Supabase
by supabase
Supabase’s official server lets AI create tables, query data and review project settings in your Supabase database.
Computer or cloud★ 2,993Apache-2.0Updated yesterday
Install
SafeSelect MCP
Overview
Description from the maker (original English)
Fail-closed, read-only PostgreSQL and MongoDB access for AI agents over MCP.
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
- UsageiNot measured yet★ –
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs on your computer
- Transport: stdio
- Category: Databases & datasets
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 1 of 1 passed
- Runs on your computer with your user’s permissions (files, network, apps).
- The registry lists no key to fill in.
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Download the maker’s .mcpb file
The link goes to the maker’s own file; we do not host or repackage it. Open the file and Claude Desktop installs it.
Run this in your terminal
Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
What it can do
Runs on your computer; the tool list appears in your AI app after you install it.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account antonillos, which owns the repo
- … Not checked yet
Still maintained
We have not read this repo from GitHub yet
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- – Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
- – Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
- … Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints
Compared with others in Databases & datasetsi
- More stars than 0% of the other 1137 servers in this category
- Published to the registry more recently than 68% of the other 1137 servers in this category
- Basic checks equal to or better than 100% of the other 1137 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is SafeSelect MCP safe?
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
The registry does not list a required key, though some servers ask you to sign in on first use.
Does it run on my computer or in the cloud?
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
Is it still maintained?
The GitHub repo last changed –, and the latest version (0.8.0) reached the registry 20 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need MCPB on your computer.
What can I use instead?
In the same category: Supabase, MongoDB MCP Server, Elasticsearch MCP Server
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MongoDB MCP Server
by mongodb-js
MongoDB Model Context Protocol Server
Runs on your computer★ 1,157Apache-2.0Updated 3 days ago
Install
Elasticsearch MCP Server
by cr7258
MCP server for interacting with Elasticsearch
Runs on your computer★ 315Apache-2.0Updated 14 months ago
Install
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
SafeSelect
Read-only PostgreSQL & MongoDB access for coding agents.
Debug with real database context, without exposing write tools.
Import your existing connections. Keep credentials out of the chat.
Get started → · Demo · Agents · Security & quality · Docs · Website
Why SafeSelect?
Give your coding agent the database context it needs to investigate a bug, understand a schema or inspect a query plan. SafeSelect exposes read-only tools for PostgreSQL and MongoDB, with local policy and bounded results.
- Debug with database context. Discover tables, collections and indexes before reading the rows or documents relevant to your task.
- Start with connections you already have. Import from DBeaver, Docker Compose or MongoDB Compass, including SSH-backed connections.
- Keep control of access. Set project-specific access rules, row limits and timeouts. Passwords stay in macOS Keychain or environment variables.
- Run locally. The agent connects over MCP stdio, with no MCP network listener. SafeSelect enforces its read-only tool surface even when the configured database credentials allow writes.
[!IMPORTANT]
SafeSelect's read-only boundary covers its database tools. An agent's shell,
other MCP servers and direct credentials remain outside that boundary.
Use least-privilege database users and start with development data or a
sanitized replica. See the threat model and limits.
See it in action
From Homebrew to a connected agent: import a DBeaver connection, keep its password in Keychain, and let OpenCode inspect an order through read-only tools. See the demo gallery for more clients, MongoDB and Linux onboarding.
Quick Start
Run setup from your repository root. You need a PostgreSQL or MongoDB connection and a Java 17+ runtime for database commands.
1. Install
On macOS with Homebrew:
brew install antonillos/tap/safeselectFor Linux, prebuilt binaries, asdf, Java setup or source builds, follow the installation guide.
2. Import a connection
Choose the source you already use:
| Connection source | Command |
|---|---|
| DBeaver export | safeselect import-dbeaver ~/Downloads/dbeaver-export.zip |
| PostgreSQL in Docker Compose | safeselect import-compose |
| MongoDB Compass | safeselect import-compass --path "$HOME/.config/MongoDB Compass" |
Use your actual export or Compass directory, then follow the importer's driver and password setup steps. Keep secrets out of project files and chat. For a complete SSH-backed example, follow the DBeaver → Codex walkthrough.
3. Connect your agent
# Verify connectivity; this can open SSH tunnels and contact databases.safeselect check
Replace codex with opencode, or choose another supported client below.
safeselect agent install codex safeselect agent status
If you have multiple environments, add --environment to both check and agent install to select the intended database. Without it, check tests all environments; installation only infers a target when there is exactly one.
Open or restart your agent and approve the MCP server if prompted. Installation uses user scope by default; add --local for project scope where supported. See client setup and scopes.
4. Try it
Ask your agent:
Use SafeSelect to identify the connected backend. For PostgreSQL, list tables
and describe one using catalog metadata. For MongoDB, list databases and
collections only. Stop before reading rows or sampling documents.
Success: the agent reports the database identity and available tables or collections without needing a database password in the conversation. Then ask it to investigate a specific issue with a small, targeted read. MongoDB schema inference samples documents, so include that step only when you are ready to read data.
Need help? Run safeselect doctor --environment and follow its next step. Diagnostics can contact the database. See the connection diagnostics or agent recovery guide.
Supported agents
OpenAI Codex · OpenCode · Claude Code · Cursor · Windsurf · GitHub Copilot · Gemini CLI
SafeSelect works with MCP clients over stdio. Built-in installation handles the clients above; the integration guide covers configuration, scopes and manual setup. Codex and OpenCode also receive four portable workflow skills. After updating SafeSelect, run safeselect agent upgrade and reload your client.
Security and quality evidence
SafeSelect validates requests against project policy before database execution. Ordinary policy rejections return an error; serious security attempts and internal validation or audit failures stop the server. Result limits and timeouts bound reads, and query text is hashed for audit records.
The database security suites run against disposable PostgreSQL and MongoDB fixtures. Rejection cases check the expected error and compare the resulting database state with a baseline, so a rejected response alone is not enough to pass.
| What is checked | Inspect the evidence |
|---|---|
| SQL writes, stacked statements and side-effecting functions | PostgreSQL security tests |
| MongoDB write stages, server-side JavaScript and access boundaries | MongoDB security tests |
| Malformed MCP requests, policy rejection and shutdown behavior | MCP regression tests |
| Rust and Java complexity with test coverage | CRAP report and CI artifacts |
| Commit signatures and message format | Commit Policy |
See how to verify a CI execution for results tied to a specific commit. Test source describes the checks; a successful matching run provides execution evidence. Pending or skipped suites are unverified, and badges can refer to a different revision.
Read the threat model and limits, the security model, or the architecture for the scope of these controls. For alternatives and tradeoffs, see the database MCP comparison.
Documentation
| I want to… | Start here |
|---|---|
| Install, update or uninstall | Installation guide |
| Set up my coding agent | AI agent integration |
| Import an SSH-backed DBeaver connection | DBeaver → Codex walkthrough |
| Watch examples | Demo gallery · Visual command gallery |
| Find a command or MCP tool | CLI reference · MCP tools |
| Configure policy, environments or passwords | Configuration |
| Understand the security boundary | Threat model and limits · Architecture |
| Inspect quality checks and security tests | CI and CRAP report · Security test suite |
| Find packages and directory listings | Distribution |
| Build or contribute | Contributing · Changelog |
Feedback and contributions
Have a setup problem or a feature request? Open an issue. For setup feedback, include your client, OS and the step that failed; leave out credentials, connection exports and database contents. Report security vulnerabilities through the security policy.
Contributions are welcome—see Contributing to get started.
License
MIT.