registry / record

@supabase/mcp-server-supabase

npm / sealed 2026-06-12 / No. b64fd829

re-scan this server gate it in your CI

> throne registry @supabase/mcp-server-supabase sealed

This server runs. It just needs your API keythe server installs and starts, then exits asking for an API key — Please provide a personal access token (PAT) with the --access-token flag or set the SUPABASE_ACCESS_TOKEN environment variable

receiptsealed evidence

scan id: b64fd829fc534fb4982b49b8e52aacbd
target: @supabase/mcp-server-supabase
sealed at: 2026-06-12 06:50:52Z
evidence hash: sha256:c67a4d15c0189945b5d1ce535a7f69bfef78994141db48d46de402b0ce0eb5bd

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: Please provide a personal access token (PAT) with the --access-token flag or set the SUPABASE_ACCESS_TOKEN environment variable

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: Please provide a personal access token (PAT) with the --access-token flag or set the SUPABASE_ACCESS_TOKEN environment variable

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON

SECURITY: REVIEW / 1 finding(s) / review material, not a verdict

LOWTHR-NET-05 / Hardcoded outbound endpoints

3 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: ai-sdk.dev (package/dist/index.d.ts:884), api.supabase.com (package/dist/chunk-5PS6HETH.js:39), supabase.com (package/dist/chunk-P2KUVMMH.cjs:2)

package/dist/chunk-5PS6HETH.js:39

VERDICT: NEEDS YOUR API KEYSANDBOXED RUN — submitted server executed in a disposable microVM — compatibility not assessable: needs credentials: the server installs and starts, then exits asking for an API key — Please provide a personal access token (PAT) with the --access-token flag or set the SUPABASE_ACCESS_TOKEN environment variable / security: review — 1 finding(s), 0 highsealed by THRONE / No. b64fd829 / 2026-06-12

executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.