Supabase
Supabase agent skills and MCPs
34 skills
supabasesupabase298KUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client libraries and SSR integrations (supabase-js, @supabase/ssr) in Next.js, React, SvelteKit, Astro, Remix; auth issues (login, logout, sessions, JWT, cookies, getSession, getUser, getClaims, RLS); Supabase CLI or MCP server; schema changes, migrations, declarative schemas, security audits, Postgres extensions (pg_graphql, pg_cron, pg_vector); debsupabase-serversupabase7.8KUse when planning or writing server-side code that uses `@supabase/server` — Edge Functions, Hono apps, webhook handlers, or any backend that creates Supabase clients or validates inbound auth. Trigger **before** writing or modifying any file that imports from `@supabase/server` (or sub-paths like `@supabase/server/core`); calls `withSupabase`, `createSupabaseContext`, `createAdminClient`, `createContextClient`, `verifyAuth`, `verifyCredentials`, or `extractCredentials`; configures an `auth:` mosupabase-postgres-best-practicessupabase421KPostgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill BEFORE writing or changing anything that lives in a Postgres database: creating or altering tables and columns (including choosing column types), schema design, migrations and declarative schema files, RLS policies and the tests that verify them, indexes, triggers, database functions, queues and scheduled jobs (pg_cron, pgmq), vector/semantic search (pgvector), and restoring dumps (pg_restore) or impornextjs-supabase-authsickn336.5KExpert integration of Supabase Auth with Next.js App Routernextjs-typescript-tailwindcss-supabasemindrally1.3KFull-stack Next.js 14 development with TypeScript, TailwindCSS, and Supabase for building production-ready web applications.supabasealinaqiCore Supabase CLI, migrations, RLS, Edge Functionssupabase-nextjsalinaqiNext.js with Supabase and Drizzle ORMnextjs-supabase-authdavila7Expert integration of Supabase Auth with Next.js App Router Use when: supabase auth next, authentication next.js, login supabase, auth middleware, protected route.supabase-postgres-best-practicesdavila7Postgres performance optimization and best practices from Supabase. Use this skill when writing, reviewing, or optimizing Postgres queries, schema designs, or database configurations.supabasemindrallyExpert in Supabase backend development with authentication and database patternssupabase-developmentmindrallySupabase development guidelines for database, authentication, real-time subscriptions, and Edge Functions.prisma-next-supabaseprismaUse Prisma Next with a Supabase project via `@prisma-next/extension-supabase` — wire `extensions: [supabasePack]`, declare cross-space FKs to `supabase:auth.AuthUser`, author RLS policies (`policy_select` / `policy_update` / `@@rls`, `auth.uid()` predicates), build `db.ts` with the `supabase()` factory, bind roles per request (`asUser(jwt)` / `asAnon()` / `asServiceRole()`), query `auth.*` / `storage.*` via the `db.asServiceRole().supabase` admin root, and validate JWTs (`jwksUrl` for current prsupabase-audit-auth-configyoanbernabeuAnalyze Supabase authentication configuration for security weaknesses and misconfigurations.supabase-audit-auth-signupyoanbernabeuTest if user signup is open and identify potential abuse vectors in the registration process.supabase-audit-auth-usersyoanbernabeuTest for user enumeration vulnerabilities through various authentication endpoints.supabase-audit-buckets-listyoanbernabeuList all storage buckets and their configuration to identify the storage attack surface.supabase-audit-buckets-publicyoanbernabeuIdentify storage buckets that are publicly accessible and may contain sensitive data.supabase-audit-buckets-readyoanbernabeuAttempt to list and read files from storage buckets to verify access controls.supabase-audit-functionsyoanbernabeuDiscover and test Supabase Edge Functions for security vulnerabilities and misconfigurations.supabase-audit-realtimeyoanbernabeuTest Supabase Realtime WebSocket channels for unauthorized subscriptions and data exposure.supabase-audit-rlsyoanbernabeuTest Row Level Security (RLS) policies for common bypass vulnerabilities and misconfigurations.supabase-audit-rpcyoanbernabeuList and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.supabase-audit-tables-listyoanbernabeuList all tables exposed via the Supabase PostgREST API to identify the attack surface.supabase-audit-tables-readyoanbernabeuAttempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.supabase-detectyoanbernabeuDetect if a web application uses Supabase by analyzing client-side code, network patterns, and API endpoints.supabase-extract-anon-keyyoanbernabeuExtract the Supabase anon/public API key from client-side code. This key is expected in client apps but important for RLS testing.supabase-extract-db-stringyoanbernabeuCRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.supabase-extract-jwtyoanbernabeuExtract and decode Supabase-related JWTs from client-side code, cookies, and local storage patterns.supabase-extract-service-keyyoanbernabeuCRITICAL - Detect if the Supabase service_role key is leaked in client-side code. This is a P0 severity issue.supabase-extract-urlyoanbernabeuExtract the Supabase project URL from client-side JavaScript code, environment variables, and configuration files.supabase-helpyoanbernabeuQuick reference for all Supabase security audit skills with usage examples and command overview.supabase-pentestyoanbernabeuOrchestrate a complete Supabase security audit with guided step-by-step execution and ownership confirmation.supabase-reportyoanbernabeuGenerate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.supabase-report-compareyoanbernabeuCompare two security audit reports to track remediation progress and identify new vulnerabilities.
13 servers
Supabasesupabase-community2.9KOfficial Supabase MCP server for managing Supabase projects, databases, auth, storage, edge functions, and SQL workflows from AI agents.Supabasealexander-zuev831Manage your Supabase project, execute SQL queries, and more.Self-Hosted SupabaseHenkDz138Interact with self-hosted Supabase instances for database introspection, management, and interaction.SupabaseJoshuaRileyDev52Manage Supabase projects and organizations via the Supabase Management API.SupabaseNightTrek14Interact with Supabase databases, query tables, and generate TypeScript types.SupabaseQuegenx12An MCP server providing administrative control over a Supabase PostgreSQL database, compatible with Cursor's Composer and Codeium's Cascade.Supabase Coolifydj-pearson3Comprehensive MCP server for managing self-hosted Supabase on Coolify with full deployment, migrations, edge functions, and rollback support.Self-Hosted Supabaseabushadab1Interact with self-hosted Supabase instances for database management and introspection.Supabase0xTrxzAccess and manage your Supabase projects through the Model Context Protocol (MCP).SupabaseDynamicEndpointsInteract with Supabase databases, storage, and edge functions.Supabase Memory ServiceForkIt369A memory service using Supabase PostgreSQL with pgvector for semantic search and knowledge graph storage.Supabase Read-OnlySalvSithProvides read-only access to a Supabase database.SupabaseadiletDA server for querying and managing data in a Supabase database.