Appbase

io.github.CloudCorpRecordsPublished by GitHub account CloudCorpRecordsv0.1.0Updated Nov 1, 2026

Supabase projects, tables, SQL, migrations, and storage from your MCP client.

Overview

AI-generated overview

Manages Supabase projects from an MCP client: schema inspection, SQL and migrations, logs, Edge Functions, storage buckets and preview branches.

What you can do
  • List, inspect, create, pause and restore projects and organizations
  • Inspect schema: tables, extensions and applied migrations
  • Run raw SQL or apply tracked migrations, and generate TypeScript types from the schema
  • Read service logs and security or performance advisors, plus project URL and publishable keys
  • List and deploy Edge Functions, and list or create storage buckets
  • Create, merge, reset, rebase and delete preview branches
When to use it
Useful when an assistant should work directly against Supabase: exploring a schema, running queries or DDL migrations, checking logs and advisors, deploying Edge Functions, or managing preview branches and projects without leaving the chat.
Requirements
Runs locally over stdio via npx or the Docker image. Needs a Supabase personal access token in the SUPABASE_ACCESS_TOKEN environment variable, and network access to the Supabase Management API. Project-scoped tools need a project reference.
Before you install
The token grants account-level access to Supabase projects and organizations. Tools can run arbitrary SQL, apply migrations, deploy Edge Functions, create or delete branches, and create, pause or restore projects; branch and project creation take a cost confirmation identifier, so they may incur charges. Publishable and anon keys are returned in output.

Installation

In SourceWeft

  1. Open Appbase in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

appbase

appbase puts a Supabase account within reach of an MCP client or a terminal. Projects and organizations can be listed, inspected, created, paused, and restored. Inside a project you can look at the schema (tables, extensions, migrations), run SQL or apply a tracked migration, read logs and security/performance advisors, fetch the project URL and publishable keys, generate TypeScript types from the live schema, list and deploy Edge Functions, manage storage buckets, and work with preview branches — create, merge, reset, rebase, and delete them.

A Supabase personal access token is required. Put it in the SUPABASE_ACCESS_TOKEN environment variable; it is sent to the Supabase Management API as a Bearer token and never appears in output. When the variable is missing, every call fails with an error that names it.

Install

bash
npx @reneturcios/appbase list_projects

Or run the container image:

bash
docker run -i -e SUPABASE_ACCESS_TOKEN ghcr.io/cloudcorprecords/appbase

The container defaults to the MCP server (see below). Pass CLI arguments to use it as a CLI instead.

CLI

Every MCP tool is also a CLI subcommand. Tool arguments are passed as one JSON object with --json; project-scoped tools take the project reference as project_id:

bash
export SUPABASE_ACCESS_TOKEN=<your Supabase personal access token>
appbase list_projectsappbase list_tables --json '{"project_id": "abcdefghijklmnopqrst"}'appbase execute_sql --json '{"project_id": "abcdefghijklmnopqrst", "query": "select 1"}'appbase get_advisors --json '{"project_id": "abcdefghijklmnopqrst", "type": "security"}'appbase create_branch --json '{"project_id": "abcdefghijklmnopqrst", "name": "feat-x"}'
appbase --version

Results print as JSON. Exit codes: 0 on success, 1 when an API call fails (including a missing SUPABASE_ACCESS_TOKEN), 2 for usage errors.

MCP server

One bin serves both faces. The mcp subcommand starts a stdio MCP server:

bash
npx -y @reneturcios/appbase mcp

MCP client configuration:

json
{  "mcpServers": {    "appbase": {      "command": "npx",      "args": ["-y", "@reneturcios/appbase", "mcp"],      "env": { "SUPABASE_ACCESS_TOKEN": "your Supabase personal access token" }    }  }}

