Skip the install. Get this working in under 2 minutes.
Start a free trial on cloud.anythingmcp.com, add the Supabase in one click, then point your AI client (Claude, ChatGPT, Copilot or Cursor) at the generated MCP endpoint. No Docker, no git clone, zero engineering experience required.
Summary
Let your AI look after your Supabase projects: list projects and check their health, explore schemas and tables, run read-only SQL, read logs, security and performance advisors, Edge Functions, migrations, branches and storage buckets. Through the Management API with a personal access token.
Try asking
Example prompts for Supabase
Click any prompt to copy it. Paste into Claude, ChatGPT, Cursor, Gemini, Copilot or OpenClaw to run it against this connector.
Claude is AI and can make mistakes. Please double-check responses.
💡 No install? Use cloud.anythingmcp.com directly. Sign in, click Connectors → Supabase, paste your credentials, mint an MCP API key and you're done. No Docker, no
git clone, no local server.
Supabase + Meta Muse
Let your AI look after your Supabase projects: list projects and check their health, explore schemas and tables, run read-only SQL, read logs, security and performance advisors, Edge Functions, migrations, branches and storage buckets. Through the Management API with a personal access token.
Prerequisites
See the full setup instructions baked into the connector (visible in the in-app store when you select the connector). The required environment variables for this connector are:
SUPABASE_ACCESS_TOKEN
Step 1 — Get credentials
- In the Supabase dashboard, open the account menu → Account preferences → Access Tokens (or go straight to https://supabase.com/dashboard/account/tokens) and click Generate new token.
- Prefer a scoped token: pick the organization and the projects the AI may see, and give each capability Read (or Read-write only where it should change something). The tools here use Projects, Project Settings, Database, Migrations, Backups, Edge Functions, API Keys (not API Key Secrets), Logs, Usage Analytics, Advisors, Storage, Development Branches and Organizations.
- Set an expiry (at most one year) and copy the token. It starts with
sbp_and Supabase shows it only once. - Paste the token into
SUPABASE_ACCESS_TOKEN, without the word Bearer, then install the connector. - Start with
supabase_list_projects: it lists every project the token can reach, with its status and its ref. The ref (the 20 lowercase letters inhttps://<ref>.supabase.co) is what every other tool takes.
Changing access later: a token's access cannot be changed after it is created. To widen or narrow it, create a new token and delete the old one. A legacy (unscoped) token has your full access to every organization instead.
Read-only setup: give a scoped token Read on every capability. With Database on Read only, even supabase_execute_sql runs its SQL read-only. No other tool changes data: everyday questions go through supabase_run_read_only_sql, which runs one statement as a read-only database user and cuts results over 200 KB.
Switched off at install: supabase_execute_sql. It runs SQL as postgres with full rights, so DDL, writes and grants take effect at once and cannot be undone. Turn it on only if the AI should change the database; it shows you each statement and waits for your confirmation. For schema changes that belong in version control, your own migration workflow is the better place.
A project owner's view: the connector works through the Supabase Management API, not as an app user, so it does not go through your project's REST API or row level security. supabase_list_api_keys names every key but shows the value only of public ones; secret keys and the legacy service_role key are listed without their value on purpose, and no tool reveals them. Edge Function code is not downloaded either.
Paused projects: free projects pause after a week without activity and then show status INACTIVE. Database tools fail until you restore the project in the dashboard. When an app reports errors, run supabase_get_project_health first.
Logs and advisors: supabase_query_logs searches only the last minute unless you give it a time range; a range may span at most 24 hours and must lie within your plan's log retention (1 day on Free, 7 on Pro, 28 on Team). supabase_get_security_advisors and supabase_get_performance_advisors run the same checks as the dashboard's Advisors page; fix ERROR findings first, especially tables exposed without row level security. Preview branches (supabase_list_branches) need a paid plan.
Limits: Supabase allows 120 Management API requests per minute per user and endpoint (all of a user's tokens share it), and 30 per minute for logs and usage. Over the limit it answers 429 for the rest of the minute: wait a minute and try again.
Common errors: 401 "Invalid access token" means the token is wrong, expired or was deleted: create a new one under Access Tokens. 403 means the token may not do this: a scoped token lists what it lacks in missing_permissions, so create a new token that includes it. 404 is an unknown project ref, or a project outside the token's organizations. 402 on logs means the organization's usage quota is used up. A failing SQL statement comes back with Postgres' own message, for example "relation "orders" does not exist" when a table is not qualified with its schema (public.orders).
The connector does not create, pause, restore or delete projects, deploy Edge Functions, manage secrets, auth configuration, custom domains, network restrictions or billing, and it does not read your app's tables through PostgREST.
Step 2 — Install the adapter
curl -fsSL https://raw.githubusercontent.com/HelpCode-ai/anythingmcp/main/docker-compose.quickstart.yml -o docker-compose.yml
printf 'JWT_SECRET=%s\nENCRYPTION_KEY=%s\n' "$(openssl rand -hex 32)" "$(openssl rand -hex 32)" > .env
docker compose up -d
Step 3 — Add the connector in Muse
Your server URL: in AnythingMCP, open MCP Servers → the server this connector is on, and copy its URL (
https://cloud.anythingmcp.com/mcp/…). Use it wherever this guide showsYOUR_SERVER_ID.
