← MCP Scorecard / supabase-community/supabase-mcp
APass

supabase-community/supabase-mcp

composite 100 / 100 · pinned commit 9f0396a1b367 · ruleset pack-mcp-core@0.1.0 · 64,916/wk
Tool-description injection w20100
Credential / secret handling w20100
Network egress / SSRF w20100
Permission scope vs declared w25100
Supply-chain provenance w15100
✓ No findings. Every dimension scored clean at this commit under ruleset pack-mcp-core@0.1.0.

Embed this grade

MCP security: grade AMCP securityA
Grade A — Pass
[![MCP security: A](https://sentinel-engine-ggaj.onrender.com/registry/badge/supabase-community__supabase-mcp.svg)](https://sentinel-engine-ggaj.onrender.com/registry/supabase-community__supabase-mcp.html)

🔁 Verify it yourself: clone supabase-community/supabase-mcp at 9f0396a1b367 and run the open scanner (anwen-labs/sentinel-mcp, ruleset pack-mcp-core@0.1.0). Same input → same grade, every time.