Supabase MCP Lite

Minimal Supabase MCP server - 70% less context usage than standard implementations.

# Why Lite?

• 4 tools instead of 50+ - Only essential operations
• Minimal descriptions - No verbose explanations
• Simple parameters - No complex nested schemas
• Auto-truncated results - Max 100 rows per query

# 🔑 Personal Access Token Required

This MCP uses your Supabase Personal Access Token (starts with sbp_) to automatically fetch service role keys for any project you own.

# # How to get your Personal Access Token:

1. Go to https://supabase.com/dashboard/account/tokens
2. Click "Generate New Token"
3. Give it a name (e.g., "MCP Access")
4. Copy the token (starts with sbp_)
5. Save it securely - you won't be able to see it again!

# Setup

1. Add to your MCP client configuration:

{
  "supabase-lite": {
    "command": "npx",
    "args": ["@smithery/cli", "connect", "@pinion05/supabase-mcp-lite"],
    "config": {
      "accessToken": "sbp_xxxxxxxxxxxx"  // Your Personal Access Token
    }
  }
}

Note: Project URL is required for each tool call. The service role key will be fetched automatically using your access token.

# Tools (4)

All tools require projectUrl as the first parameter.

| Tool | Purpose | Parameters |
|- -- -- -|- -- -- -- --|- -- -- -- -- -- -|
| select | Get data | projectUrl, table, where?, limit? |
| mutate | Change data | projectUrl, action, table, data?, where? |
| storage | Files | projectUrl, action, bucket, path?, data? |
| auth | Users | projectUrl, action, email?, password?, id? |

# Examples

// Select tool  
select(
  projectUrl: "https://your-project.supabase.co",
  table: "posts", 
  where: {status: "published"}, 
  limit: 10
)

// Mutate tool
mutate(
  projectUrl: "https://your-project.supabase.co",
  action: "insert", 
  table: "todos", 
  data: {title: "New task"}
)
mutate(
  projectUrl: "https://your-project.supabase.co",
  action: "update", 
  table: "todos", 
  data: {done: true}, 
  where: {id: 1}
)
mutate(
  projectUrl: "https://your-project.supabase.co",
  action: "delete", 
  table: "todos", 
  where: {id: 1}
)

// Storage tool
storage(
  projectUrl: "https://your-project.supabase.co",
  action: "upload", 
  bucket: "images", 
  path: "avatar.jpg", 
  data: "base64..."
)
storage(
  projectUrl: "https://your-project.supabase.co",
  action: "list", 
  bucket: "images"
)

// Auth tool
auth(
  projectUrl: "https://your-project.supabase.co",
  action: "list"
)
auth(
  projectUrl: "https://your-project.supabase.co",
  action: "create", 
  email: "user@example.com", 
  password: "secure123"
)

# How it Works

1. You provide your Personal Access Token (sbp_xxx)
2. When you call a tool with a project URL, the MCP:
   • Extracts the project ID from the URL
   • Uses your access token to fetch the service role key via Supabase Management API
   • Caches the key for future requests to the same project
   • Creates a client with full admin access

# Security Notes

• Personal Access Token gives access to ALL your Supabase projects
• Service role keys are fetched automatically and cached in memory
• Service role key bypasses Row Level Security (RLS)
• Keep your access token secure - never expose it client-side
• This tool is intended for server-side/admin use only

# Features

• ✅ Works with any Supabase project you own
• ✅ Automatic service role key retrieval
• ✅ Key caching to minimize API calls
• ✅ Full database access (bypasses RLS)
• ✅ Support for multiple projects in one session

# License

MIT