MCP Server Policy
SUPABASE MCP POLICY
Enforce policies on every tool call to the Supabase MCP Server. 32 tools listed, categorised, and ready for rules.
GET STARTED
Download this policy scaffold and add your rules. Intercept enforces them on every tool call before it reaches Supabase.
# Download policy scaffold
curl -o supabase.yaml https://raw.githubusercontent.com/policylayer/intercept/main/policies/supabase.yaml
# Run with Intercept
intercept --policy supabase.yaml -- npx -y @supabase-community/supabase-mcp Server documentation: https://github.com/supabase-community/supabase-mcp
READ TOOLS
18WRITE TOOLS
3DESTRUCTIVE TOOLS
1EXECUTE TOOLS
1OTHER TOOLS
9POLICY YAML
This scaffold lists every tool with empty rules. Add conditions — rate limits, argument validation, deny rules — then deploy with Intercept.
version: "1"
description: "Policy for supabase-community/supabase-mcp"
default: "allow"
tools:
get_advisors:
rules: []
get_cost:
rules: []
get_edge_function:
rules: []
get_logs:
rules: []
get_organization:
rules: []
get_project:
rules: []
get_project_url:
rules: []
get_publishable_keys:
rules: []
get_storage_config:
rules: []
list_branches:
rules: []
list_edge_functions:
rules: []
list_extensions:
rules: []
list_migrations:
rules: []
list_organizations:
rules: []
list_projects:
rules: []
list_storage_buckets:
rules: []
list_tables:
rules: []
search_docs:
rules: []
create_branch:
rules: []
create_project:
rules: []
update_storage_config:
rules: []
execute_sql:
rules: []
delete_branch:
rules: []
apply_migration:
rules: []
confirm_cost:
rules: []
deploy_edge_function:
rules: []
generate_typescript_types:
rules: []
merge_branch:
rules: []
pause_project:
rules: []
rebase_branch:
rules: []
reset_branch:
rules: []
restore_project:
rules: []RELATED POLICIES
FREQUENTLY ASKED QUESTIONS
What tools does the Supabase MCP server expose?
The Supabase MCP Server exposes 32 tools across 5 categories: Read, Write, Execute, Destructive, Other. Each tool can be individually controlled with Intercept policies.
How do I enforce policies on Supabase?
Download the policy scaffold, add rules (rate limits, argument validation, deny rules), then run Intercept as a proxy in front of the Supabase MCP server. Every tool call is evaluated against your YAML policy before execution.
Is the Supabase policy free to use?
Yes. All Intercept policies are open source under the Apache 2.0 licence. Download, modify, and deploy without restrictions.
ENFORCE POLICIES ON SUPABASE
Open source. One binary. Zero dependencies.