Supabase Lite Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Supabase Lite Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The Supabase Lite MCP Server is a lightweight Model Context Protocol (MCP) server that provides essential Supabase database management commands. This focused implementation reduces token usage from ~14,800 to ~3,700 tokens by exposing only 8 core commands instead of the full 26.
# Clone the repository
git clone https://github.com/your-username/supabase-lite-mcp.git
cd supabase-lite-mcp
# Run the setup script
./setup.shThe setup script will:
npm install cp .env.example .env
# Edit .env with your Supabase credentials npm run build npm run devCreate a .env file with your Supabase credentials:
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_SERVICE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
SUPABASE_PROJECT_REF=your-project-ref # OptionalGet these from your Supabase dashboard:
Add to your MCP configuration file (.mcp.json):
{
"mcpServers": {
"supabase-lite": {
"command": "node",
"args": ["path/to/supabase-lite-mcp/dist/index.js"],
"env": {
"SUPABASE_URL": "${SUPABASE_URL}",
"SUPABASE_SERVICE_KEY": "${SUPABASE_SERVICE_KEY}"
}
}
}
}Or use npm link for global access:
cd supabase-lite-mcp
npm linkThen use "command": "supabase-lite-mcp" in your MCP config.
Lists all tables in specified schemas.
Shows installed PostgreSQL extensions.
Displays migration history.
Applies DDL changes to the database.
Runs SQL queries for data operations.
Retrieves service logs from the last minute.
Provides security and performance recommendations.
Creates TypeScript interfaces from schema.
The server implements the Model Context Protocol (MCP) to communicate with Claude:
Claude ↔️ MCP Protocol (stdio) ↔️ Server ↔️ Supabase APIALLOWED_COMMANDS in src/index.tsgetToolDefinitions()executeCommand() switchExample:
// 1. Add to ALLOWED_COMMANDS
const ALLOWED_COMMANDS = [
// ... existing commands
'custom_command'
] as const;
// 2. Add tool definition
tools.push({
name: 'custom_command',
description: 'My custom command',
inputSchema: {
type: 'object',
properties: {
param: { type: 'string' }
}
}
});
// 3. Add case in executeCommand
case 'custom_command':
return await this.customCommand(args);
// 4. Implement handler
private async customCommand(args: any): Promise<any> {
// Your implementation
return {
content: [{
type: 'text',
text: 'Result'
}]
};
}npm run build - Build TypeScript to JavaScriptnpm run dev - Run in development mode with hot reloadnpm start - Run production buildnpm run clean - Clean build artifactssupabase-lite-mcp/
├── src/
│ └── index.ts # Main server implementation
├── dist/ # Compiled JavaScript (generated)
├── .env # Environment variables (create from .env.example)
├── .env.example # Environment template
├── package.json # Node.js configuration
├── tsconfig.json # TypeScript configuration
├── setup.sh # Installation script
└── README.md # Documentation| Feature | Full Supabase MCP | Supabase Lite MCP |
|---|---|---|
| Commands | 26 | 8 (essential only) |
| Token Usage | ~14,800 | ~3,700 |
| Startup Time | ~2s | <1s |
| Memory Usage | ~50MB | ~30MB |
| Focus | Complete platform | Database only |
.env filesServer won't start:
node --version (requires v22+).env file exists with valid credentialsnpm run build to compile TypeScriptAuthentication errors:
Build errors:
npm install to install dependenciesnpx tsc --versionMIT
Contributions are welcome! Please open an issue or submit a pull request.
Built with:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.