MR DB Query Guard

Supabase MCP policy

Supabase MCP Policy

Supabase makes database-backed apps easy to build, and MCP agents need a policy layer that respects customer fields, auth tables, and product analytics data.

Open scanner preview

Review steps

  1. Treat auth and customer profile columns as sensitive by default.
  2. Keep agent queries read-only unless explicitly approved.
  3. Redact PII from previews.
  4. Log policy decisions for support and compliance teams.