Integration · Developer tools

Connect Claude & ChatGPT to Supabase

Ask your AI how many users signed up this week, what the auth logs show, or which tables lack row level security in Supabase. It can run read-only SQL against your database, query project logs, check service health and API usage, and read security and performance advisor findings. It also reads your projects, edge functions, branches, migrations, backups and storage buckets.

Connect Supabase free

Free plan, no credit card. Takes about a minute.

Try asking

“How many rows were added to the orders table this week?”
The AI runs a read-only SQL query against your project's database and returns the count. Queries that try to write are rejected.
“Which tables are missing row level security?”
It reads the security advisor findings for the project and lists the tables without row level security.
“Why are auth requests failing since 10:00?”
It queries the project's auth logs with SQL for the time range and sums up the errors it finds.

What your AI can do

Database and logs

Run read-only SQL against your database, query API, database, auth and edge function logs, and list migrations and backups.

Health and advisors

Check the health of each project service, read API request counts, and see security and performance advisor findings such as missing indexes.

Projects and functions

List organizations, members and projects, and read edge functions with their stats, preview branches and storage buckets.

“Is the send-invoice edge function throwing errors?”
It finds the function and reads its invocations, errors and execution times for the last hour or day.
“Is everything healthy in the project, and is point-in-time recovery on?”
It checks the health of the database, auth, REST, realtime and storage services, then lists backups and whether point-in-time recovery is enabled.
“Which migrations have been applied, and what preview branches are open?”
It lists the migrations applied to the project and the preview branches with their status.

155 tools for Supabase

These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.

