MCP server for Supabase — 31 tools for database CRUD, storage, auth admin, project management, edge functions, and secrets via REST + Management APIs. ## Features - Database CRUD with PostgREST filtering, resource embedding (JOINs), and RPC - Storage bucket and object management with signed URLs - Auth admin for user creation, updates, bans, and deletion - Project lifecycle management (create, pause, restore) - Execute SQL queries and generate TypeScript types - Edge function inspection and secret/API key management ## 31 Tools - **Database REST (6):** sb_list_records, sb_insert_records, sb_update_records, sb_upsert_records, sb_delete_records, sb_call_function - **Storage (6):** sb_list_buckets, sb_create_bucket, sb_delete_bucket, sb_list_objects, sb_delete_objects, sb_create_signed_url - **Auth Admin (5):** sb_list_users, sb_get_user, sb_create_user, sb_update_user, sb_delete_user - **Projects (5):** sb_list_projects, sb_get_project, sb_create_project, sb_pause_project, sb_restore_project - **Database Management (3):** sb_run_query, sb_list_migrations, sb_get_typescript_types - **Edge Functions (2):** sb_list_functions, sb_get_function - **Secrets & Keys (4):** sb_list_secrets, sb_create_secrets, sb_delete_secrets, sb_list_api_keys ## Configuration - `SUPABASE_URL` — Project URL (e.g. `https://xxx.supabase.co`) — for database, storage, auth tools - `SUPABASE_SERVICE_ROLE_KEY` — Service role key (bypasses RLS) — from Settings → API - `SUPABASE_ACCESS_TOKEN` — Personal access token — for project management tools (from dashboard → Account → Access Tokens)