Supabase MCP server for your AI

Apply a database migration

Call a Postgres function through the Data API (an RPC), with its arguments by name.

Permanently delete the rows matching filters.

One table's columns (type, nullable, default), primary key, foreign keys, indexes and Row Level Security policies, in one answer.

Generate TypeScript types.

Add rows to a table, or update on conflict with upsert=true.

List applied migration versions

List a project's tables and views with row estimates, size and whether Row Level Security is on.

Run a sql query as supabase_read_only_user.

Run sql query.

Read rows from a table or view without writing SQL.

Change the rows matching filters.

Create a new project in the connection's organization.

Gets a specific project that belongs to the authenticated user

Everything to start working with a project in one answer: its status, region and database version, the API URL, the publishable key an app uses, service health, and counts of Edge Functions, storage buckets and branches.

Gets project's service health status

Gets the list of available regions that can be used for a new project.

List all projects.

Pauses the given project

Restores the given project

Wait until a project that is starting, restoring, restarting or upgrading has settled, up to about 50 seconds per call.

Create an user in the project's Auth.

Fetch a listing of users.

Update user's account data.

Generate a presigned url to retrieve an object

Read a file from a storage bucket.

Lists all buckets

Search for objects under a prefix

Save a file into a storage bucket.

Create a database branch.

Gets project's auth config

List all database branches.

Merges a database branch.

Updates a project's auth config

List all organizations.

Get project api keys

List all secrets.

Show one project API key's real value, including a secret key, which has full access to the project's data.

Bulk create secrets.

A project's latest log lines from one service, newest first: api, postgres, edge_function (requests), edge_function_runtime (console output), auth, storage, realtime or branch_action.

Gets all project's logs in a single log stream.

Create an Edge Function or publish a new version.

Read an Edge Function's deployed source files as text, plus its settings.

Call a deployed Edge Function and return its status and answer.

List all functions.

Gets project performance advisors.

Gets project security advisors.

Accepts invitation for JIT database access.

Authorize user-id to role mappings for JIT access.

Create a login role for CLI with temporary password.

Initiates a creation of a restore point for a database

Delete existing login roles used by CLI.

Deletes the invite for an external user to a database for JIT access.

Delete JIT access by user-id.

Disables project's readonly mode for the next 15 minutes

Enables Database Webhooks on the project.

Gets the backup schedule for a project

Gets database metadata for the given project.

Get PostgREST OpenAPI spec.

Get user-id to role mappings for JIT access.

Get project's temporary access configuration.

Fetch an existing entry from migration history

Get project's pgbouncer config

Gets project's supavisor config

Gets project's Postgres config

Returns project's readonly mode status

Get restore points for project

Gets a specific SQL snippet

Get project's SSL enforcement configuration.

Invites an external user to a database for JIT access.

Lists all backups

List all user-id to role mappings for JIT access.

Lists SQL snippets for the logged in user

Patch an existing entry in migration history

Remove a read replica.

Restores a physical backup for a database

Restores a PITR backup for a database

Rollback database migrations and remove them from history table

Run a GraphQL query or mutation against the project's pg_graphql endpoint.

Set up a read replica.

Initiates an undo to a given restore point

Updates the backup schedule time for a project.

Updates the database password

Updates an user mapping for JIT access.

Update project's temporary access configuration.

Updates project's supavisor config

Updates project's Postgres config

Update project's SSL enforcement configuration.

Upsert a database migration without applying

Updates project's network restrictions.

Cancels the given project restoration

Create a notebook.

Add an AWS account to the project PrivateLink share.

Creates project claim token

Create a project

Remove network bans.

Delete a notebook

Remove an AWS account from the project PrivateLink share.

Remove an AWS account from a specific database PrivateLink share.

Deletes the given project

Revokes project claim token

Download project backup

Get database disk attributes

Gets project disk autoscale config

Get disk utilization

Gets project's network restrictions.

Get a notebook

Returns the project's eligibility for upgrades.

Gets the latest status of the project's upgrade.

Gets project claim token

Get a project's service configuration.

Gets project's network bans.

Gets project's network bans with additional information about which databases they affect.

List notebooks of a project.

Gets all projects for the given organization.

List AWS accounts attached to the project PrivateLink share

Lists available restore versions for the given project

Modify database disk

Updates project's network restrictions by adding or removing CIDRs.

Previews transferring a project to a different organizations, shows eligibility and impact

Restarts the given project

Transfers a project to a different organization

Update a notebook.

Updates the given project

Upgrades the project's Postgres version.

Create a new custom OIDC/OAuth provider.

Register OAuth client (admin).

Register a new SSO provider.

Delete custom OIDC/OAuth provider.

Delete OAuth client (admin).

Remove an SSO provider.

Delete an user.

Remove an user's MFA factor.

Generate a link to send in an email message.

Get custom OIDC/OAuth provider details.

Service healthcheck.

Get OAuth client details (admin).