approve_inviteVisible to othersAccept a invite (project ref). Has effects visible outside this system. API summary: Accepts invitation for JIT database access.
cancel_restoreDeletesCancel a restore (project ref). Destructive action; may require approval. API summary: Cancels the given project restoration.
create_applyChanges dataCreate a new apply. API summary: Updates project's network restrictions.
create_branch_pushChanges dataCreate a new push for a branch. API summary: Pushes a database branch.
create_branch_resetChanges dataCreate a new reset for a branch. API summary: Resets a database branch.
create_check_availabilityChanges dataCreate a new check availability. Required: vanity subdomain. API summary: Checks vanity subdomain availability.
create_companyChanges dataCreate a new company. Required: name. API summary: Create an organization.
create_diskChanges dataCreate a new disk. Required: attributes. API summary: Modify database disk.
create_enrichedChanges dataCreate a new enriched. API summary: Gets project's network bans with additional information about which databases they affect.
create_initializeChanges dataCreate a new initialize. Required: custom hostname. API summary: Updates project's custom hostname configuration.
create_inviteVisible to othersCreate a new invite. Required: email or roles. Has effects visible outside this system. API summary: Invites an external user to a database for JIT access.
create_jitChanges dataCreate a new jit. Required: role or rhost. API summary: Authorize user-id to role mappings for JIT access.
create_legacyChanges dataCreate a new legacy. API summary: Set up the project's existing JWT secret as an inuse JWT signing key. This endpoint will be removed in the future always check for HTTP 404….
create_login_roleDeletesCreate a new login role. Required: read only. Destructive action; may require approval. API summary: Create a login role for CLI with temporary password.
create_migrationChanges dataCreate a new migration. Required: query. API summary: Apply a database migration.
create_projectChanges dataCreate a new project. Required: db pass, name or organization slug. Search projects first to avoid duplicates. API summary: Create a project.
create_project_api_keyChanges dataCreate a new api key for a project. Required: type or name. API summary: Creates a new API key for the project.
create_project_branchChanges dataCreate a new branch for a project. Required: branch name. API summary: Create a database branch.
create_project_pauseChanges dataCreate a new pause for a project. API summary: Pauses the given project.
create_project_restartChanges dataCreate a new restart for a project. API summary: Restarts the given project.
create_project_secretVisible to othersCreate a new secret for a project. Required: items. Has effects visible outside this system. API summary: Bulk create secrets.
create_project_v1_upgrade_postgres_versionChanges dataCreate a new project for a project. Required: target version. Search projects first to avoid duplicates. API summary: Upgrades the project's Postgres version.
create_providerChanges dataCreate a new provider. Required: type. API summary: Creates a new SSO provider.
create_removeChanges dataCreate a new remove. Required: database identifier. API summary: Remove a read replica.
create_retrieveChanges dataCreate a new retrieve. API summary: Gets project's network bans.
create_reverifyChanges dataCreate a new reverify. API summary: Attempts to verify the DNS configuration for project's custom hostname configuration.
create_revokeDeletesCreate a new revoke. Required: client id, client secret or refresh token. Destructive action; may require approval. API summary: Revoke oauth app authorization and it's corresponding tokens.
create_setupChanges dataCreate a new setup. Required: read replica region. API summary: Set up a read replica.
create_shutdownChanges dataCreate a new shutdown. API summary: Shutdowns realtime connections for a project.
create_signing_keyChanges dataCreate a new signing key. Required: algorithm. API summary: Create a new signing key for the project in standby status.
create_temporary_disableChanges dataCreate a new temporary disable. API summary: Disables project's readonly mode for the next 15 minutes.
create_third_party_authChanges dataCreate a new third party auth. API summary: Creates a new third-party auth integration.
delete_branchDeletesPermanently delete a branch by branch id or ref. Destructive action; may require approval. API summary: Delete a database branch.
delete_inviteDeletesPermanently delete a invite by invite id. Destructive action; may require approval. API summary: Deletes the invite for an external user to a database for JIT access.
delete_jitDeletesPermanently delete a jit by user id. Destructive action; may require approval. API summary: Delete JIT access by user-id.
delete_login_rolesMoves moneyPermanently delete a login role by project ref. Financial or irreversible action; may require approval. API summary: Delete existing login roles used by CLI.
delete_migrationsMoves moneyPermanently delete a migration by project ref. Financial or irreversible action; may require approval. API summary: Rollback database migrations and remove them from history table.
delete_projectDeletesPermanently delete a project by project ref. Destructive action; may require approval. API summary: Deletes the given project.
delete_project_api_keyDeletesPermanently delete a api key by api key id. Destructive action; may require approval. API summary: Deletes an API key for the project.
delete_project_branchesMoves moneyPermanently delete a branch by project ref. Financial or irreversible action; may require approval. API summary: Disables preview branching.
delete_project_custom_hostnamesMoves moneyPermanently delete a custom hostname by project ref. Financial or irreversible action; may require approval. API summary: Deletes a project's custom hostname configuration.
delete_project_functionDeletesPermanently delete a function by function slug. Destructive action; may require approval.
delete_project_network_bansMoves moneyPermanently delete a network ban by project ref. Financial or irreversible action; may require approval. API summary: Remove network bans.
delete_project_secretsMoves moneyPermanently delete a secret by project ref. Financial or irreversible action; may require approval. API summary: Bulk delete secrets.
delete_project_vanity_subdomainsMoves moneyPermanently delete a vanity subdomain by project ref. Financial or irreversible action; may require approval. API summary: Deletes a project's vanity subdomain configuration.
delete_providerDeletesPermanently delete a provider by provider id. Destructive action; may require approval. API summary: Removes a SSO provider by its UUID.
