Both Supabase loadouts connect the hosted MCP server in read-only mode, scoped to one project. One is a full Next.js SaaS starter with auth and RLS; the other is a focused safety layer for any Supabase project: migrations tested locally, expand-and-contract for destructive changes and query results treated as untrusted data.
Every one installs for Claude Code, Codex CLI, Cursor, Gemini CLI, Antigravity CLI and GitHub Copilot unless its card says otherwise.
Rules, an RLS audit skill and a read-only Supabase MCP config for vibe-coding a Next.js App Router SaaS without leaking your database.
Supabase MCP scoped to one dev project, read-only, database and docs tools only; every change as a reviewed migration with RLS, policy and expand-contract rules.
Looking for something narrower? Search within Supabase or filter everything.