{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-01-29","analysis_method":"capability_triage","category":"Web Connector","description":"Manage Supabase projects directly through Claude. Execute SQL queries on PostgreSQL databases, design and modify table schemas, deploy serverless edge functi...","did":"com-supabase-mcp","homepage_url":"","icon":"https://icons.duckduckgo.com/ip3/supabase.com.ico","id":"com.supabase/mcp","installs":0,"last_scanned":"","license":"","long_description":"Manage Supabase projects directly through Claude. Execute SQL queries on PostgreSQL databases, design and modify table schemas, deploy serverless edge functions, and configure user authentication. Access real-time logs for debugging, generate TypeScript types for your schema, create and apply database migrations, and manage development branches through natural language commands.","name":"Supabase","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=com-supabase-mcp&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"Supabase","publisher_url":"https://supabase.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.","evidence":"Connector has 32 tools; permissions on claude.ai/directory: \"unknown\". Data flows out of the connected service into the model.","remediation":{"block_tool_categories":[],"steps":["Connect using an account that only has access to the information you actually want Claude to read - not your main admin login.","When you grant access, pick the smallest set of folders, mailboxes, or channels possible.","Check the connector's activity log every so often to make sure nothing unexpected is being read."]},"risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"},{"description":"This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.","evidence":"7 state change tools on this connector - e.g. create_project, restore_project, create_branch, merge_branch and 3 more.","remediation":{"block_tool_categories":["state_change"],"steps":["Try the connector on a test account first to see what it changes before letting it touch your real records.","Where the connected service supports it, give Claude read-only access and only allow writes for the specific things you need updated.","In the tools list below, turn off any tool you don't actively need - the ones tagged Block are the most important to disable."]},"risk_type":"modifies_data","severity":"medium","title":"Can change or update your information"},{"description":"This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.","evidence":"2 destructive tools on this connector - e.g. delete_branch, reset_branch.","remediation":{"block_tool_categories":["destructive"],"steps":["In the tools list below, turn off any tool tagged Block - most workflows don't need Claude to delete anything.","If you really do need deletion, use a login that doesn't have delete permission and have a person handle removals manually.","Make sure the connected service has a trash / recycle bin enabled so accidental deletes can be recovered."]},"risk_type":"deletes_data","severity":"high","title":"Can permanently delete data"},{"description":"Anything you share with this connector flows through one or more third-party services. Those companies see, store, and may use the data according to their own policies.","evidence":"Server runs at mcp.supabase.com/mcp; queries and responses pass through the publisher's infrastructure.","remediation":{"block_tool_categories":[],"steps":["Treat anything you tell this connector as if you sent it directly to the third-party company - because you did.","Check how long that company keeps your data and how to delete it.","Avoid putting health info, customer names, or payment details into this connector unless you have a written agreement with that company."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Sends your data to outside companies"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["network_access","reads_private_data","database_access","deletes_data","shell_access","code_deployment"],"tools":[{"description":"Lists organizations the user belongs to for account management.","name":"list_organizations"},{"description":"Retrieves details for a specific organization.","name":"get_organization"},{"description":"Lists Supabase projects accessible to the user.","name":"list_projects"},{"description":"Retrieves details for a specific Supabase project.","name":"get_project"},{"description":"Returns cost information for projects or organizations.","name":"get_cost"},{"description":"Confirms acknowledged cost before performing a billable action.","name":"confirm_cost"},{"description":"Creates a new Supabase project.","name":"create_project","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}},{"description":"Pauses a Supabase project.","name":"pause_project"},{"description":"Restores a previously paused Supabase project.","name":"restore_project","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}},{"description":"Creates a new database branch for the project.","name":"create_branch","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}},{"description":"Lists database branches for the project.","name":"list_branches"},{"description":"Deletes a database branch.","name":"delete_branch","risk":{"category":"destructive","level":"high","recommendation":"Block by default. Only enable for read-only or sandbox accounts; require explicit human confirmation for any destructive action.","why":"Irreversibly removes data or resources. A prompt-injection or mistaken instruction could destroy production data with no recovery path."}},{"description":"Merges a database branch into its parent.","name":"merge_branch","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}},{"description":"Resets a database branch to a clean state.","name":"reset_branch","risk":{"category":"destructive","level":"high","recommendation":"Block by default. Only enable for read-only or sandbox accounts; require explicit human confirmation for any destructive action.","why":"Irreversibly removes data or resources. A prompt-injection or mistaken instruction could destroy production data with no recovery path."}},{"description":"Rebases a database branch onto its parent.","name":"rebase_branch"},{"description":"Lists all tables in the database.","name":"list_tables"},{"description":"Lists available and installed Postgres extensions.","name":"list_extensions"},{"description":"Lists database migrations for the project.","name":"list_migrations"},{"description":"Applies a database migration.","name":"apply_migration"},{"description":"Executes SQL queries against the project database.","name":"execute_sql"},{"description":"Retrieves service logs for API, Postgres, Edge Functions, Auth, Storage, or Realtime.","name":"get_logs"},{"description":"Returns security and performance advisor findings for the project.","name":"get_advisors"},{"description":"Returns the API URL for a project.","name":"get_project_url"},{"description":"Returns the anon/public publishable keys for a project.","name":"get_publishable_keys"},{"description":"Generates TypeScript types from the database schema.","name":"generate_typescript_types","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}},{"description":"Searches the Supabase documentation.","name":"search_docs"},{"description":"Lists storage buckets in the project.","name":"list_storage_buckets"},{"description":"Retrieves the project's storage configuration.","name":"get_storage_config"},{"description":"Updates the project's storage configuration.","name":"update_storage_config","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}},{"description":"Lists all Edge Functions in the project.","name":"list_edge_functions"},{"description":"Retrieves a specific Edge Function.","name":"get_edge_function"},{"description":"Deploys an Edge Function to the project.","name":"deploy_edge_function","risk":{"category":"state_change","level":"medium","recommendation":"Allow only for low-stakes resources; require approval for production data changes.","why":"Creates, modifies, or uploads data on the connected service. Hijacking the tool can pollute records, plant content, or create rogue resources that bill the user."}}],"tools_count":32,"type":"web_connector","url":"https://claude.ai/directory/11ca66fc-1e98-49d5-ab9b-7cb4672a8f10","uuid":"427a19f7-135f-5bbc-9595-00710484acc9","version":""},"query_key":"supabase","schema_version":1,"status":"match"}