delete_signing_keyDeletesPermanently delete a signing key by signing key id. Destructive action; may require approval. API summary: Remove a signing key from a project. Only possible if the key has been in revoked status for a while.
delete_third_party_authDeletesPermanently delete a third party auth by tpa id. Destructive action; may require approval. API summary: Removes a third-party auth integration.
get_action_statusChanges dataGet the current status of a action by run id. API summary: Update the status of an action run.
get_api_usageGet API request counts for a project over an interval (e.g. 1hr, 1day, 7day).
get_branchGet one preview branch's details and status. Pass branch_id_or_ref.
get_companyGet one company by company slug. API summary: Gets information about the organization.
get_edge_functionGet one edge function's details. Pass function_slug.
get_edge_function_statsGet invocation, error and execution-time stats for an edge function. Pass function_id and interval (e.g. 1hr, 3hr, 1day).
get_migrationGet one migration by version. API summary: Fetch an existing entry from migration history.
get_projectGet one project's details: name, region, status and database host.
get_project_actionGet one action for a project by run id. API summary: Get the status of an action run.
get_project_api_keyGet one api key for a project by api key id. API summary: Get API key.
get_project_branchGet one branch for a project by name. API summary: Get a database branch.
get_project_healthCheck the health of a project's services. Pass services, e.g. ['db','auth','rest','realtime','storage'].
get_providerGet one provider by provider id. API summary: Gets a SSO provider by its UUID.
get_signing_keyGet one signing key by signing key id. API summary: Get information about a signing key.
get_snippetGet one snippet by snippet id. API summary: Gets a specific SQL snippet.
get_third_party_authGet one third party auth by tpa id. API summary: Get a third-party integration.
get_upgrade_statusGet the current status of a upgrade by project ref. API summary: Gets the latest status of the project's upgrade.
list_action_logsList logs for a action. API summary: Get the logs of an action run.
list_authsList auths. API summary: Gets project's auth config.
list_autoscalesList autoscales. API summary: Gets project disk autoscale config.
list_available_regionsList available regions. Optional filters: organization slug, continent or desired instance size. API summary: Gets the list of available regions that can be used for a new project.
list_billing_addons_and_compute_instance_selectionsList projects. API summary: List billing addons and compute instance selections.
list_branch_diffsList diffs for a branch. Optional filters: included schemas or pgdelta. API summary: Diffs a database branch.
list_branchesList a project's preview branches with their status.
list_company_entitlementsList entitlements for a company. API summary: Get entitlements for an organization.
list_contextsList contexts. API summary: Gets database metadata for the given project.
list_database_backupsList a project's database backups and whether point-in-time recovery is enabled.
list_disksList disks. API summary: Get database disk attributes.
list_edge_functionsList a project's edge functions with their status and version.
list_function_bodiesList bodies for a function. API summary: Retrieve a function body.
list_jitsList jits. API summary: Get user-id to role mappings for JIT access.
list_legaciesList legacies. API summary: Check whether JWT based legacy (anon, servicerole) API keys are enabled.
list_legacies_v1_get_legacy_signing_keyList legacies. API summary: Get the signing key information for the JWT secret imported as signing key for this project.
list_listsList lists. API summary: List all user-id to role mappings for JIT access.
list_metricsList metrics. API summary: Scrape a project's metrics.
list_migrationsList the database migrations applied to a project.
list_openapisList openapis. Optional filters: schema. API summary: Get PostgREST OpenAPI spec.
list_organization_membersList the members of an organization and their roles. Pass organization_slug.
list_organization_projectsList the projects in one organization. Pass organization_slug; filter by search or statuses.
list_organizationsList the organizations you belong to.
list_performance_advisoriesList performance advisor findings for a project, such as missing indexes.
list_pgbouncersList pgbouncers. API summary: Get project's pgbouncer config.
list_poolersList poolers. API summary: Gets project's supavisor config.
list_postgresList postgres. API summary: Gets project's Postgres config.
list_profilesList profiles. API summary: Gets the user's profile.
list_project_actionsList actions for a project. Results are paginated. API summary: List all action runs.
list_project_api_keysList api keys for a project. Optional filters: reveal. API summary: Get project api keys.
list_project_claimsList project claims. Optional filters: project ref, client id, response type, redirect uri, state or response mode. API summary: Authorize user through oauth and claim a project.
list_project_custom_hostnamesList custom hostnames for a project. API summary: Gets project's custom hostname config.
list_project_jit_accessesList jit accesses for a project. API summary: Get project's temporary access configuration.
list_project_network_restrictionsList network restrictions for a project. API summary: Gets project's network restrictions.
list_project_pgsodiaList pgsodia for a project. API summary: Gets project's pgsodium config.
list_project_postgrestsList postgrests for a project. API summary: Gets project's postgrest config.
list_project_readonliesList readonlies for a project. API summary: Returns project's readonly mode status.
list_project_secretsList secrets for a project. API summary: List all secrets.
list_project_ssl_enforcementsList ssl enforcements for a project. API summary: Get project's SSL enforcement configuration.
list_project_vanity_subdomainsList vanity subdomains for a project. API summary: Gets current vanity subdomain config.
list_projectsList all Supabase projects you have access to, with region, status and organization.
list_projects_v1_get_postgres_upgrade_eligibilityList projects. API summary: Returns the project's eligibility for upgrades.
list_providersList providers. API summary: Lists all SSO providers.
list_realtimesList realtimes. API summary: Gets realtime configuration.
list_schedulesList schedules. API summary: Gets the backup schedule for a project.
list_security_advisoriesList security advisor findings for a project, such as tables without row level security.
list_signing_keysList signing keys. API summary: List all signing keys for the project.