Returns the SAML 2.0 Metadata XML.

Fetch SSO provider details.

Retrieve some of the public settings of the server.

Fetch user account data for an user.

Invite an user by email.

Fetch audit log events.

List all custom OIDC/OAuth providers.

List OAuth clients (admin).

Fetch a list of all registered SSO providers.

List all of the MFA factors for an user.

Regenerate OAuth client secret (admin).

Resends an one-time password (OTP) through email or SMS.

Authenticate an user by sending them a magic link.

Authenticate an user by sending them a One-Time Password over email or SMS.

Request password recovery.

Update custom OIDC/OAuth provider.

Update OAuth client (admin).

Update details about a SSO provider.

Update an user's MFA factor.

Copies an object

Create an analytics bucket

Create a bucket

Generate a presigned url to upload an object

Generate presigned urls to retrieve objects

Delete an analytics bucket

Delete a bucket

Delete an object

Delete multiple objects

Empty a bucket

Get details of a bucket

Gets project's storage config

Retrieve object info

List analytics buckets

Gets all buckets

Search for objects under a prefix

Moves an object

Purge cache for an object

Update properties of a bucket

Updates project's storage config

Create endpoint.

Create endpoint.

Delete all endpoints.

Delete all endpoints.

Delete endpoint.

Delete endpoint.

Get delivery.

Get endpoint.

Get delivery.

Get endpoint.

List deliveries.

List endpoints.

List deliveries.

List endpoints.

Retry delivery.

Retry delivery.

Send test event.

Send test event.

Update endpoint.

Update endpoint.

Count the number of action runs.

Create a database branch.

Set up the project's existing JWT secret as an in_use JWT signing key.

Create a new signing key for the project in standby status

Creates a new SSO provider

Creates a new third-party auth integration

Delete a database branch.

Remove a signing key from a project.

Removes a SSO provider by its UUID

Removes a third-party auth integration

Diffs a database branch.

Disables preview branching.

Get the status of an action run.

Get the logs of an action run.

Get a database branch.

Get database branch config.

Get the signing key information for the JWT secret imported as signing key for this project.

Get information about a signing key

Gets a SSO provider by its UUID

Get a third-party integration

List all action runs.

List all signing keys for the project

Lists all SSO providers

Lists all third-party auth integrations

Pushes a database branch.

Resets a database branch.

Restore a scheduled branch deletion.

Update the status of an action run.

Update database branch config.

Update a signing key, mainly its status

Updates a SSO provider by its UUID

Assign or change an organization member role.

Claims project for the specified organization

Create an organization

Creates organization invitations.

Deletes organization invitations by email.

Gets information about the organization

Get entitlements for an organization.

Gets project details for the specified organization and claim token

List GitHub connections of an organization.

List maintenance windows of an organization.

List members of an organization

List members of an organization.

List projects of an organization.

List roles of an organization.

Removes organization members.

Creates a new API key for the project

Create a vector bucket

Create a vector index

Deletes an API key for the project

Bulk delete secrets.

Create a vector bucket

Delete a vector index

Delete vectors from an index

Get API key

Check whether JWT based legacy (anon, service_role) API keys are enabled.

Gets project's pgsodium config.

Create a vector bucket

Get a vector index

Returns vector attributes

List vector buckets

List indexes in a vector bucket

List vectors in a vector index

Put vectors into an index

Query vectors

Updates an API key for the project

Disable or re-enable JWT based legacy (anon, service_role) API keys.

Updates project's pgsodium config.

Commit updates to multiple tables in an atomic operation

Create a namespace

Create a table in the given namespace

Create a log drain for a project

Drop a namespace

Drop a Table

Delete a project log drain

Gets a project's function combined statistics

Get Iceberg catalog configuration

Load a namespace

Load an Iceberg Table

Gets project's usage api counts

Gets project's usage api requests count

List namespaces

Create a table

List project log drains

Scrape a project's metrics.

Update a project log drain

Activates a custom hostname for a project.

Activates a vanity subdomain for a project.

Checks vanity subdomain availability.

Deletes a project's vanity subdomain configuration.

Deletes a project's custom hostname configuration.

Gets project's custom hostname config.

Gets current vanity subdomain config.

Updates project's custom hostname configuration.

Attempts to verify the DNS configuration for project's custom hostname configuration.

Bulk update functions.

Delete a function.

Retrieve a function.

Update a function.

Mint a presigned slot for a build-context upload.

Delete a compute instance.

Deploy a compute instance.

Retrieve a compute instance.

List all compute instances.

Gets realtime configuration

Send Realtime Broadcast messages over HTTP, without opening a websocket.

Shutdowns realtime connections for a project

Updates realtime configuration

Apply or update billing addons, including compute instance size.

List billing addons and compute instance selections.

Remove billing addons or revert compute instance sizing.

Runs the project advisors with the given names

Gets project's postgrest config

Updates project's postgrest config

Gets the user's profile