The Supabase cli and MCP tool are great when you're the one working on your project. However, when you want to expose your endpoints and data to your co-workers or customers, this can introduce some security risks.
I've been working on a project called Shredly (https://shredly.io/)
Shredly can turn your Supabase project into an MCP server, giving an AI agent access to only the data and tools you want to give it. Avoid dropped tables, deleting users, and rotating API keys.
We're currently supporting 2 methods of integration, either through an API key (for internal tools) or Oauth (good for customer facing products). Checkout our docs for more info or shoot me a comment if you have any questions.
The user introduces Shredly, a project designed to enhance security by allowing controlled access to Supabase projects. Shredly acts as an MCP server, enabling AI agents to access only specified data and tools, thus preventing security risks like dropped tables and deleted users. Integration is possible via API key or OAuth.