Supabase
Developer ToolsSupabase's official MCP server for database management, Edge Functions, branching, and project administration.
Provides full Supabase platform access including SQL execution, migration management, database branching (create/merge/rebase/reset), Edge Function deployment, project lifecycle (create/pause/restore), TypeScript type generation, log retrieval, security advisory checks, and documentation search.
Adding Supabase provisions three things in your zone: an upstream resource pointing at https://mcp.supabase.com/mcp (kept inside Keycard), a Keycard MCP Gateway URL - the downstream resource - that you install in Cursor, Claude Code, or any MCP client, and a provider for token exchange with Supabase’s OAuth issuer.
When your AI client makes a tool call, it sends a Keycard-issued access token to the gateway URL. Keycard’s STS exchanges that token for an upstream Supabase token, the gateway calls the upstream MCP, and the response is proxied back. Your zone’s identity provider, access policies, and audit log apply to every call - the upstream credential never leaves Keycard. Each call is recorded in the audit log with the user identity, the resource accessed, and the policy decision.
Tools the upstream server exposes through the Keycard MCP Gateway.
Supabase exposes 29 tools through the gateway:
- apply_migration
- Apply a migration to the database (DDL operations)
- confirm_cost
- Ask the user to confirm cost understanding before creating a project or branch
- create_branch
- Create a development branch on a Supabase project
- create_project
- Create a new Supabase project
- delete_branch
- Delete a development branch
- deploy_edge_function
- Deploy an Edge Function to a Supabase project
- execute_sql
- Execute raw SQL in the Postgres database
- generate_typescript_types
- Generate TypeScript types for a project
- get_advisors
- Get advisory notices for security vulnerabilities or performance improvements
- get_cost
- Get the cost of creating a new project or branch
- get_edge_function
- Retrieve file contents for an Edge Function
- get_logs
- Get logs for a Supabase project by service type (last 24h)
- get_organization
- Get details for an organization including subscription plan
- get_project
- Get details for a Supabase project
- get_project_url
- Get the API URL for a project
- get_publishable_keys
- Get all publishable API keys for a project
- list_branches
- List all development branches of a project
- list_edge_functions
- List all Edge Functions in a project
- list_extensions
- List all extensions in the database
- list_migrations
- List all migrations in the database
- list_organizations
- List all organizations the user is a member of
- list_projects
- List all Supabase projects for the user
- list_tables
- List all tables in one or more schemas
- merge_branch
- Merge migrations and edge functions from a branch to production
- pause_project
- Pause a Supabase project
- rebase_branch
- Rebase a development branch on production
- reset_branch
- Reset migrations of a development branch
- restore_project
- Restore a Supabase project
- search_docs
- Search Supabase documentation using GraphQL
Install
Section titled “Install”Add Supabase to your zone and install the gateway URL into Cursor, Claude Code, or any MCP client.
-
Open the catalog
In your zone’s Keycard Console, go to Applications → Add Application → Explore MCP Servers.
-
Find and install Supabase
Search for
Supabasein the catalog and click Install. Enter the Client ID and Client Secret from your Supabase developer console when prompted. -
Connect your development tool
Once installed, Supabase appears on the Applications page with a Keycard MCP Gateway URL. Use the Install dropdown to add it to Cursor, Claude Code, or any MCP-compatible client.
Related
Section titled “Related”- Catalog overview - browse other MCP and API servers
- Access policies - control who can use Supabase
- Identity providers - control who can sign in