// MCP TOOL REFERENCE

SUPABASE TOOLS

32 tools from the Supabase MCP Server, categorised by risk level.

// ALL 32 SUPABASE TOOLS

READ 20 tools

Read get_advisors Gets a list of advisory notices for a Supabase project. LLMs can use this to check for security vulnerabili... Read get_cost Gets the cost of a new project or branch for an organization. Read get_edge_function Retrieves file contents for an Edge Function in a Supabase project. Read get_logs Gets logs for a Supabase project by service type (api, postgres, edge functions, auth, storage, realtime). ... Read get_organization Gets details for an organization. Read get_project Gets details for a project. Read get_project_url Gets the API URL for a project. Read get_publishable_keys Gets the anonymous API keys for a project. Returns an array of client-safe API keys including legacy anon k... Read get_storage_config Gets the storage config for a Supabase project. Read list_branches Lists all development branches. Read list_edge_functions Lists all Edge Functions in a Supabase project. Read list_extensions Lists all extensions in the database. Read list_migrations Lists all migrations in the database. Read list_organizations Lists all organizations that the user is a member of. Read list_projects Lists all Supabase projects for the user. Read list_storage_buckets Lists all storage buckets in a Supabase project. Read list_tables Lists all tables within the specified schemas. Read pause_project Pauses a project. Read rebase_branch Rebases development branch on production to handle migration drift. Read search_docs Searches the Supabase documentation for up-to-date information. LLMs can use this to find answers to questi...

WRITE 8 tools

Write apply_migration Applies a SQL migration to the database. SQL passed to this tool will be tracked within the database, so LL... Write confirm_cost Confirms the user's understanding of new project or branch costs. This is required to create a new project ... Write create_branch Creates a development branch with migrations from production branch. Write create_project Creates a new Supabase project. Write generate_typescript_types Generates TypeScript types based on the database schema. LLMs can save this to a file and use it in their c... Write merge_branch Merges migrations and edge functions from a development branch to production. Write restore_project Restores a project. Write update_storage_config Updates the storage config for a Supabase project (requires a paid plan).

DESTRUCTIVE 2 tools

Destructive delete_branch Deletes a development branch. Destructive reset_branch Resets migrations of a development branch to a prior version.

EXECUTE 2 tools

Execute deploy_edge_function Deploys a new Edge Function to a Supabase project. LLMs can use this to deploy new functions or update exis... Execute execute_sql Executes raw SQL in the database. LLMs should use this for regular queries that don't change the schema.

// RUNNING THIS SERVER

The managed route: connect Supabase through the PolicyLayer gateway — every tool call above is checked against your policy before it runs, with a full audit log.

DIRECT INSTALL (UNMANAGED) npx -y @modelcontextprotocol/server-supabase

// FAQ

How many tools does the Supabase MCP server have? +

The Supabase MCP server exposes 32 tools across 4 categories: Read, Write, Destructive, Execute.

How do I enforce policies on Supabase tools? +

Route the Supabase server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard — they are enforced on every call before it reaches the server.

What risk categories do Supabase tools fall into? +

Supabase tools are categorised as Read (20), Write (8), Destructive (2), Execute (2). Each category has a recommended default policy.

Let agents act without letting them run wild.

Route your MCP servers through PolicyLayer and every tool call is checked against your policy before it runs — allow, deny, or require approval. Per-identity grants. Full audit log. Live in minutes.

SECURE YOUR MCP →

Free to start. No card required.

4,600+ MCP servers and 31,000+ tools scanned and risk-classified.