Supabase's MCP server lets an agent work on your Supabase project while you build: read the schema, write and apply migrations, run SQL, generate TypeScript types, deploy Edge Functions, read logs and run the security and performance advisors. In practice that covers requests like "add a profiles table with row-level security", "why is this insert failing? check the logs" or "run the advisors before we launch".
It's a developer tool. Supabase says not to hand it to customers or end users, because it acts with your own developer permissions.
From the publisher
Supabase's official MCP server connects AI assistants to Supabase projects for table management, SQL execution, migrations, edge functions, logs, advisors and docs search. The hosted server uses OAuth dynamic client registration and supports read-only mode, project scoping and feature-group filtering via URL parameters.
What you need
- A Supabase account. The hosted server at
https://mcp.supabase.com/mcpsigns you in with OAuth and dynamic client registration, so you don't create a token. Pick the organization that holds your project when you log in. - A client that speaks remote MCP. For Codex, Supabase documents
codex mcp add supabase --url https://mcp.supabase.com/mcpfollowed bycodex mcp login supabase. For ChatGPT, Supabase points to its listing in the directory. - For CI or headless agents: a personal access token sent as a bearer header, scoped to one project with only the permissions your tools need.
- For local development: the Supabase CLI serves the server at
http://localhost:54321/mcp, with fewer tools and no OAuth.
Good to know
- It can run any SQL you can.
execute_sqlandapply_migrationare on by default, along with deploying Edge Functions and, without project scoping, creating and pausing projects. - Three URL options cut that down.
read_only=trueruns queries as a read-only Postgres user,project_ref=<id>limits the server to one project and drops account tools, andfeatures=database,docsenables only the tool groups you list. - Your data can carry instructions. Supabase's own example is a support ticket whose text tells the model to dump a sensitive table. Results are wrapped with a warning to the model, which Supabase calls not foolproof. Keep manual approval on.
- Confirmations depend on your client. Destructive SQL and paid actions such as creating a project or branch can trigger a confirmation form, but only in clients that support MCP elicitation. Supabase calls these a guardrail, not a guarantee.
- Some tools cost money or a paid plan. Creating projects and branches can add charges, and branching tools need a paid plan.
Also available as
Connect
- 1Connect it in ChatGPT
Turn on Developer mode in ChatGPT (Settings → Security and login), open Plugins, select + and paste https://mcp.supabase.com/mcp as the MCP server URL, then sign in with OAuth. Add it to a chat from the composer's tools menu.
- 2Or add it to Codex or the API
codex mcp add supabase --url https://mcp.supabase.com/mcp codex mcp login supabaseThe login command opens a browser to finish OAuth.
Configs are generated from the publisher's documented endpoint. Check their docs for plan requirements and scopes. New to this? Read the step-by-step tutorial.
Tools 10
list_tablesexecute_sqlapply_migrationlist_migrationsget_logsget_advisorsgenerate_typescript_typesdeploy_edge_functionlist_edge_functionssearch_docsThings to ask
- “List the tables in my Supabase project”
- “Create a migration that adds a profiles table with RLS”
- “Generate TypeScript types for my database”
- “Check the security advisors for my project”
Remove it
- 1In ChatGPT
Open the connection's details page in your plugin settings (chatgpt.com/plugins) and disconnect or delete it.
- 2In Codex
codex mcp remove supabaseOr delete the [mcp_servers.supabase] block from ~/.codex/config.toml.
Supabase: common questions
- Is the Supabase MCP server safe to use with production data?
Supabase advises against it unless a task really needs production evidence. If it does, scope the server to that project, turn on read-only mode, limit the feature groups and ask for the narrowest query. For schema work, use a development branch instead. The main risk is prompt injection from rows in your own tables, so review every tool call before approving it.
- How do I make the Supabase MCP server read-only?
Add query parameters to the server URL, for example
https://mcp.supabase.com/mcp?project_ref=<id>&read_only=true. Read-only mode runs all SQL as a read-only Postgres user, and project scoping removes the account-level tools. The configuration panel in Supabase's docs and the MCP tab in the dashboard can build the URL for you.- What's the difference between the Supabase MCP server, app and plugin?
The Supabase app is the ChatGPT listing that Supabase's docs point ChatGPT users to. The Supabase plugin, made by Supabase for OpenAI's curated marketplace, packages that app, a connection to this hosted MCP server and two skills,
supabaseandsupabase-postgres-best-practices. Add the MCP server directly when you want URL options such as read-only mode, or for the OpenAI API and other clients.
Learn more
Guide updated Oct 24, 2026. Sources: supabase.com, github.com, github.com, learn.chatgpt.com.