Supabase MCP servers: which one to use
Use Supabase's own server for projects on supabase.com. For a self-hosted Supabase, use the community self-hosted server.
- Servers
- 12
- active
- Official
- 1
- by Supabase
- Hosted
- 4
- nothing to install
- Local
- 9
- runs on your machine
- OAuth
- 1
- sign in, no key
Supabase publishes its own MCP server, and it is the one to start with. You sign in with your Supabase account, and a read-only setting on its address limits it to reading data. For self-hosted Supabase and the local CLI, the official server offers only a limited set of tools and no OAuth sign-in, so a community server built for self-hosting can fit better. The older Query MCP server is no longer actively maintained by its author, who points people to the official one.
Good for
- Developers on supabase.com who want Claude or Cursor to inspect tables and run SQL
- Teams running their own self-hosted Supabase
- Anyone who wants an assistant that can read but not change data
- Builders who want their project checked for exposed data
Which Supabase MCP server to use
Use Supabase's own server for hosted projects, and add its read-only setting for anything that matters. For a self-hosted stack try the self-hosted server, and use Supabase Security MCP to audit a project for exposed data.
| Server | Official | Runs | Sign-in | Read-only option | GitHub stars |
|---|---|---|---|---|---|
| For Supabase | |||||
| SupabaseThis page | Yes | HostedLocal | Account | URL setting | 3K |
| Query MCP | No | Local | Database password | Mode setting | 835 |
| Supabase Security MCP | No | Local | Access token | Preview, then confirm | 1 |
| Other tools for the same job | |||||
| Self-hosted Supabase MCP | No | Local | JWT or key | – | 138 |
All Supabase MCP servers
12 active · 1 official · official first, then by GitHub stars
SupabaseOfficialHosted or LocalOAuthMCP server for interacting with the Supabase platform
3K GitHub stars
supabase-mcp-serverLocalQuery MCP enables end-to-end management of Supabase via chat interface: read & write query executions, management API support, automatic migration versioning, access to logs and much more.
835 GitHub stars- SB-MCPLocal
Supabase Model Context Protocol (MCP) server for CRUD operations and Edge Functions
4 GitHub stars - supabase-mcp-liteHosted
Same functionality, consuming only 1/20 of the context window tokens.
2 GitHub stars - mcp-memory-supabaseLocal
MCP Knowledge Graph Memory Server with Supabase + pgvector for semantic search
1 GitHub stars - supabase-security-mcpLocal
MCP server for Supabase security: audit (with active anon-key probe that proves leaks live), dry-run fixes, and apply remediations with rollback. The only auditor that closes the loop in your AI agent.
1 GitHub stars - supabase-security-mcpLocal
MCP server that audits a Supabase project's security from Claude, Cursor or any MCP client: anon-key probe, RLS policy audit, and a two-account cross-tenant test.
0 GitHub stars - supabase-mcp-communityLocal
MCP server for Supabase — 31 tools for database CRUD, storage, auth admin, project management, edge functions, and secrets via REST + Management APIs
0 GitHub stars - Health Data (your own Supabase)Local
Your health data (weight, macros, weigh-ins) as MCP tools — in your own Supabase, zero custody.
0 GitHub stars - SupabaseHosted
Your Supabase account in natural language: run SQL, apply migrations, manage tables, storage, edge f
0 GitHub stars - Supabase URL ShapeHosted
Check a Supabase project URL shape. Secrets discarded.
0 GitHub stars - @mrfentmen/supabase-mcpLocal
Query your Supabase project: table rows, auth users, RPC. Endpoints per official docs.
Questions
Is there an official Supabase MCP server?
Yes. Supabase publishes it, and the hosted address is https://mcp.supabase.com/mcp. Your client prompts you to log in to Supabase, so pick the organization that holds your project.
How do I make the Supabase server read-only?
Add read_only=true to the server address. The README says this leaves out the tools that change data.
Can I limit it to one project?
Yes. Add project_ref=<your project id> to the address. The README says this removes account-level tools and the project id from the tool inputs.
Does it work with self-hosted Supabase?
Yes, with limits. Supabase's server is available at /mcp on the local CLI and on self-hosted setups, with a limited set of tools and no OAuth sign-in. The community Self-hosted Supabase MCP is built only for that case.
Does the official server work in Claude and Cursor?
Yes. Supabase's README says it connects Supabase projects to Cursor, Claude, Windsurf and other AI assistants, and Supabase is also listed as a connector on claude.com.
Is Query MCP still a good choice?
Not for new setups. Its README says the author no longer actively maintains it since Supabase released its own server, and recommends the official one.
Which server checks my project for exposed data?
Supabase Security MCP. It audits a project, previews each fix inside a rolled-back transaction, and applies a fix only when you confirm. It needs a Supabase access token with read and write rights.
Is it free?
The servers are open source: Supabase's is Apache-2.0, Query MCP is Apache-2.0 and the self-hosted server is MIT. Supabase's hosted server signs you in to your Supabase account.