Supabase Provider

SUPABASE_PROJECT_ID=your-project-ref
SUPABASE_PUBLISHABLE_KEY=sb_publishable_...

import { MCPServer } from "mcp-use";
import { oauthSupabaseProvider } from "mcp-use/oauth/supabase";

const projectId = process.env.SUPABASE_PROJECT_ID;
if (!projectId) throw new Error("SUPABASE_PROJECT_ID is required");

const server = new MCPServer({
  name: "supabase-server",
  version: "1.0.0",
  oauth: oauthSupabaseProvider({ projectId }),
});

export default server;

oauthSupabaseProvider({
  supabaseUrl: process.env.SUPABASE_URL!,
  jwtSecret: process.env.SUPABASE_JWT_SECRET,
  // audience: "authenticated",
});

import { createClient } from "@supabase/supabase-js";

const supabaseUrl =
  process.env.SUPABASE_URL ??
  `https://${process.env.SUPABASE_PROJECT_ID}.supabase.co`;

server.tool(
  {
    name: "list_notes",
    description: "Return notes visible under Supabase RLS.",
  },
  async (_args, ctx) => {
    const supabase = createClient(
      supabaseUrl,
      process.env.SUPABASE_PUBLISHABLE_KEY!,
      {
        auth: {
          persistSession: false,
          autoRefreshToken: false,
          detectSessionInUrl: false,
        },
        global: {
          headers: {
            Authorization: `Bearer ${ctx.auth.accessToken}`,
          },
        },
      },
    );

    const { data, error } = await supabase.from("notes").select();
    if (error) {
      return {
        isError: true,
        content: [{ type: "text", text: error.message }],
      };
    }
    return {
      content: [{ type: "text", text: JSON.stringify(data) }],
    };
  },
);