Re:Supabase MCP can leak an entire SQL Database, a lethal tr...
by gregnr on Tuesday July 08, 2025 @05:37PM
(#44504277)
The limitation is that it is data-only (no DDL). A large percentage of folks use Supabase MCP for app development - they ask the LLM to help build their schema and other database objects at dev time, which is not possible through PostgREST (or designed for this use case). This is particularly true for AI app builders who connect their users to Supabase.
[ Parent
| on HN ]
There are no comments on this comment yet.