Supabase for AI agents
Postgres database, auth, and storage with instant APIs. Sign in once through OAuth and every agent you run can use it.
- Signs in with OAuth
- Ready to connect
- Any MCP client
- No card required
The route from an agent to Supabase
Once Supabase is set up in your workspace, any agent you run can reach it: a Spinrun agent, or Claude, ChatGPT and Cursor through one MCP endpoint. Every call passes through the Spinrun gateway, which sorts it by risk and writes it to the activity log.
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app read, write and destructive rules at the gateway on Free and Pro.
Supabase in the catalog
Postgres database, auth, and storage with instant APIs. · Developer Tools & DevOps
- An agent gets a jobFrom chat, a schedule, or your own AI client
- Spinrun checks the callSorted as a read, a write or a destructive call
- Supabase does the workThrough the connection you set up in your workspace
- Every call is loggedTool, outcome and duration, in one activity log
Three steps
From connection to first call
Connect an app once
Sign in from your workspace with OAuth or an API key. Spinrun keeps the credential in an encrypted vault, never in an agent's config.
Decide what it may do
By default, every change an agent makes in a connected app waits for your approval, on every plan. Enhanced Control adds per-app rules for reads, writes and destructive calls on Free and Pro.
Let any agent use it
Claude, ChatGPT, Cursor or a Spinrun agent reach the app through one MCP endpoint, and every call is written to the same activity log.
What it can do
Every Supabase action, sorted by risk
Spinrun sorts every Supabase action into one of three tiers. By default, agents ask before a write; on Free and Pro, the rules you set decide which tiers run.
- Writes
Activate vanity subdomain for project
SUPABASE_BETA_ACTIVATES_A_VANITY_SUBDOMAIN_FOR_A_PROJECT
Activates a vanity subdomain for the specified supabase project, requiring subsequent dns configuration for the subdomain to become operational.
- Writes
Authorize user through OAuth
SUPABASE_BETA_AUTHORIZE_USER_THROUGH_OAUTH
Generates a supabase oauth 2.0 authorization url for user redirection, requiring a pre-registered `client id` and a `redirect uri` that matches one of its pre-registered uris.
- Writes
Beta activate custom hostname for project
SUPABASE_BETA_ACTIVATES_A_CUSTOM_HOSTNAME_FOR_A_PROJECT
Activates a previously configured custom hostname for a supabase project, assuming dns settings are verified externally.
- Writes
Beta get project's custom hostname config
SUPABASE_BETA_GETS_PROJECT_S_CUSTOM_HOSTNAME_CONFIG
Retrieves a supabase project's custom hostname configuration, including its status, ssl certificate, and ownership verification, noting that availability may depend on the project's plan.
- Destructive
Beta remove a read replica
SUPABASE_BETA_REMOVE_A_READ_REPLICA
Irreversibly initiates the removal of a specified read replica from an existing supabase project, confirming only the start of the process, not its completion.
- Writes
Beta update project network restrictions
SUPABASE_BETA_UPDATES_PROJECT_S_NETWORK_RESTRICTIONS
Updates and applies network access restrictions (ipv4/ipv6 cidr lists) for a supabase project, which may terminate existing connections not matching the new rules.
- Writes
Check vanity subdomain availability
SUPABASE_BETA_CHECKS_VANITY_SUBDOMAIN_AVAILABILITY
Checks if a specific vanity subdomain is available for a supabase project; this action does not reserve or assign the subdomain.
- Writes
Create a database branch
SUPABASE_CREATE_A_DATABASE_BRANCH
Creates a new, isolated database branch from an existing supabase project (identified by `ref`), useful for setting up separate environments like development or testing, which can optionally be linked to a git branch.
- Writes
Create a function
SUPABASE_CREATE_A_FUNCTION
Creates a new serverless edge function for a supabase project (identified by `ref`), requiring valid javascript/typescript in `body` and a project-unique `slug 1` identifier.
Same category
Other Developer Tools & DevOps apps
Other apps in this category that your agents can use.
Questions about Supabase
You approve Supabase in its own sign-in window. Spinrun keeps the token in an encrypted vault, refreshes it before it expires, and you can revoke it in one click.
Put Supabase to work. Start free.
Connect Supabase, decide what it may do, and give an agent its first job.