How to use the Supabase MCP server

Log into supabase.com and open your project. Go to Settings > API to find your project URL and API keys. You need two values: the Project URL (looks like https://abcdefgh.supabase.co) and the service_role key (a long JWT starting with eyJ). The service_role key bypasses Row Level Security and should only be used in server-side contexts. The anon key is not sufficient for the MCP server as it needs admin access to manage schemas and policies.

1You'll need:
21. Project URL: https://your-project-ref.supabase.co
32. Service Role Key: eyJhbGciOiJIUzI1NiIs... (from Settings > API)

Open your MCP host's configuration file and add a supabase entry. The server requires two environment variables: SUPABASE_URL and SUPABASE_SERVICE_ROLE_KEY. These are passed in the env object of the configuration. The command uses npx with the -y flag to auto-install the package.

1{
2  "mcpServers": {
3    "supabase": {
4      "command": "npx",
5      "args": [
6        "-y",
7        "@supabase/mcp-server-supabase"
8      ],
9      "env": {
10        "SUPABASE_URL": "https://your-project-ref.supabase.co",
11        "SUPABASE_SERVICE_ROLE_KEY": "eyJhbGciOiJIUzI1NiIs..."
12      }
13    }
14  }
15}

Fully quit and reopen Claude Desktop, Cursor, or VS Code. The Supabase MCP server will start and authenticate with your project. Once connected, its tools will appear in the available tools list. In Claude Desktop, click the hammer icon to see all Supabase operations available.

Ask the AI to list your tables, describe schemas, or create new tables. The Supabase MCP server can execute DDL statements (CREATE TABLE, ALTER TABLE) as well as queries. It can also set up Row Level Security policies, which is critical for any Supabase project exposed to client-side access.

1Example prompts:
2
3"List all tables in my Supabase database and their row counts"
4
5"Create a new table called 'bookmarks' with columns: id (uuid, primary key), user_id (uuid, references auth.users), url (text), title (text), created_at (timestamptz)"
6
7"Add a Row Level Security policy on the bookmarks table so users can only read and write their own bookmarks"

Beyond the database, the Supabase MCP server can help configure authentication providers, manage storage buckets and policies, and work with edge functions. Ask the AI to set up OAuth providers, create storage buckets with proper access rules, or help write and deploy edge functions.

1Example prompts:
2
3"Show me the current auth configuration and list all enabled providers"
4
5"Create a storage bucket called 'avatars' with a 5MB file size limit and a policy allowing authenticated users to upload to their own folder"
6
7"Generate TypeScript types from my current database schema"

For VS Code with GitHub Copilot, use the servers key instead of mcpServers. Create a .vscode/mcp.json file in your workspace root. The command, args, and env values remain the same.

1{
2  "servers": {
3    "supabase": {
4      "command": "npx",
5      "args": [
6        "-y",
7        "@supabase/mcp-server-supabase"
8      ],
9      "env": {
10        "SUPABASE_URL": "https://your-project-ref.supabase.co",
11        "SUPABASE_SERVICE_ROLE_KEY": "eyJhbGciOiJIUzI1NiIs..."
12      }
13    }
14  }
15}