Scan a live deployment for exposed .env files, secrets in JS bundles, open Supabase/Firebase databases, CORS issues, and missing security headers using only passive GET requests.
MIT
675,126 tools. Updated 2026-10-19 03:16
"Supabase (open source Firebase alternative)" matching MCP tools:
- Terminates the active Supabase connection, requiring reconnection before using Supabase tools.MIT
- Creates an end-to-end migration from Lovable, Bolt, Base44, or Firebase to Supabase, handling discovery, database, data, storage, auth, and backend switchover.MIT
- List all migrations and filter by status to monitor project transfers from source platforms to Supabase infrastructure.MIT
- Check news cache status: Supabase connection, cache existence, age, and item counts per source.MIT
- Scan a local project folder to find leaked secrets, browser-exposed env vars, missing Supabase RLS, wildcard CORS, open Firebase rules, and unauthenticated API routes. Returns severity-ranked results.MIT
Matching MCP Servers
Firebase MCP Serverofficial
AlicenseNot gradedqualityAmaintenanceEnables interaction with Firebase projects and services, including deployment, database management, authentication, and local emulation, through natural language.3,402,836 npm4,475MIT- FlicenseAqualityCmaintenanceAn MCP server that enables AI clients to autonomously discover, analyze, fix, test, submit, and track open-source contributions on GitHub through specialized tools.12-
Matching MCP Connectors
Read, write, and conversationally review open-source flashcards through split read/write MCP tools.
Your Supabase account in natural language: run SQL, apply migrations, manage tables, storage, edge f
- Lists connected projects, filterable by sync mode, to review GitHub-to-Supabase sync status and spot paused or archived deployments.MIT
- Fetch Firebase-specific metadata for a GCP project to inspect its Firebase configuration and status. Requires Firebase already enabled on the project.MIT
- Generate a pre-launch security checklist for AI-built apps: secrets, Supabase RLS, Firebase rules, auth, payments. Get builder-specific notes to fix gaps before launch.MIT
- Generate deployment steps for cPanel, VPS, Docker, Vercel, Render, Railway, Cloudflare Pages, Firebase, Supabase, or app stores.MIT
- Permanently delete a sub-account and revoke all access, including Firebase auth and template records. Irreversible action—use only when certain.MITDestructive
- Retrieve the name of the currently connected Supabase instance or receive a no-connection notice.MIT
- Create a Firebase link connecting a GA4 property to a Firebase project. Requires confirmation and write access enabled.MIT
- Test outbound HTTPS connectivity to generic and Supabase endpoints, returning detailed errors for troubleshooting network issues.MIT
- Retrieve rune pricing data from Magic Eden when Ordiscan shows zero prices, providing an alternative market data source.MIT
- Removes a Firebase link from GA4. Requires an explicit confirm=true and the GA4_MCP_ENABLE_DELETES flag to be enabled.MIT
- List Supabase instances on Aliyun RDS to discover instance names, status, and connection URLs for connecting.MIT
- Delete a Google Analytics 4 data stream by providing its resource name and confirmation, removing its measurement ID or Firebase app ID.MIT
- Fetches the schema of a connected Supabase database to display tables and columns for inspection.MIT
- Checks if the Supabase JWT secret is configured and returns a preview of the configuration.MIT
- Extract page metadata including title, description, canonical URL, author, publication date, favicon, Open Graph, and Twitter card fields. Use when you need a lightweight alternative to full page extraction.MIT