supabase MCP servers

Find and fix drift between Supabase environments: schema, RLS, roles, auth, storage and more.

Grade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.

Finds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.

Query your Apple Health data from your own Supabase/Postgres via local MCP.

Search Notion and Supabase through one safety-focused MCP server.

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions

Runs an eight-stage isolation test against your staging Supabase and issues a signed attestation.

Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.

Supabase-compatible Postgres for agents: projects, branches, SQL, auth, storage, email.

Read-only VibeRaven guides: explain a finding, search launch guides, get a Supabase checklist.

Your health data (weight, macros, weigh-ins) as MCP tools — in your own Supabase, zero custody.

MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.

Your Supabase account in natural language: run SQL, apply migrations, manage tables, storage, edge f

Push rows from a dataset, file or Google Sheet into a Postgres, Supabase, Neon or MySQL table.

Persistent task board synced across Claude Code and Claude.ai, backed by Supabase.

Deterministic security layer your AI can't be. 604 rules, 39 tools, CLI + doctor + host audit.

One PAT, any MCP agent: Vercel, GitHub, Cloudflare, Supabase, GCP — unified dev infra gateway.

Read-only Postgres/Supabase RLS audit with a rolled-back probe that proves who can read which rows.

Manage pages, posts, blocks, media and settings of your self-hosted NextBlock site.

Open source commerce in your own Supabase: catalog, checkout, orders and bookings, run by your AI.

Same functionality, consuming only 1/20 of the context window tokens.