Tools

ToolInput (required in bold)What it does
list_tablesproject_id, schemasLists tables in the given schemas (default public).
list_extensionsproject_idLists installed database extensions.
list_migrationsproject_idLists applied migrations.
execute_sqlproject_id, queryRuns raw SQL in the project's database.
apply_migrationproject_id, name, queryApplies SQL as a tracked migration (for DDL).
get_logsproject_id, serviceRecent logs for one service.
get_advisorsproject_id, typeSecurity or performance advisors.
get_project_urlproject_idThe project's https://<ref>.supabase.co API URL.
get_publishable_keysproject_idPublishable / anon API keys for the project.
generate_typescript_typesproject_id, included_schemasTypeScript types generated from the schema.
list_edge_functionsproject_idLists Edge Functions.
get_edge_functionproject_id, function_slugOne Edge Function's details.
deploy_edge_functionproject_id, name, files, entrypoint_path, import_map_pathDeploys an Edge Function from inline files.
list_storage_bucketsproject_idLists storage buckets.
create_storage_bucketproject_id, name, public, file_size_limit, allowed_mime_typesCreates a storage bucket.
list_branchesproject_idLists preview branches.
create_branchproject_id, name, confirm_cost_idCreates a preview branch.
delete_branchproject_id, branch_idDeletes a preview branch.
merge_branchproject_id, branch_idMerges a branch's migrations and functions into production.
reset_branchproject_id, branch_id, migration_versionResets a branch to its parent state.
rebase_branchproject_id, branch_idRebases a branch onto its parent.
list_projects—Lists all projects for the user.
get_projectidOne project's details.
create_projectname, organization_id, region, confirm_cost_idCreates a project.
pause_projectproject_idPauses a project.
restore_projectproject_idRestores a paused project.
list_organizations—Lists the user's organizations.
get_organizationidOne organization's details.

All calls go to https://api.supabase.com/v1. SQL tools POST to the project's database/query endpoint; list_tables and list_extensions are catalog queries through that same endpoint, and all other SQL passes through exactly as given.

Development

bash
npm installnpm run build   # tsc -> dist/npm test        # node test runner over test/*.test.ts, no network (fake fetch fixtures)npm run dev     # run the CLI from source via tsx

License

MIT — see LICENSE.

Source: README.md at commit 8cc7b4a

Tools

28

list_tables

Lists all tables within the specified schemas.

Parametersschemasproject_idrequired

list_extensions

Lists all extensions in the database.

Parametersproject_idrequired

list_migrations

Lists all migrations in the database.

Parametersproject_idrequired

execute_sql

Executes raw SQL in the database.

Parametersqueryrequiredproject_idrequired

apply_migration

Applies a SQL migration to the database. SQL passed to this tool will be tracked within the database, so use this for DDL operations (schema changes).

Parametersnamerequiredqueryrequiredproject_idrequired

get_logs

Gets logs for a Supabase project by service (api, postgres, edge-function, auth, storage, realtime, or branch-action).

Parametersservicerequiredproject_idrequired

get_advisors

Gets advisory notices for a Supabase project, by type: security or performance.

Parameterstyperequiredproject_idrequired

get_project_url

Gets the API URL for a Supabase project.

Parametersproject_idrequired

get_publishable_keys

Gets the publishable and anon API keys for a Supabase project.

Parametersproject_idrequired

generate_typescript_types

Generates TypeScript types based on the database schema.

Parametersproject_idrequiredincluded_schemas

list_edge_functions

Lists all Edge Functions in a Supabase project.

Parametersproject_idrequired

get_edge_function

Gets details for an Edge Function by slug.

Parametersproject_idrequiredfunction_slugrequired

deploy_edge_function

Deploys an Edge Function to a Supabase project from inline files.

Parametersnamerequiredfilesrequiredproject_idrequiredentrypoint_pathimport_map_path

list_storage_buckets

Lists all storage buckets in a Supabase project.

Parametersproject_idrequired

create_storage_bucket

Creates a new storage bucket in a Supabase project.

Parametersnamerequiredpublicproject_idrequiredfile_size_limitallowed_mime_types

list_branches

Lists all development branches for a Supabase project.

Parametersproject_idrequired

create_branch

Creates a new development branch for a Supabase project.

Parametersnamerequiredproject_idrequiredconfirm_cost_id

delete_branch

Deletes a development branch from a Supabase project.

Parametersbranch_idrequiredproject_idrequired

merge_branch

Merges migrations and edge functions from a development branch into production.

Parametersbranch_idrequiredproject_idrequired

reset_branch

Resets a development branch to its parent state, optionally at a migration version.

Parametersbranch_idrequiredproject_idrequiredmigration_version

rebase_branch

Rebases a development branch on its parent, applying newer migrations.

Parametersbranch_idrequiredproject_idrequired

list_projects

Lists all Supabase projects for the user.

Takes no parameters.

get_project

Gets details for a project.

Parametersidrequired

create_project

Creates a new Supabase project.

Parametersnamerequiredregionconfirm_cost_idorganization_idrequired

pause_project

Pauses a project.

Parametersproject_idrequired

restore_project

Restores a project.

Parametersproject_idrequired

list_organizations

Lists all organizations that the user is a member of.

Takes no parameters.

get_organization

Gets details for an organization.

Parametersidrequired

Version history

1
  1. v0.1.0LatestNov 1, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts