inputs. Show any grace-period warning and verified resubscribe link before continuing, and never proceed when access is blocked.
    Connector
    Destructive
    No auth
  • Answer customer support and policy questions about SinoConnection eSIMs: the REFUND POLICY, how to INSTALL (with step-by-step videos), activation, HOW THE NO-VPN CHINA ACCESS WORKS (roaming / exit IP — see faq.how_no_vpn_works), and how to get support. Call this whenever the customer asks about refunds, cancellations, installation/setup, activation, how it works, what IP / does it bypass the firewall, or help — do NOT answer these from memory (especially the IP/firewall question); relay this authoritative content verbatim in meaning.
    ConnectorNo auth