Supabase MCP Selfhosted

🚀 Supabase MCP Server - Self-Hosted Edition

Fully manage your private Supabase instance with this self-hosted solution.

🚀 Quick Start

Prerequisites

• Python 3.11+
• A Supabase instance (self-hosted or cloud-based)
• Supabase environment variables

Option A — Smithery SDK (Recommended)

# Clone the repository
git clone https://github.com/MisterSandFR/Supabase-MCP-SelfHosted.git
cd Supabase-MCP-SelfHosted

# Install dependencies
pip install -r requirements.txt

# (Optional) Install the Smithery CLI if needed
npm i -g @smithery/cli

# Start the dev SDK (depending on your environment)
smithery dev   # or: smithery playground

• The SDK server is defined in pyproject.toml via:
  • [tool.smithery] server = "supabase_mcp_server.server:create_server"
• When deploying in the Smithery interface, configure the Test Profile and then start the Scan.

Option B — HTTP self-hosted (Compatible)

# Clone the repository
git clone https://github.com/MisterSandFR/Supabase-MCP-SelfHosted.git
cd Supabase-MCP-SelfHosted

# Install Python dependencies
pip install -r requirements.txt

# Configure environment variables
export SUPABASE_URL="https://your-project.supabase.co"
export SUPABASE_ANON_KEY="your-anon-key"
export SUPABASE_SERVICE_KEY="your-service-key"  # Optional

# Start the external HTTP server
python src/supabase_server.py

With Docker (Railway / self-hosted)

# Build and start (use Dockerfile.railway if needed)
docker build -f Dockerfile.railway -t supabase-mcp-server .
docker run -p 8000:8000 \
  -e SUPABASE_URL="https://your-project.supabase.co" \
  -e SUPABASE_ANON_KEY="your-anon-key" \
  supabase-mcp-server

✨ Features

• 🔐 Full management of your private Supabase instance
• 🛠️ 54+ MCP tools for Supabase administration
• 📊 Real-time monitoring and metrics
• 🚀 Automated deployment on Railway
• 🔒 Enhanced security with SQL injection prevention
• ⚡ Optimized performance for production

🔧 Technical Details

Architecture

This repository contains only the pure Supabase MCP server, without a web interface or central hub.

Supabase MCP Server (Port 8000)
├── 🗄️ Database management
├── 🔐 Authentication and authorization
├── 📁 Storage and files
├── 🔄 Real-time and subscriptions
├── 🛠️ Migrations and schemas
├── 📊 Monitoring and logs
└── 🚀 Automated deployment

📦 Installation

Environment Variables

# Supabase Configuration
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_ANON_KEY=eyJ... (your anonymous key)
SUPABASE_SERVICE_KEY=eyJ... (optional, for privileged operations)

# Server Configuration
PORT=8000
PYTHONUNBUFFERED=1

💻 Usage Examples

Available MCP Tools

Database (15 tools)

• execute_sql - Execute SQL queries
• list_tables - List tables
• inspect_schema - Inspect the schema
• apply_migration - Apply migrations
• backup_database - Backup the database
• restore_database - Restore the database
• vacuum_analyze - Optimize the database
• get_database_stats - Get database statistics
• create_index - Create an index
• drop_index - Drop an index
• list_extensions - List extensions
• manage_extensions - Manage extensions
• execute_psql - Execute psql commands
• check_health - Check database health
• get_database_connections - Get database connections

Authentication (8 tools)

• list_auth_users - List users
• create_auth_user - Create a user
• update_auth_user - Update a user
• delete_auth_user - Delete a user
• get_auth_user - Retrieve a user
• verify_jwt_secret - Verify JWT
• manage_roles - Manage roles
• manage_rls_policies - Manage RLS policies

Storage (6 tools)

• list_storage_buckets - List buckets
• list_storage_objects - List objects
• manage_storage_policies - Manage policies
• upload_file - Upload a file
• download_file - Download a file
• delete_file - Delete a file

Real-time (4 tools)

• list_realtime_publications - List publications
• manage_realtime - Manage real-time
• create_subscription - Create a subscription
• delete_subscription - Delete a subscription

Migrations (8 tools)

• create_migration - Create a migration
• list_migrations - List migrations
• push_migrations - Push migrations
• validate_migration - Validate a migration
• smart_migration - Smart migration
• auto_migrate - Automatic migration
• sync_schema - Synchronize the schema
• import_schema - Import the schema

Monitoring (5 tools)

• get_logs - Retrieve logs
• metrics_dashboard - Metrics dashboard
• analyze_performance - Analyze performance
• analyze_rls_coverage - Analyze RLS coverage
• audit_security - Audit security

Utilities (8 tools)

• generate_typescript_types - Generate TypeScript types
• generate_crud_api - Generate a CRUD API
• cache_management - Cache management
• environment_management - Environment management
• manage_secrets - Manage secrets
• manage_functions - Manage functions
• manage_triggers - Manage triggers
• manage_webhooks - Manage webhooks

API Endpoints

MCP Server (HTTP self-hosted)

• GET /health - Health check
• POST /mcp - Main JSON-RPC endpoint
• GET /.well-known/mcp-config - MCP configuration
• GET /mcp/tools.json - Tool discovery (JSON)

Specialized Tools

• GET /api/tools - List available tools
• POST /api/execute - Execute tools

🚀 Deployment

Smithery (Python SDK) — Recommended

1. Ensure that pyproject.toml contains:
   • [tool.smithery] server = "supabase_mcp_server.server:create_server"
2. In Smithery → Deploy, select Python SDK
3. Configure the Test Profile and then start the Scan
   • Required: SUPABASE_URL, SUPABASE_ANON_KEY

Railway (Self-hosted)

# Deploy to Railway
railway login
railway init
railway up

Docker

# Build and deploy
docker build -t supabase-mcp-server .
docker run -p 8000:8000 supabase-mcp-server

Integration with Central Hub

This server is designed to be integrated with the MCP Central Hub:

{
  "servers": {
    "supabase": {
      "name": "Supabase MCP Server",
      "host": "supabase.mcp.coupaul.fr",
      "port": 8000,
      "path": "/",
      "categories": ["database", "auth", "storage", "realtime", "security", "migration", "monitoring", "performance"]
    }
  }
}

🧪 Test Profile (Smithery)

When connecting on the Smithery side, provide the following keys in the Test Profile:

{
  "SUPABASE_URL": "https://your-project.supabase.co",
  "SUPABASE_ANON_KEY": "eyJ..."
}

In case of caching, resave the profile and restart the Scan.

🔒 Security

• Input validation to prevent SQL injections
• Rate limiting by IP and user
• Audit logs for all operations
• HTTPS encryption required in production
• Secure secret management
• RLS policies for data security

📊 Monitoring

The server provides comprehensive monitoring:

• Real-time performance metrics
• Structured logs with configurable levels
• Automatic health checks
• Alerts in case of issues
• Metrics dashboard
• Detailed performance analysis

🤝 Contribution

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Commit your changes (git commit -m 'Add amazing feature')
4. Push to the branch (git push origin feature/amazing-feature)
5. Open a Pull Request

📄 License

This project is licensed under the MIT License. See the LICENSE file for more details.

🙏 Acknowledgments

• Supabase for the platform
• Smithery for the MCP ecosystem
• The Supabase community for contributions

📞 Support

• 📧 Email: contact@coupaul.fr
• 💬 Discord: MCP Community Server
• 🐛 Issues: GitHub Issues

Made with ❤️ by coupaul