News for hackers. Stuff that matters.

A comment on Supabase MCP can leak an entire SQL Database, a lethal trifecta attack. Parent comment

Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by darth_avocado on Tuesday July 08, 2025 @08:13PM (#44505163)
If you restrict MCP enough, you get a regular server with REST API endpoints.
[ Parent | on HN ]
Re:Supabase MCP can leak an entire SQL Database, a lethal tr... by bravesoul2 on Wednesday July 09, 2025 @04:57AM (#44507735)
Interested in how that is done.

By the way "regular server" is doing a lot of the work there. The transfer of a million dollars from your bank is API calls to a regular server.

[ Parent | on HN ]