Supabase Mcp Lite — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Supabase Mcp Lite (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<img width="518" height="141" alt="image" src="https://github.com/user-attachments/assets/04193768-632c-4e32-93d2-291158c804b5" />
Minimal Supabase MCP server - 70% less context usage than standard implementations.
This MCP uses your Supabase Personal Access Token (starts with sbp_) to automatically fetch service role keys for any project you own.
sbp_){
"supabase-lite": {
"command": "npx",
"args": ["@smithery/cli", "connect", "@pinion05/supabase-mcp-lite"],
"config": {
"accessToken": "sbp_xxxxxxxxxxxx" // Your Personal Access Token
}
}
}Note: Project URL is required for each tool call. The service role key will be fetched automatically using your access token.
All tools require projectUrl as the first parameter.
| Tool | Purpose | Parameters |
|---|---|---|
select | Get data | projectUrl, table, where?, limit? |
mutate | Change data | projectUrl, action, table, data?, where? |
storage | Files | projectUrl, action, bucket, path?, data? |
auth | Users | projectUrl, action, email?, password?, id? |
// Select tool
select(
projectUrl: "https://your-project.supabase.co",
table: "posts",
where: {status: "published"},
limit: 10
)
// Mutate tool
mutate(
projectUrl: "https://your-project.supabase.co",
action: "insert",
table: "todos",
data: {title: "New task"}
)
mutate(
projectUrl: "https://your-project.supabase.co",
action: "update",
table: "todos",
data: {done: true},
where: {id: 1}
)
mutate(
projectUrl: "https://your-project.supabase.co",
action: "delete",
table: "todos",
where: {id: 1}
)
// Storage tool
storage(
projectUrl: "https://your-project.supabase.co",
action: "upload",
bucket: "images",
path: "avatar.jpg",
data: "base64..."
)
storage(
projectUrl: "https://your-project.supabase.co",
action: "list",
bucket: "images"
)
// Auth tool
auth(
projectUrl: "https://your-project.supabase.co",
action: "list"
)
auth(
projectUrl: "https://your-project.supabase.co",
action: "create",
email: "[email protected]",
password: "secure123"
)sbp_xxx)MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.