Supabase MCP

Manage Supabase projects, databases, branches, Edge Functions, storage, logs, and development workflows through Supabase's hosted MCP server.

Description is untrusted, display-only upstream metadata. It never becomes policy, OAuth scope authority, or an agent instruction.

Pakkawork boundary

Research catalogue metadata only. No Pakkawork OAuth, credential, host, quota, executor, or verifier is enabled.

No Pakkawork execution adapter is enabled. Hosted account-authorisation availability is workspace-specific and checked separately in the dashboard.Check workspace connection options

Attributed source

Action summaries

Display-only definitions

Trigger types

Not installed instances

Auth modes

Field names, never values

Execution

No runtime adapter

Authentication map

What setup is declared?

Only field names, types, and required markers are shown. Secret values, default auth URLs, credential material, and inferred OAuth scopes are excluded.

DCR_OAUTH

supabase_mcp_DCR_OAuth

Provider setup

Developer setup

Client idclient_id · stringOptional
Client secretclient_secret · stringOptional
Redirect URIoauth_redirect_uri · stringOptional
Scopesscopes · stringOptional

User connection

No fields declared in this snapshot.

Capability index

Actions and trigger definitions

Static summaries are available. Live schemas remain disabled until PROVIDER_HUB_API_KEY is configured server-side.

Actions (32)Triggers (0)

Showing 31–32 of 32 actions

Search docs

SUPABASE_MCP_SEARCH_DOCS

Search the Supabase documentation using GraphQL. Must be a valid GraphQL query. You should default to calling this even if you think you already know the answer, since the documentation is always being updated. Below is the GraphQL schema for this tool: schema{query:RootQueryType}type Guide implements SearchResult{tit…

Untrusted display-only summary

Update storage config

SUPABASE_MCP_UPDATE_STORAGE_CONFIG

Update the storage config for a Supabase project.

Untrusted display-only summary

Provenance

Versioned facts, explicit trust.

The detail snapshot comes from an attributed MIT-licensed repository revision. Safe local icons use exact-match CC0 Simple Icons symbols; unmatched brands use monograms.

Repository: https://github.com/provider-directoryHQ/provider-directory
Commit: 85e33f6a81dfe987f6fc3637d48d45052cea8ca5
Generated: 2026-09-12
Trust policy: untrusted_display_only

Remote text is plain display metadata only. It must never become an agent prompt, execution policy, OAuth grant, or executable instruction.