Mcp Supabase — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Supabase (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Model Context Protocol (MCP) server for Supabase database and storage operations.
npm install @cloud9-labs/mcp-supabaseSet the following environment variables:
export SUPABASE_URL="https://your-project.supabase.co"
export SUPABASE_SERVICE_KEY="your-service-role-key"Add to your claude_desktop_config.json:
{
"mcpServers": {
"supabase": {
"command": "npx",
"args": ["-y", "@cloud9-labs/mcp-supabase"],
"env": {
"SUPABASE_URL": "https://your-project.supabase.co",
"SUPABASE_SERVICE_KEY": "your-service-role-key"
}
}
}
}supabase_query: Execute SELECT with filters, ordering, paginationsupabase_insert: Insert rows into a tablesupabase_update: Update rows matching filter conditionssupabase_delete: Delete rows matching filter conditionssupabase_rpc: Call stored functions/RPC endpointssupabase_list_tables: List all tables in public schemasupabase_get_table_schema: Get column definitions for a tablesupabase_upload_file: Upload a file to storage bucketsupabase_list_files: List files in a bucketsupabase_delete_file: Delete a file from storagesupabase_list_buckets: List all storage bucketssupabase_execute_sql: Execute raw SQL (requires RPC function setup){
"table": "users",
"select": "id,name,email",
"filter": { "status": "active" },
"order": "created_at.desc",
"limit": 10
}{
"table": "posts",
"data": {
"title": "Hello World",
"content": "My first post",
"author_id": 123
}
}{
"bucket": "avatars",
"path": "user123/profile.jpg",
"data": "<base64-encoded-data>",
"contentType": "image/jpeg"
}To use supabase_execute_sql, create this function in your Supabase SQL Editor:
CREATE OR REPLACE FUNCTION execute_sql(query text)
RETURNS json AS $$
DECLARE
result json;
BEGIN
EXECUTE query INTO result;
RETURN result;
END;
$$ LANGUAGE plpgsql SECURITY DEFINER;# Install dependencies
npm install
# Build
npm run build
# Run locally
node dist/index.jsMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.