list_snippetsList snippets. Optional filters: project ref, sort by or sort order. Results are paginated. API summary: Lists SQL snippets for the logged in user.
list_storage_bucketsList a project's storage buckets.
list_storagesList storages. API summary: Gets project's storage config.
list_third_party_authsList third party auths. API summary: Lists all third-party auth integrations.
list_typescriptsList typescripts. Optional filters: included schemas. API summary: Generate TypeScript types.
list_usage_api_requests_countsList usage api requests counts. API summary: Gets project's usage api requests count.
list_utilsList utils. API summary: Get disk utilization.
query_project_logsQuery a project's logs (API, database, auth, edge functions) with SQL over the log tables. Pass sql and optionally iso_timestamp_start/iso_timestamp_end.
remove_billing_addons_or_revert_compute_instance_sizingDeletesPermanently delete a project by project variant. Destructive action; may require approval. API summary: Remove billing addons or revert compute instance sizing.
restore_backup_pitrChanges dataRestore a backup (project ref). API summary: Restores a PITR backup for a database.
restore_branchChanges dataRestore a branch (branch id or ref). API summary: Restore a scheduled branch deletion.
restore_projectChanges dataRestore a project (project ref). API summary: Lists available restore versions for the given project.
restore_project_restoreChanges dataRestore a project (project ref). API summary: Restores the given project.
restore_webhookDeletesEnable a webhook (project ref). Destructive action; may require approval. API summary: Enables Database Webhooks on the project.
run_read_only_queryChanges dataRun a read-only SQL query against a project's database and return the rows. Pass query (SQL). Writes are rejected.
search_databasesChanges dataSearch databases. Use this to find existing databases before creating a new database. API summary: Run sql query.
submit_branchVisible to othersMerge a branch (branch id or ref). Has effects visible outside this system. API summary: Merges a database branch.
submit_custom_hostnameVisible to othersActivate a custom hostname (project ref). Has effects visible outside this system. API summary: Activates a custom hostname for a project.
submit_vanity_subdomainVisible to othersActivate a vanity subdomain (project ref). Has effects visible outside this system. API summary: Activates a vanity subdomain for a project.
update_authsVisible to othersUpdate an existing auth identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updates a project's auth config.
update_branchChanges dataUpdate an existing branch identified by branch id or ref. Only the fields you pass are changed. API summary: Update database branch config.
update_jitsVisible to othersUpdate an existing jit identified by project ref. Has effects visible outside this system. API summary: Updates a user mapping for JIT access.
update_legaciesVisible to othersUpdate an existing legacy identified by project ref. Has effects visible outside this system. API summary: Disable or re-enable JWT based legacy (anon, servicerole) API keys. This API endpoint will be removed in the future, check for HTTP 404 Not….
update_migrationChanges dataUpdate an existing migration identified by version. Only the fields you pass are changed. API summary: Patch an existing entry in migration history.
update_migrationsVisible to othersUpdate an existing migration identified by project ref. Has effects visible outside this system. API summary: Upsert a database migration without applying.
update_passwordsMoves moneyUpdate an existing password identified by project ref. Only the fields you pass are changed. Financial or irreversible action; may require approval. API summary: Updates the database password.
update_poolersVisible to othersUpdate an existing pooler identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updates project's supavisor config.
update_postgresVisible to othersUpdate an existing postgre identified by project ref. Has effects visible outside this system. API summary: Updates project's Postgres config.
update_projectChanges dataUpdate an existing project identified by project ref. Only the fields you pass are changed. API summary: Updates the given project.
update_project_api_keyChanges dataUpdate an existing api key identified by api key id. Only the fields you pass are changed. API summary: Updates an API key for the project.
update_project_functionChanges dataUpdate an existing function identified by function slug. Only the fields you pass are changed. API summary: Update a function.
update_project_functionsVisible to othersUpdate an existing function identified by project ref. Has effects visible outside this system. API summary: Bulk update functions.
update_project_jit_accessesVisible to othersUpdate an existing jit access identified by project ref. Has effects visible outside this system. API summary: Update project's temporary access configuration.
update_project_network_restrictionsVisible to othersUpdate an existing network restriction identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updates project's network restrictions by adding or removing CIDRs.
update_project_pgsodiaVisible to othersUpdate an existing pgsodium identified by project ref. Has effects visible outside this system. API summary: Updates project's pgsodium config. Updating the rootkey can cause all data encrypted with the older key to become inaccessible.
update_project_postgrestsVisible to othersUpdate an existing postgrest identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updates project's postgrest config.
update_project_ssl_enforcementsVisible to othersUpdate an existing ssl enforcement identified by project ref. Has effects visible outside this system. API summary: Update project's SSL enforcement configuration.
update_projectsVisible to othersUpdate an existing project identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Apply or update billing addons, including compute instance size.
update_providerChanges dataUpdate an existing provider identified by provider id. API summary: Updates a SSO provider by its UUID.
update_realtimesVisible to othersUpdate an existing realtime identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updates realtime configuration.
update_schedulesVisible to othersUpdate an existing schedule identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updates the backup schedule time for a project.
update_signing_keyChanges dataUpdate an existing signing key identified by signing key id. Only the fields you pass are changed. API summary: Update a signing key, mainly its status.
update_storagesVisible to othersUpdate an existing storage identified by project ref. Only the fields you pass are changed. Has effects visible outside this system. API summary: Updates project's storage config.

