OfficialClaude connector: yes

Supabase MCP server & Claude connector

Does Supabase have an official MCP server or Claude connector?

Official

As of October 2026, Supabase publishes an official MCP server, hosted at mcp.supabase.com/mcp and open source at supabase/mcp, and it is listed in Anthropic's connector directory. It signs in with browser OAuth. The server can run SQL and migrations, so Supabase advises read-only mode and project scoping.

Last checked October 18, 2026

Verdict and evidence

What we checked: Supabase MCP server
Published by: Supabase (official)
Runs: Hosted (remote)
Sign-in: OAuth sign-in
Stage: Generally available
Plan: Branching tools are experimental and need a paid plan; other plan requirements not stated.
Endpoint: https://mcp.supabase.com/mcp

Evidence

Supabase MCP server docs (supabase.com, seen October 18, 2026)
supabase/mcp (github.com, seen October 18, 2026)
Supabase connector (Claude directory) (claude.com, seen October 18, 2026)

What an AI can do in Supabase

Read

List tableslist_tables
Get security and performance advisorsget_advisors
Search Supabase docssearch_docs

Create

Deploy an Edge Functiondeploy_edge_function
Create a projectcreate_project

Update

Apply a migrationapply_migration
Pause a projectpause_project

Run

Execute SQLexecute_sql

From the publisher’s documentation for the version we checked. Not every tool is listed.

Setup

Claude Code

Add over HTTP, then run /mcp and authenticate.

claude mcp add --scope project --transport http supabase "https://mcp.supabase.com/mcp"

Source

Cursor

Add to .cursor/mcp.json.

{
  "mcpServers": {
    "supabase": {
      "url": "https://mcp.supabase.com/mcp"
    }
  }
}

Source

VS Code

Add to .vscode/mcp.json.

{
  "servers": {
    "supabase": {
      "type": "http",
      "url": "https://mcp.supabase.com/mcp"
    }
  }
}

Source

Safety check

Pass
Publisher verified
Endpoint on supabase.com, docs on supabase.com, repo github.com/supabase/mcp, and the Claude directory shows 'Made by Supabase'.
Pass
Auth model
Browser OAuth via dynamic client registration by default; scoped PAT in an Authorization header is optional for CI.
Flag
Write and delete access
Default exposes write tools (execute_sql, apply_migration, deploy_edge_function, create_project). Read-only is available via ?read_only=true, plus project_ref scoping and features filtering. Docs warn destructive-SQL detection may not catch everything.
Pass
Tool-description injection scan
Read Supabase's documented tool groups and security guidance; found no text addressed to the AI. Docs themselves warn about prompt injection via data. Source tool description strings were not read.
Pass
Repo maintenance
gh api supabase/mcp: pushed_at 2026-10-17, not archived, 2,959 stars.

FAQ

Does Supabase have an official MCP server?

Yes. Supabase hosts it at https://mcp.supabase.com/mcp and maintains it at github.com/supabase/mcp.

Is Supabase a Claude connector?

Yes. The Claude directory lists it as Anthropic verified and made by Supabase.

Is there a read-only mode?

Yes. Add ?read_only=true to the URL to run queries as a read-only Postgres user; project_ref scopes it to one project.

Is it safe to use on production data?

Supabase warns of prompt injection and says to connect to production only when needed, with read-only mode and project scoping.

Can I use it locally or self-hosted?

Yes, with a limited subset of tools and no OAuth 2.1, per the Supabase README.

Last reviewed October 18, 2026.

Get your badge

Work at Supabase? Show that your MCP server is independently checked. The badge reflects this page: it updates when we re-check, and it links readers to the evidence.

Markdown (README)

[![MCP or Not: Official · Checked Oct 2026](https://mcpornot.com/badge/supabase.svg)](https://mcpornot.com/supabase)

HTML

<a href="https://mcpornot.com/supabase"><img src="https://mcpornot.com/badge/supabase.svg" alt="MCP or Not: Official · Checked Oct 2026" height="20"></a>

Compare Supabase

Something changed?

Vendors ship MCP updates often. If Supabase launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.

New official MCP servers, weekly

One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.