ai-smithery-mistersandfr-supabase-mcp-selfhosted

ToolProof Connection Signal

Review First

Do not connect casually. Review the exposed tools, credentials, network/file/API access, and approval path before giving an agent access.

Evidence Confidence58/100

Tools Inferred25

Control Signals6

Profile status

ToolProof reviewSnapshotEvidence-backed review from observed public information.

Owner statusUnclaimedOwner-provided details have not been maintained yet.

Watch statusNot monitoredEnable ToolProof Watch to monitor drift and freshness.

Last observed2026-06-10T16:45:09ZMCP servers can change after observation.

Why this signal

Source evidence fetched from 80 file(s).
25 MCP tool(s) inferred: create_server, list_tables, get_database_stats, create_index, list_extensions.
6 visible control signal(s) observed.
1 concern(s) identified from fetched evidence.
Network/API or environment credential indicators are present, so scoped access matters.

What this server exposes

create_serverlist_tablesget_database_statscreate_indexlist_extensionscheck_healthget_database_connectionslist_auth_userscreate_auth_userupdate_auth_userdelete_auth_userget_auth_userlist_storage_bucketslist_storage_objectsdelete_filelist_realtime_publicationscreate_subscriptiondelete_subscriptioncreate_migrationlist_migrationsvalidate_migrationget_logsanalyze_performanceanalyze_rls_coverageCREATE_EXECUTE_SQL_FUNCTION

Source and observation

Source: https://github.com/MisterSandFR/Supabase-MCP-SelfHosted

Observed: 2026-06-10T16:45:09Z

Machine ID: mcp:ai-smithery-mistersandfr-supabase-mcp-selfhosted

Capabilities inferred

25 MCP tool declaration(s) inferred
Environment/API key configuration indicators
File-system access indicators
MCP/server implementation evidence found
Network access indicators
Shell/process execution indicators

Controls observed

Authentication/authorization language observed
Containerization evidence observed
Explicit secret/env configuration language observed
License file or license language observed
Restriction/least-privilege language observed
Test framework or tests mentioned

Recommended controls

Use least privilege, logging, and staged rollout until controls are verified.

Open questions before connection

What credentials or environment variables are required?
What data can leave the local environment?
What systems can the agent reach through this server?
What actions should require human approval?
Which external endpoints or APIs can be called?
Which folders or file paths can be read, written, or deleted?

Findings and concerns

Possible shell/process execution surface

Claim or update this profile

Are you the owner of this MCP server? Submit official docs, intended use cases, support links, security contact, and recommended safe configuration.

Owner-provided information is shown separately from ToolProof evidence and does not change the connection signal unless reviewed. Payment may buy review, monitoring, or sponsored visibility. It does not change the ToolProof connection signal.

Request ToolProof Review Claim This Profile Submit Update Watch This Server — Coming Soon

Evidence fetched

.smithery/index.cjs (450000 bytes)
FORCE_REDEPLOY_FASTMCP.md (2810 bytes)
README.md (8717 bytes)
TEST_FASTMCP_FINAL.md (2511 bytes)
TEST_FASTMCP_NO_ERROR.md (2555 bytes)
mcp-projects-shared-config.yaml (3758 bytes)
node_modules/@types/node/README.md (1482 bytes)
node_modules/@types/node/compatibility/index.d.ts (533 bytes)
node_modules/@types/node/compatibility/indexable.d.ts (990 bytes)
node_modules/@types/node/domain.d.ts (7815 bytes)
node_modules/@types/node/index.d.ts (4000 bytes)
node_modules/@types/node/package.json (4125 bytes)
node_modules/@types/node/ts5.6/index.d.ts (4200 bytes)
node_modules/typescript/README.md (2792 bytes)
node_modules/typescript/package.json (3620 bytes)
node_modules/undici-types/README.md (455 bytes)
node_modules/undici-types/agent.d.ts (1065 bytes)
node_modules/undici-types/env-http-proxy-agent.d.ts (675 bytes)
node_modules/undici-types/index.d.ts (3387 bytes)
node_modules/undici-types/mock-agent.d.ts (2535 bytes)
node_modules/undici-types/package.json (1193 bytes)
node_modules/undici-types/proxy-agent.d.ts (780 bytes)
node_modules/undici-types/retry-agent.d.ts (232 bytes)
package.json (965 bytes)
pyproject.toml (594 bytes)
requirements.txt (486 bytes)
src/client/index.ts (22897 bytes)
src/index.ts (1162 bytes)
src/mcp-node/index.ts (3660 bytes)
src/supabase_mcp_server/__init__.py (58 bytes)
src/supabase_mcp_server/server.py (8586 bytes)
src/supabase_server.py (23150 bytes)
src/supabase_server_fastmcp.py (2376 bytes)
src/supabase_server_simple.py (29357 bytes)
src/tools/analyze_performance.ts (13466 bytes)
src/tools/analyze_rls_coverage.ts (12676 bytes)
src/tools/apply_migration.ts (13499 bytes)
src/tools/audit_security.ts (35587 bytes)
src/tools/auto_create_indexes.ts (17992 bytes)
src/tools/auto_migrate.ts (15564 bytes)
src/tools/backup_database.ts (9038 bytes)
src/tools/cache_management.ts (26566 bytes)
src/tools/check_health.ts (7929 bytes)
src/tools/create_auth_user.ts (7555 bytes)
src/tools/create_migration.ts (5634 bytes)
src/tools/delete_auth_user.ts (3241 bytes)
src/tools/environment_management.ts (36791 bytes)
src/tools/execute_psql.ts (8253 bytes)
src/tools/execute_sql.ts (3636 bytes)
src/tools/generate_crud_api.ts (48717 bytes)
src/tools/generate_typescript_types.ts (7913 bytes)
src/tools/get_anon_key.ts (1052 bytes)
src/tools/get_auth_user.ts (3979 bytes)
src/tools/get_database_connections.ts (2693 bytes)
src/tools/get_database_stats.ts (5512 bytes)
src/tools/get_logs.ts (15079 bytes)
src/tools/get_project_url.ts (1121 bytes)
src/tools/get_service_key.ts (1410 bytes)
src/tools/import_schema.ts (12438 bytes)
src/tools/inspect_schema.ts (19336 bytes)
src/tools/list_auth_users.ts (3696 bytes)
src/tools/list_extensions.ts (2062 bytes)
src/tools/list_migrations.ts (1843 bytes)
src/tools/list_realtime_publications.ts (3150 bytes)
src/tools/list_storage_buckets.ts (3207 bytes)
src/tools/list_storage_objects.ts (5253 bytes)
src/tools/list_tables.ts (2973 bytes)
src/tools/manage_docker.ts (9799 bytes)
src/tools/manage_extensions.ts (34619 bytes)
src/tools/manage_functions.ts (17059 bytes)
src/tools/manage_rls_policies.ts (15643 bytes)
src/tools/manage_roles.ts (29371 bytes)
src/tools/manage_secrets.ts (32561 bytes)
src/tools/manage_storage_policies.ts (33097 bytes)
src/tools/manage_triggers.ts (14367 bytes)
src/tools/manage_webhooks.ts (36682 bytes)
src/tools/metrics_dashboard.ts (45843 bytes)
src/tools/push_migrations.ts (12400 bytes)
src/tools/realtime_management.ts (22758 bytes)
src/types/index.ts (2801 bytes)

Machine-readable profile is included in /mcp/data/servers.json as mcp:ai-smithery-mistersandfr-supabase-mcp-selfhosted. ToolProof is a practical review signal, not a certification or legal opinion.