supabase/mcp

Not tested

Supabase endpoint returned HTTP 401; MCP initialization reports Remote MCP authentication required (HTTP 401).

Answers apply to each recorded setup, revision and operation. Earlier observations remain in Run details.

Linux / Luna: needs a key we did not have · Oct 23, 2026 · 9f0741069409 · codex / codex-cli 0.163.0
Recorded operation: Remote hosted MCP connection · initialize + tools/list · https://mcp.supabase.com/mcp

Does what it says

No concrete claims identified

README makes no concrete product claims.

MCP

Documented only

Local or hosted

local

Local: runs on your machine

Needs keys or browser

Needs a key or login on some setups

Maintained

Maintained

actively maintained: last commit 0 days ago; 66 commits and 66 merged PRs in 90 days; 72 open issues, 58 open PRs; 17 of 34 recent threads got a maintainer reply, median first reply 99.4h; latest release 2026-10-14

Last commit Oct 23, 2026

Examples

1 of 1 ran as expected

• Build the documented MCP server packages: command completed successfully

  Source: package.json scripts.build

  Input: pnpm install --frozen-lockfile

  Expected: All three packages compile

  Command: pnpm build

  Observed: server-supabase build: DTS dist/platform/api-platform.d.cts 582.00 B packages/mcp-server-supabase build: DTS dist/index.d.cts 94.66 KB packages/mcp-server-supabase build: DTS dist/platform/index.d.cts 21.51 KB packages/mcp-server-supabase build: DTS dist/cli.d.ts 20.00 B packages/mcp-server-supabase build: DTS dist/platform/api-platform.d.ts 581.00 B packages/mcp-server-supabase build: DTS dist/index.d.ts 94.66 KB packages/mcp-server-supabase build: DTS dist/platform/index.d.ts 21.51 KB packages/mcp-server-supabase build: Done

Evidence

not graded: our checker rejected this run

The test agent reported: Build Supabase MCP server and initialize hosted MCP endpoint

Agent interfaces

CLI (documented only), MCP (documented only)

CLI (documented only), MCP (documented only)

Observed interfaces were exercised by the checker. Documentation alone does not confirm compatibility.

Tested with

Codex / Luna

• Linux: Codex / Luna · agent codex-cli 0.163.0 · Needs credentials · Oct 23, 2026 on 9f0741069409

Each entry describes its recorded operation and source revision.

Safety

Made outbound HTTPS connections: yes (hosts not recorded) by <guest-path>

Review signals across current setups: connection review. 180 listed items (named-host connections, static matches, dependency advisories) are below and do not change this verdict. 6 static matches retained as context.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 216.150.1.193:443 10 attributed processes.

Gitleaks found a possible hardcoded secret; value withheld. 2 distinct locations. 4 findings.

OSV reports a known vulnerability in this dependency version. 22 distinct locations. 86 findings.

Full event, path and process lists for each observed setup:

• linux · Haiku 5.5 safety evidence →
• linux · Luna safety evidence →