---
title: Supabase | Keycard
description: Supabase's official MCP server for database management, Edge Functions, branching, and project administration.
---

Provides full Supabase platform access including SQL execution, migration management, database branching (create/merge/rebase/reset), Edge Function deployment, project lifecycle (create/pause/restore), TypeScript type generation, log retrieval, security advisory checks, and documentation search.

Adding Supabase provisions three things in your zone: an upstream resource pointing at `https://mcp.supabase.com/mcp` (kept inside Keycard), a Keycard MCP Gateway URL - the downstream resource - that you install in Cursor, Claude Code, or any MCP client, and a provider for token exchange with Supabase’s OAuth issuer.

When your AI client makes a tool call, it sends a Keycard-issued access token to the gateway URL. Keycard’s STS exchanges that token for an upstream Supabase token, the gateway calls the upstream MCP, and the response is proxied back. Your zone’s [identity provider](/admin/identity-providers/index.md), [access policies](/admin/access-policies/index.md), and audit log apply to every call - the upstream credential never leaves Keycard. Each call is recorded in the audit log with the user identity, the resource accessed, and the policy decision.

## Tools

TOOLS

Tools the upstream server exposes through the Keycard MCP Gateway.

Supabase exposes 29 tools through the gateway:

- apply\_migration

  Apply a migration to the database (DDL operations)

- confirm\_cost

  Ask the user to confirm cost understanding before creating a project or branch

- create\_branch

  Create a development branch on a Supabase project

- create\_project

  Create a new Supabase project

- delete\_branch

  Delete a development branch

- deploy\_edge\_function

  Deploy an Edge Function to a Supabase project

- execute\_sql

  Execute raw SQL in the Postgres database

- generate\_typescript\_types

  Generate TypeScript types for a project

- get\_advisors

  Get advisory notices for security vulnerabilities or performance improvements

- get\_cost

  Get the cost of creating a new project or branch

- get\_edge\_function

  Retrieve file contents for an Edge Function

- get\_logs

  Get logs for a Supabase project by service type (last 24h)

- get\_organization

  Get details for an organization including subscription plan

- get\_project

  Get details for a Supabase project

- get\_project\_url

  Get the API URL for a project

- get\_publishable\_keys

  Get all publishable API keys for a project

- list\_branches

  List all development branches of a project

- list\_edge\_functions

  List all Edge Functions in a project

- list\_extensions

  List all extensions in the database

- list\_migrations

  List all migrations in the database

- list\_organizations

  List all organizations the user is a member of

- list\_projects

  List all Supabase projects for the user

- list\_tables

  List all tables in one or more schemas

- merge\_branch

  Merge migrations and edge functions from a branch to production

- pause\_project

  Pause a Supabase project

- rebase\_branch

  Rebase a development branch on production

- reset\_branch

  Reset migrations of a development branch

- restore\_project

  Restore a Supabase project

- search\_docs

  Search Supabase documentation using GraphQL

Show all 29 tools  Show fewer

## Install

INSTALL

Add Supabase to your zone and install the gateway URL into Cursor, Claude Code, or any MCP client.

Caution

Installing **Supabase** requires you to provide a **Client ID** and **Client Secret** from Supabase’s developer console. Have those ready before you start.

1. **Open the catalog**

   In your zone’s [Keycard Console](https://console.keycard.ai), go to **Applications** → **Add Application** → **Explore MCP Servers**.

2. **Find and install Supabase**

   Search for `Supabase` in the catalog and click **Install**. Enter the **Client ID** and **Client Secret** from your Supabase developer console when prompted.

3. **Connect your development tool**

   Once installed, Supabase appears on the **Applications** page with a **Keycard MCP Gateway URL**. Use the **Install** dropdown to add it to Cursor, Claude Code, or any MCP-compatible client.

## Related

RELATED

- [Catalog overview](/admin/catalog/index.md) - browse other MCP and API servers
- [Access policies](/admin/access-policies/index.md) - control who can use Supabase
- [Identity providers](/admin/identity-providers/index.md) - control who can sign in

[PreviousStytch](/admin/catalog/mcp-servers/stytch/index.md)[NextWebflow](/admin/catalog/mcp-servers/webflow/index.md)
