Home / Servers / Supabase Management API
Supabase Management API MCP server
Projects, databases, functions, secrets and auth settings.
The Supabase Management API: organizations and projects, run SQL, database branches, backups, edge functions, secrets, custom domains, network restrictions, auth and storage settings, with a personal access token.
Why use the hosted one: Every endpoint of Supabase's API behind the gateway's search, with your own Supabase personal access token stored encrypted and sent only to Supabase.
Needs your Supabase personal access token: add it once in the dashboard (get one at Supabase). It is stored encrypted and sent only to that API.
Connect
claude mcp add --transport http hj-supabase-api https://mcp.hjlabs.in/mcp/supabase-api \
--header "Authorization: Bearer YOUR_API_KEY"Create an API key and put it in place of YOUR_API_KEY. Step-by-step guides: claude.ai and ChatGPT connectors, Claude Code, Cursor, VS Code, Claude Desktop, Windsurf, Zed, OpenAI Codex CLI, Gemini CLI.
All 167 tools
V1 167 tools
- Get database branch config
v1_get_a_branch_config - Update database branch config
v1_update_a_branch_config - Delete a database branch
v1_delete_a_branch - Pushes a database branch
v1_push_a_branch - Merges a database branch
v1_merge_a_branch - Resets a database branch
v1_reset_a_branch - Restore a scheduled branch deletion
v1_restore_a_branch - Diffs a database branch
v1_diff_a_branch - List all projects
v1_list_all_projects - Create a project
v1_create_a_project - Gets the list of available regions that can be used for a new project
v1_get_available_regions - List all organizations
v1_list_all_organizations - Create an organization
v1_create_an_organization - Authorize user through oauth
v1_authorize_user - Exchange auth code for user's access and refresh token
v1_exchange_oauth_token - Revoke oauth app authorization and it's corresponding tokens
v1_revoke_token - Authorize user through oauth and claim a project
v1_oauth_authorize_project_claim - Lists SQL snippets for the logged in user
v1_list_all_snippets - Gets a specific SQL snippet
v1_get_a_snippet - Gets the user's profile
v1_get_profile - List all action runs
v1_list_action_runs - Get the status of an action run
v1_get_action_run - Update the status of an action run
v1_update_action_run_status - Get the logs of an action run
v1_get_action_run_logs - Get project api keys
v1_get_project_api_keys - Creates a new API key for the project
v1_create_project_api_key - Check whether JWT based legacy (anon, service_role) API keys are enabled. This A
v1_get_project_legacy_api_keys - Disable or re-enable JWT based legacy (anon, service_role) API keys. This API en
v1_update_project_legacy_api_keys - Updates an API key for the project
v1_update_project_api_key - Get API key
v1_get_project_api_key - Deletes an API key for the project
v1_delete_project_api_key - List all database branches
v1_list_all_branches - Create a database branch
v1_create_a_branch - Disables preview branching
v1_disable_preview_branching - Get a database branch
v1_get_a_branch - Gets project's custom hostname config
v1_get_hostname_config - Deletes a project's custom hostname configuration
v1_delete_hostname_config - Updates project's custom hostname configuration
v1_update_hostname_config - Attempts to verify the DNS configuration for project's custom hostname configura
v1_verify_dns_config - Activates a custom hostname for a project.
v1_activate_custom_hostname - Get project's temporary access configuration.
v1_get_jit_access_config - Update project's temporary access configuration.
v1_update_jit_access_config - Gets project's network bans
v1_list_all_network_bans - Gets project's network bans with additional information about which databases th
v1_list_all_network_bans_enriched - Remove network bans.
v1_delete_network_bans - Gets project's network restrictions
v1_get_network_restrictions - Updates project's network restrictions by adding or removing CIDRs
v1_patch_network_restrictions - Updates project's network restrictions
v1_update_network_restrictions - Gets project's pgsodium config
v1_get_pgsodium_config - Updates project's pgsodium config. Updating the root_key can cause all data encr
v1_update_pgsodium_config - Gets project's postgrest config
v1_get_postgrest_service_config - Updates project's postgrest config
v1_update_postgrest_service_config - Gets a specific project that belongs to the authenticated user
v1_get_project - Deletes the given project
v1_delete_a_project - Updates the given project
v1_update_a_project - List all secrets
v1_list_all_secrets - Bulk create secrets
v1_bulk_create_secrets - Bulk delete secrets
v1_bulk_delete_secrets - Get project's SSL enforcement configuration.
v1_get_ssl_enforcement_config - Update project's SSL enforcement configuration.
v1_update_ssl_enforcement_config - Generate TypeScript types
v1_generate_typescript_types - Gets current vanity subdomain config
v1_get_vanity_subdomain_config - Deletes a project's vanity subdomain configuration
v1_deactivate_vanity_subdomain_config - Checks vanity subdomain availability
v1_check_vanity_subdomain_availability - Activates a vanity subdomain for a project.