Muse adds remote MCP servers as custom connectors and signs in to them with OAuth.
- In Muse, open Settings → Connectors and choose Add custom connector.
- Paste the MCP server URL
https://cloud.anythingmcp.com/mcp/YOUR_SERVER_ID. - Muse opens the AnythingMCP sign-in page: sign in and approve access.
- In a chat, ask Muse for something that needs the
Supabasetools.
You can also set it up from a chat, on the web, in the iOS and Android apps or in WhatsApp. Send Muse this message:
Create a Custom Connector for a new remote MCP server, then connect to it:
Name: AnythingMCP
Transport: remote streamable HTTP
URL: https://cloud.anythingmcp.com/mcp/YOUR_SERVER_ID
Auth: OAuth
Self-hosting? Use your instance's public HTTPS address instead of https://cloud.anythingmcp.com. Muse connects from Meta's cloud, so localhost does not work.
Available tools
| Tool | What it does |
|---|---|
supabase_list_projects | List every project the token can reach: ref, name, organization_slug, region, status (ACTIVE_HEALTHY, INACTIVE when paused, COMING_UP… |
supabase_list_organizations | List the organizations the token can reach, with their slug and name |
supabase_get_organization | Get one organization by slug, including its plan (free, pro, team, enterprise) |
supabase_get_project | Get one project: name, ref, organization, region, status, created_at and database host and Postgres version |
supabase_get_project_health | Check the health of a project's services: for each one name, status (ACTIVE_HEALTHY, COMING_UP, UNHEALTHY) and error or info |
supabase_run_read_only_sql | Run one SQL statement as the read-only database user and return the rows as JSON objects |
supabase_execute_sql | Run SQL with full rights (as postgres): DDL, inserts, updates, deletes, grants |
supabase_list_schemas | List the database's schemas with their owner and number of tables, leaving out Postgres' own (pg_*, information_schema) |
supabase_list_tables | List the tables, views and materialized views of one or more schemas: schema, name, kind, whether row level security is on, estimated row… |
supabase_describe_table | Describe one table or view: columns (name, type, nullable, default, comment), constraints (primary key, foreign keys, unique, check, with… |
supabase_list_extensions | List the Postgres extensions installed in the database: name, version and schema (on Supabase usually extensions) |
supabase_list_migrations | List the migrations recorded for the database (by the Supabase CLI or the dashboard): version (timestamp) and name, oldest first |
supabase_list_backups | List the project's database backups: whether point-in-time recovery is on, and each backup's status and time |
supabase_generate_typescript_types | Generate TypeScript types for the database schema, as the Supabase CLI does: one string with a Database type covering tables, views… |
supabase_list_edge_functions | List the project's Edge Functions: slug, name, status, version, verify_jwt, entrypoint path and when they were created and updated (epoch… |
supabase_get_edge_function | Get one Edge Function by slug: status, version, verify_jwt, entrypoint and import map paths, created and updated times |
supabase_list_api_keys | List the project's API keys: id, name, type (publishable, secret or legacy), prefix and description |
supabase_query_logs | Query the project's logs with SQL (ClickHouse dialect) over one unified logs table: filter on source (edge_logs, postgres_logs, auth_logs… |
supabase_get_api_usage | Get request counts per time bucket for the project's REST, Auth, Storage and Realtime APIs over a recent interval |
supabase_get_security_advisors | Run the security advisor (database linter) on the project: findings such as tables without row level security, exposed auth.users, mutable… |
supabase_get_performance_advisors | Run the performance advisor on the project: findings such as unindexed foreign keys, unused or duplicate indexes, RLS policies that… |
supabase_list_branches | List the project's preview branches (branching, a paid feature): id, name, project_ref of the branch, git_branch, pr_number, is_default… |
supabase_get_branch | Get one preview branch of a project by its name: its own project ref, git branch, pull request number, status and whether it is persistent |
supabase_list_storage_buckets | List the project's Storage buckets: id, name, owner, whether public, and created and updated times |
Example prompts
- "Which of my Supabase projects are not healthy right now, and what is wrong with them?"
- "Run the security advisor on the Acme Shop project and tell me which tables are exposed without row level security."
- "How many orders were created per day last week in public.orders of the Acme Shop project?"
- "Show me the Postgres errors from the last hour in the Acme Shop logs and explain what caused them."
FAQ
Where is Muse available? Meta currently offers Muse in the US and Canada, on the web, in the iOS and Android apps and in WhatsApp.
Does Meta review this connector? No. Meta doesn't review custom connectors. Muse sees only the tools you switched on for this MCP server in AnythingMCP, and you can disconnect it anytime under Settings → Connectors.
Next steps
Was this guide helpful?
