Supabase Read MCP
for LuumenAI
Inspect Supabase projects, schemas, logs, and Edge Functions from the terminal
Connect Supabase and your agent can look at the projects it is authorized for: project settings and API URLs, development branches, Edge Function source, storage configuration, advisory notices, and generated TypeScript types. Questions about a project get answered from the project itself. Running SQL against the database is a separate, previewed step.
The Supabase Read MCP toolbox
21 tools: 20 read, 1 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadConfirm costAsk the user to confirm their understanding of the cost of creating a new project or branch.
- ReadGenerate typescript typesGenerates TypeScript types for a project.
- ReadGet advisorsGets a list of advisory notices for the Supabase project.
- ReadGet costGets the cost of creating a new project or branch.
- ReadGet edge functionRetrieves file contents for an Edge Function in a Supabase project.
- ReadGet organizationGets details for an organization.
- ReadGet projectGets details for a Supabase project.
- ReadGet project urlGets the API URL for a project.
- ReadGet publishable keysGets all publishable API keys for a project, including legacy anon keys (JWT-based) and modern publishable keys (format: sb_publishable_...).
- ReadGet storage configGet the storage config for a Supabase project.
- ReadList branchesLists all development branches of a Supabase project.
- ReadList edge functionsLists all Edge Functions in a Supabase project.
- ReadList extensionsLists all extensions in the database.
- ReadList migrationsLists all migrations in the database.
- ReadList organizationsLists all organizations that the user is a member of.
- ReadList projectsLists all Supabase projects for the user.
- ReadList storage bucketsLists all storage buckets in a Supabase project.
- ReadList tablesLists all tables in one or more schemas.
- ReadQuery logsRuns a custom read-only ClickHouse SQL query against a Supabase project's unified logs stream, for filtering, aggregating, or joining across log fields more precisely than a simple per-service log…
- ReadSearch docsSearch the Supabase documentation using GraphQL.
- WriteExecute sqlExecutes raw SQL in the Postgres database. Approval by default
One prompt, start to finish
What a governed Supabase Read MCP run looks like inside Luumen.
Questions
Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Read actions answer immediately. Anything that writes — execute sql — is shown as a plan and requires approval by default, including the 1 action classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to Supabase Read MCP — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
PostgreSQLQuery PostgreSQL state safely; maintenance held for approval.
MySQLQuery MySQL state safely; maintenance held for approval.
Microsoft SQL ServerQuery Microsoft SQL Server state safely; maintenance held for approval.Oracle DatabaseQuery Oracle Database state safely; maintenance held for approval.Put Supabase Read MCP to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.