Self-Hosted Supabase MCP Server - Enhanced Security Edition

Overview

This is a secure, production-ready Model Context Protocol (MCP) server for interacting with self-hosted Supabase instances. It's an enhanced fork of the original selfhosted-supabase-mcp that adds comprehensive security fixes, enterprise features, and deployment optimizations for Docker and Coolify environments.

Key Features

• Security Hardened: Addresses multiple security vulnerabilities from the original repository (issues #5, #7, #8, #9, #10).
• Production Ready: Optimized for Docker/Coolify deployments with connection pooling, retry logic, and resource limits.
• Management Tools: Includes built-in utilities for Docker container management, database backups, and recovery.
• Monitoring: Features health checks, performance analysis, and enhanced logging.
• Easy Deployment: Available via Smithery.ai for one-click installation.

How to Use

Quick Install (via Smithery)

The simplest method is using the Smithery CLI:

npx @smithery/cli install @mistersandfr/selfhosted-supabase-mcp

Manual Setup

1. Clone and build the project:
   bash git clone https://github.com/MisterSandFR/selfhosted-supabase-mcp.git cd selfhosted-supabase-mcp npm install npm run build

2. Run the server with your credentials:
   bash npm start -- --url YOUR_SUPABASE_URL --anon-key YOUR_ANON_KEY

Docker

Build and run the container:

docker build -t selfhosted-supabase-mcp .
docker run -e SUPABASE_URL=your_url -e SUPABASE_ANON_KEY=your_key selfhosted-supabase-mcp

Configuration

Environment Variables

Claude Desktop Integration

Add this configuration to your Claude Desktop config.json:

{
  "mcp-servers": {
    "selfhosted-supabase": {
      "command": "npx",
      "args": [
        "@smithery/cli",
        "run",
        "@mistersandfr/selfhosted-supabase-mcp"
      ],
      "env": {
        "SUPABASE_URL": "https://your-instance.supabase.co",
        "SUPABASE_ANON_KEY": "your-anon-key",
        "SUPABASE_SERVICE_ROLE_KEY": "optional-service-key",
        "DATABASE_URL": "optional-postgres-url"
      }
    }
  }
}

Input/Output

The server acts as a bridge between an MCP client (like Claude Desktop) and your self-hosted Supabase backend. You provide your Supabase credentials and URL, and the server enables the MCP client to perform authorized database queries and operations through the Supabase API.