Set up in three steps

1
Pick the app
Create a free HeyMyApps account and choose Supabase from the app list.
2
Paste your key
Paste a Supabase personal access token and the project ref of the project you want to use. In the Supabase Dashboard, open your account menu > Access Tokens (supabase.com/dashboard/account/tokens) and click Generate new token. Copy the token, which starts with sbp_.
3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
1. Click your name, then Settings › Connectors › Add custom connector.
2. Paste your link as the Remote MCP server URL.
3. Switch it on from the + menu in a chat.

Questions

What can the AI do in Supabase?

The AI can run read-only SQL queries, query project logs, check project health and API usage, and read security and performance advisors. It can also read organizations, members, projects, edge functions and their stats, preview branches, migrations, backups and storage buckets.

Does the AI see my Supabase access token?

No. Your Supabase access token is encrypted at rest and never shown to the AI. After you save it, it is not shown again, not even to you. The AI only sees the results of the tools it calls.

Can I control what the AI is allowed to do?

Yes. You choose which tools are switched on. Running SQL against your database can require your approval before each query runs, so you see the query first. Every tool call is logged.

Does it work with ChatGPT?

Yes. In ChatGPT go to Settings › Apps & Connectors › Advanced and turn on Developer mode, then add your HeyMyApps link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link also works in Claude (Settings › Connectors › Add custom connector), Cursor and other MCP clients.

What does it cost?

HeyMyApps has a free plan with no credit card required. Paid plans bill per completed task. You also need your own Supabase account.

Can the AI change my database?

No. The SQL tool is read-only, and queries that try to insert, update or delete data are rejected. The other tools read project details, logs and advisor findings. The AI does not change data, schema or project settings.