README.md
Enables secure interaction with Supabase databases via the PostgREST API
Supabase MCP Server
A Supabase MCP server built with the Dedalus MCP framework. Provides secure access to Supabase databases via the PostgREST API with credential encryption and JIT token exchange.
Features
Available Tools
Read Operations
| Tool | Description |
|---|---|
db_select |
Select rows from a table with optional filters, ordering, and pagination |
db_get_by_id |
Get a single row by primary key |
Write Operations
| Tool | Description |
|---|---|
db_insert |
Insert one or more rows into a table |
db_update |
Update rows matching specified filters |
db_delete |
Delete rows matching specified filters |
db_upsert |
Insert or update rows on conflict |
RPC
| Tool | Description |
|---|---|
db_rpc |
Call a Supabase stored procedure/function |
Prerequisites
- Python 3.10+
- uv package manager
- Supabase project URL and API key
- Dedalus API Key
Setup
- Clone the repository
git clone https://github.com/dedalus-labs/supabase-mcp.git
cd supabase-mcp
- Install dependencies
uv sync
- Configure environment variables
Create a .env file based on .env.example.
Client Usage
import asyncio
import os
from dotenv import load_dotenv
from dedalus_labs import AsyncDedalus, DedalusRunner
from dedalus_mcp.auth import Connection, SecretKeys, SecretValues
load_dotenv()
SUPABASE_URL = os.getenv("SUPABASE_URL")
# Define the Supabase connection
supabase = Connection(
name="supabase-mcp",
secrets=SecretKeys(key="SUPABASE_SECRET_KEY"),
base_url=f"{SUPABASE_URL}/rest/v1",
auth_header_name="apikey",
auth_header_format="{api_key}",
)
# Bind credentials (encrypted client-side, decrypted at dispatch time)
supabase_secrets = SecretValues(supabase, key=os.getenv("SUPABASE_SECRET_KEY", ""))
async def main():
client = AsyncDedalus(
api_key=os.getenv("DEDALUS_API_KEY"),
base_url=os.getenv("DEDALUS_API_URL"),
as_base_url=os.getenv("DEDALUS_AS_URL"),
)
runner = DedalusRunner(client)
result = await runner.run(
input="Select all rows from the users table, limit to 5.",
model="openai/gpt-5",
mcp_servers=["issac/supabase-mcp"],
credentials=[supabase_secrets],
)
print(result.output)
if __name__ == "__main__":
asyncio.run(main())
License
MIT License - see LICENSE for details.
Tools (7)
db_selectSelect rows from a table with optional filters, ordering, and paginationdb_get_by_idGet a single row by primary keydb_insertInsert one or more rows into a tabledb_updateUpdate rows matching specified filtersdb_deleteDelete rows matching specified filtersdb_upsertInsert or update rows on conflictdb_rpcCall a Supabase stored procedure/functionEnvironment Variables
SUPABASE_URLrequiredSupabase project URLSUPABASE_SECRET_KEYrequiredSupabase API keyDEDALUS_API_KEYrequiredDedalus API Key for encrypted credential handlingConfiguration
claude_desktop_config.json
{
"mcpServers": {
"supabase-mcp": {
"command": "uv",
"args": ["run", "supabase-mcp"],
"env": {
"SUPABASE_URL": "your-project-url",
"SUPABASE_SECRET_KEY": "your-api-key",
"DEDALUS_API_KEY": "your-dedalus-key"
}
}
}
}Try it
→Select all rows from the users table, limit to 5.
→Get the user details from the profiles table where the id is 123.
→Insert a new record into the orders table with the status 'pending'.
→Update the inventory table to set stock to 50 where item_id is 'A1'.
→Call the stored procedure 'calculate_revenue' with the year 2023.