v1_activate_vanity_subdomain_config - Upgrades the project's Postgres version
v1_upgrade_postgres_version - Returns the project's eligibility for upgrades
v1_get_postgres_upgrade_eligibility - Gets the latest status of the project's upgrade
v1_get_postgres_upgrade_status - Returns project's readonly mode status
v1_get_readonly_mode_status - Disables project's readonly mode for the next 15 minutes
v1_disable_readonly_mode_temporarily - Set up a read replica
v1_setup_a_read_replica - Remove a read replica
v1_remove_a_read_replica - Gets project's service health status
v1_get_services_health - Set up the project's existing JWT secret as an in_use JWT signing key. This endp
v1_create_legacy_signing_key - Get the signing key information for the JWT secret imported as signing key for t
v1_get_legacy_signing_key - Create a new signing key for the project in standby status
v1_create_project_signing_key - List all signing keys for the project
v1_get_project_signing_keys - Get information about a signing key
v1_get_project_signing_key - Remove a signing key from a project. Only possible if the key has been in revoke
v1_remove_project_signing_key - Update a signing key, mainly its status
v1_update_project_signing_key - Gets project's auth config
v1_get_auth_service_config - Updates a project's auth config
v1_update_auth_service_config - Creates a new third-party auth integration
v1_create_project_tpa_integration - Lists all third-party auth integrations
v1_list_project_tpa_integrations - Removes a third-party auth integration
v1_delete_project_tpa_integration - Get a third-party integration
v1_get_project_tpa_integration - Pauses the given project
v1_pause_a_project - Restarts the given project
v1_restart_a_project - Lists available restore versions for the given project
v1_list_available_restore_versions - Restores the given project
v1_restore_a_project - Cancels the given project restoration
v1_cancel_a_project_restoration - List billing addons and compute instance selections
v1_list_project_addons - Apply or update billing addons, including compute instance size
v1_apply_project_addon - Remove billing addons or revert compute instance sizing
v1_remove_project_addon - Gets project claim token
v1_get_project_claim_token - Creates project claim token
v1_create_project_claim_token - Revokes project claim token
v1_delete_project_claim_token - Gets project performance advisors.
v1_get_performance_advisors - Gets project security advisors.
v1_get_security_advisors - Gets all project's logs in a single log stream
v1_get_project_logs - Gets project's usage api counts
v1_get_project_usage_api_count - Gets project's usage api requests count
v1_get_project_usage_request_count - Gets a project's function combined statistics
v1_get_project_function_combined_stats - Scrape a project's metrics
v1_scrape_project_metrics - Create a login role for CLI with temporary password
v1_create_login_role - Delete existing login roles used by CLI
v1_delete_login_roles - List applied migration versions
v1_list_migration_history - Apply a database migration
v1_apply_a_migration - Upsert a database migration without applying
v1_upsert_a_migration - Rollback database migrations and remove them from history table
v1_rollback_migrations - Fetch an existing entry from migration history
v1_get_a_migration - Patch an existing entry in migration history
v1_patch_a_migration - Run sql query
v1_run_a_query - Run a sql query as supabase_read_only_user
v1_read_only_query - Enables Database Webhooks on the project
v1_enable_database_webhook - Gets database metadata for the given project.
v1_get_database_metadata - Updates the database password
v1_update_database_password - Get user-id to role mappings for JIT access
v1_get_jit_access - Authorize user-id to role mappings for JIT access
v1_authorize_jit_access - Updates a user mapping for JIT access
v1_update_jit_access - List all user-id to role mappings for JIT access
v1_list_jit_access - Invites an external user to a database for JIT access
v1_invite_external_jit_access - Accepts invitation for JIT database access
v1_accept_invite_external_jit_access - Deletes the invite for an external user to a database for JIT access
v1_delete_invite_external_jit_access - Delete JIT access by user-id
v1_delete_jit_access - Get PostgREST OpenAPI spec
v1_get_database_openapi - List all functions
v1_list_all_functions - Bulk update functions
v1_bulk_update_functions - Deploy a function
v1_deploy_a_function - Retrieve a function
v1_get_a_function - Update a function
v1_update_a_function - Delete a function
v1_delete_a_function - Retrieve a function body
v1_get_a_function_body - Lists all buckets
v1_list_all_buckets - Get database disk attributes
v1_get_database_disk - Modify database disk
v1_modify_database_disk - Get disk utilization
v1_get_disk_utilization - Gets project disk autoscale config
v1_get_project_disk_autoscale_config - Gets project's storage config
v1_get_storage_config - Updates project's storage config
v1_update_storage_config - Get project's pgbouncer config
v1_get_project_pgbouncer_config - Gets project's supavisor config
v1_get_pooler_config - Updates project's supavisor config
v1_update_pooler_config - Gets project's Postgres config
v1_get_postgres_config - Updates project's Postgres config
v1_update_postgres_config - Gets realtime configuration
v1_get_realtime_config - Updates realtime configuration
v1_update_realtime_config - Shutdowns realtime connections for a project
v1_shutdown_realtime - Creates a new SSO provider
v1_create_a_sso_provider - Lists all SSO providers
v1_list_all_sso_provider - Gets a SSO provider by its UUID
v1_get_a_sso_provider - Updates a SSO provider by its UUID
v1_update_a_sso_provider - Removes a SSO provider by its UUID
v1_delete_a_sso_provider - Lists all backups
v1_list_all_backups - Restores a PITR backup for a database
v1_restore_pitr_backup - Initiates a creation of a restore point for a database
v1_create_restore_point - Get restore points for project
v1_get_restore_point - Restores a physical backup for a database
v1_restore_physical_backup - Gets the backup schedule for a project
v1_get_backup_schedule - Updates the backup schedule time for a project
v1_update_backup_schedule - Initiates an undo to a given restore point
v1_undo - Get entitlements for an organization
v1_get_organization_entitlements - List members of an organization
v1_list_organization_members - Gets information about the organization
v1_get_an_organization - Gets project details for the specified organization and claim token
v1_get_organization_project_claim - Claims project for the specified organization
v1_claim_project_for_organization - Gets all projects for the given organization
v1_get_all_projects_for_organization
Try asking
List my projects and run "select count(*) from users" on the production one.
Usage and limits
Every account gets a free daily allowance of tool calls; connecting, listing and searching are not counted. See the limits. Only a tool that runs costs a call.