Selfhosted Supabase

Regular

tools are accessible by any authenticated Supabase JWT (authenticated or service_role role).

Privileged

tools require a service_role JWT (HTTP mode) or direct database/service-key access (stdio mode).

list_tables

Lists tables in the database schemas

list_extensions

Lists installed PostgreSQL extensions

list_available_extensions

Lists all available (installable) extensions

list_migrations

Lists applied migrations from supabase_migrations.schema_migrations

apply_migration

Applies a SQL migration and records it in supabase_migrations.schema_migrations

list_table_columns

Lists columns for a specific table

list_indexes

Lists indexes for a specific table

list_constraints

Lists constraints for a specific table

list_foreign_keys

Lists foreign keys for a specific table

list_triggers

Lists triggers for a specific table

list_database_functions

Lists user-defined database functions

get_function_definition

Gets the source definition of a function

get_trigger_definition

Gets the source definition of a trigger

execute_sql

Executes an arbitrary SQL query

explain_query

Runs EXPLAIN ANALYZE on a query

get_database_connections

Shows active connections (pg_stat_activity)

get_database_stats

Retrieves database statistics (pg_stat_*)

get_index_stats

Shows index usage statistics

get_vector_index_stats

Shows pgvector index statistics

list_rls_policies

Lists Row-Level Security policies for a table

get_rls_status

Shows RLS enabled/disabled status for tables

get_advisors

Retrieves security and performance advisory notices

get_project_url

Returns the configured Supabase URL

verify_jwt_secret

Checks if the JWT secret is configured

generate_typescript_types

Generates TypeScript types from the database schema

rebuild_hooks

Restarts the pg_net worker (if used)

get_logs

Retrieves recent log entries (analytics stack or CSV fallback)

list_auth_users

Lists users from auth.users

get_auth_user

Retrieves details for a specific user

create_auth_user

Creates a new user in auth.users (password bcrypt-hashed via pgcrypto)

update_auth_user

Updates user details (password bcrypt-hashed if changed)

delete_auth_user

Deletes a user from auth.users

list_storage_buckets

Lists all storage buckets

list_storage_objects

Lists objects within a specific bucket

get_storage_config

Retrieves storage bucket configuration

update_storage_config

Updates storage bucket settings

list_realtime_publications

Lists PostgreSQL publications (e.g. supabase_realtime)

list_cron_jobs

Lists scheduled jobs (requires pg_cron extension)