Be the first to get access to new connectors. Get early access →
ConnectorBay Early access

Supabase (BYOK) — connector documentation

  • MCP endpoint: https://byok-supabase.connectorbay.com/mcp
  • REST API: POST https://byok-supabase.connectorbay.com/v1/tools/{tool_name}, described by the OpenAPI 3.1 spec at https://byok-supabase.connectorbay.com/openapi.json
  • Transport: Streamable HTTP, stateless, MCP specification 2025-06-18 or later
  • Authentication: your own Supabase personal access token, sent in the X-Upstream-Key header of every request (never stored, logged or cached)
  • Health: https://byok-supabase.connectorbay.com/health · Tool schemas: https://byok-supabase.connectorbay.com/tools.json
  • Publisher: Unify Dynamics LLC · connectorbay.com/byok-supabase · agent@connectorbay.com

What Supabase (BYOK) is for

Supabase (BYOK) lets an AI assistant read your own Supabase data through the Supabase API with a key you supply (personal access token). Read-only: 11 tools (get_profile, list_organizations, get_organization, list_organization_members, list_projects, get_project, list_edge_functions, list_storage_buckets, list_database_branches, list_migrations, get_security_advisors). The BYOK key travels with each request, is used for that one call only and is never stored, logged or cached; it is only ever sent to api.supabase.com. Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Supabase. Supabase and its logos are trademarks of their owners and are used only to say which service the connector works with.

Ask your assistant things like:

  • "Which Supabase account is my token connected to?"
  • "Which Supabase organizations do I belong to?"
  • "Which Supabase plan is my organization on?"
  • "Who are the members of my Supabase organization?"
  • "What Supabase projects do I have and are they healthy?"
  • "Show details of my Supabase project"

What it does

  • get_profile: Show the Supabase account the token belongs to: username and primary email.
  • list_organizations: List the Supabase organizations the token can see, with id, slug and name.
  • get_organization: Get one Supabase organization: name, plan (free, pro, team or enterprise) and allowed release channels.
  • list_organization_members: List the members of a Supabase organization with name, email, role and whether MFA is on.
  • list_projects: List all Supabase projects the token can access with ref, organization, region, status and Postgres version.
  • get_project: Get one Supabase project by ref: name, organization, region, status, database host and Postgres version.
  • list_edge_functions: List the edge functions deployed in a Supabase project with slug, name, status, version and JWT verification flag.
  • list_storage_buckets: List the storage buckets of a Supabase project with name, public flag and dates. File contents are not returned.
  • list_database_branches: List the preview branches of a Supabase project with git branch, status, persistence and dates. Needs a plan with branching.
  • list_migrations: List the database migrations applied to a Supabase project: version and name only, no SQL.
  • get_security_advisors: List security advisor findings for a Supabase project (for example tables without row level security) with level, title, description and remediation text.

BYOK key

You bring your own Supabase personal access token (https://supabase.com/dashboard/account/tokens). Your assistant sends it in the X-Upstream-Key header with each request. ConnectorBay uses it for that one call only: it is never stored, logged or cached, never shown in an answer, and it is only sent to api.supabase.com over https, with no redirects followed. Create a key with the fewest permissions the tools need (read-only if the provider offers it), and revoke it at the provider whenever you like.

Data sources

Live from the Supabase API (api.supabase.com) with a BYOK key; documentation: https://supabase.com/docs/reference/api/introduction. Endpoints checked against that documentation on 2026-10-16.

What it is not

Unofficial connector by Unify Dynamics LLC: not affiliated with, endorsed by or sponsored by Supabase. Supabase and its logos are trademarks of their owners and are used only to say which service the connector works with. It is read-only: it never creates, changes, sends or deletes anything in your Supabase account.

Built for: Worldwide. Languages: English.