Supabase
by supabase
Supabase’s official server lets AI create tables, query data and review project settings in your Supabase database.
Computer or cloud★ 2,993Apache-2.0Updated yesterday
Install
Rowbit
Overview
Description from the maker (original English)
Preview, approve and undo AI agents' writes to MariaDB and MySQL
PopNx MCP’s three pillars
These three are never merged into one score: opinions, measurements and popularity are different things.
- User voiceiNo reviews yetReviews open together with accounts in a later step
- Our basic checksi1 of 1 passedChecked from public information; code not scanned yet
- UsageiNot measured yet★ –
What you can do with it
We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.
- Connection: Runs on your computer
- Transport: stdio
- Category: Databases & datasets
Install
Pick the AI app you use, then copy the settings.
Before you install
- Basic checks: 1 of 1 passed
- Runs on your computer with your user’s permissions (files, network, apps).
- The registry lists no key to fill in.
You need
- DockerDocker installed
Which app do you use?
Pick your app above. We remember it, so next time the button says “Install in …”.
Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json
{
"mcpServers": {
"rowbit": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ermag/rowbit:0.2.2",
"mcp",
"--agent",
"your-value"
]
}
}
}Run this in your terminal
claude mcp add rowbit -- docker run -i --rm ghcr.io/ermag/rowbit:0.2.2 mcp --agent your-valueThis one needs values on its command line, so copy the settings and fill them in.
Or copy the settings yourself
Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json
{
"mcpServers": {
"rowbit": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ermag/rowbit:0.2.2",
"mcp",
"--agent",
"your-value"
]
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one needs values on its command line, so copy the settings and fill them in.
Or copy the settings yourself
Paste into .vscode/mcp.json in your project
{
"servers": {
"rowbit": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ermag/rowbit:0.2.2",
"mcp",
"--agent",
"your-value"
]
}
}
}Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.
This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.
Your choice stays on this device in a cookie; no account needed.
These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
What it can do
Runs on your computer; the tool list appears in your AI app after you install it.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account Ermag, which owns the repo
- … Not checked yet
Still maintained
We have not read this repo from GitHub yet
- … Not checked yet
Has a licence
We have not read this repo from GitHub yet
- – Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
- – Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
- … Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints
Compared with others in Databases & datasetsi
- More stars than 0% of the other 1137 servers in this category
- Published to the registry more recently than 100% of the other 1137 servers in this category
- Basic checks equal to or better than 100% of the other 1137 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is Rowbit safe?
It passed 1 of 1 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
The registry does not list a required key, though some servers ask you to sign in on first use.
Does it run on my computer or in the cloud?
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
Is it still maintained?
The GitHub repo last changed –, and the latest version (0.2.2) reached the registry today.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Docker on your computer.
What can I use instead?
In the same category: Supabase, MongoDB MCP Server, Elasticsearch MCP Server
Alternatives
Servers in the same category from other makers, sorted by stars.
Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
MongoDB MCP Server
by mongodb-js
MongoDB Model Context Protocol Server
Runs on your computer★ 1,157Apache-2.0Updated 3 days ago
Install
Elasticsearch MCP Server
by cr7258
MCP server for interacting with Elasticsearch
Runs on your computer★ 315Apache-2.0Updated 14 months ago
Install
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
Rowbit
A safety net for AI agents that write to your database. Preview every write, approve the risky ones, undo any single change. MariaDB and MySQL, over MCP.
Get started
curl -fsSL https://ermag.github.io/rowbit/install.sh | shrowbit setup
macOS and Linux (Windows through WSL). If ~/.local/bin isn't on your PATH, the installer says so: run ~/.local/bin/rowbit setup instead. Setup finds your database's URL, checks Rowbit's privileges and prints the GRANT statements to fix them, writes rules that hold every write for review, connects the agent clients you pick, and prints the review page's password. See the quickstart.
No database to try it on? Choose the sample when setup asks: it runs a shop database in Docker with Rowbit in front of it (the tour). Then ask the agent:
The pending orders are stuck. Cancel them.
Works with Claude Code, Cursor, VS Code, Claude Desktop, Codex, Gemini CLI, Windsurf and any MCP client.
| Database | Status |
|---|---|
| MariaDB, MySQL | Supported, over TLS too (MariaDB 11.4 and MySQL 8.4 tested on every change) |
| PostgreSQL | Planned, next |
| MongoDB, Redis | Exploring |
Docs · Quickstart · Interactive demo · Tell us what you think
What it does
You ask a coding agent to fix the orders stuck in pending, and it writes UPDATE shop.orders SET status = 'cancelled' WHERE status = 'pending'. That also matches every order placed in the last hour. Rowbit catches it before it touches a row, shows a person exactly which 1,284 rows would change, and waits. If something bad does get through, you undo that one change without restoring a backup.
Status: early and open source; see the changelog for each release. What we build next depends on what you tell us in the feedback discussion.
How it works
Rowbit sits between your agents and your database. Agents talk to Rowbit over MCP, never to the database directly: they read and propose writes through it, without the database's credentials.
- Exact preview. Rowbit reads the rows a write would change and replays it on a private temporary copy, so you see each row before and after, exactly as the table would store it. Your tables are only read.
- Rules, then people. A small YAML file lets safe writes through, holds risky ones for a person, and refuses the rest. Only people approve, and approval applies exactly what was previewed, or nothing. See rules.
- Undo one change. Rowbit keeps every row a change touched, so you can take back one bad write and keep everything else.
- Scopes and shadow mode. Per agent, which tables it may read or write and which columns it may never see, enforced by the database with a user of the agent's own. Shadow mode shows what the rules would hold before you enforce them.
- Review where you are. A web UI in the binary, sign-in through your identity provider, Slack or webhook notifications, and an audit log in a hash chain. See how a change moves.
# rowbit.ymlversion: 0 agents: coding-agent: default: hold rules:
- name: small-order-fixes when: { statement: update, table: shop.orders, columns: status, rows: { max: 20 } } then: allow
- name: no-deletes when: { statement: delete } then: block reason: Data fixes don't delete rows.
Here the agent can change the status of up to 20 orders on its own. An update that writes any other column, or more rows, waits for a person, and deletes are refused.
See examples/rowbit.yml and the rowbit.yml spec for the full schema.
Connect your agent
rowbit setup connects the clients you pick. rowbit connect sets up one more, with a token of the agent's own. See Connect your agent.
Claude Code
rowbit connect claude-codeAdds Rowbit with claude mcp add, for this directory (--scope user for everywhere). Add the skill that teaches the agent to use Rowbit well:
/plugin marketplace add Ermag/rowbit/plugin install rowbit@rowbit
Cursor
rowbit connect cursorAdds Rowbit to ~/.cursor/mcp.json. Restart Cursor.
VS Code
rowbit connect vscodeOr, with rowbit demo or rowbit serve running, add it to VS Code and paste the token from rowbit connect vscode --print --new-token when VS Code asks (an agent has one token, so this signs out a client the demo connected).
Claude Desktop, Codex, Gemini CLI, Windsurf
rowbit connect claude-desktop # macOS; starts rowbit mcp itselfrowbit connect codex rowbit connect gemini rowbit connect windsurf
Any other MCP client
rowbit connect --printprints the address (http://127.0.0.1:8080/mcp) and a token to send as Authorization: Bearer .
Why not just migrations?
Having an agent write a migration file that goes through code review and CI is the right answer for a coding agent changing your schema, and Rowbit doesn't compete there: it holds every schema change for a person and leaves the real workflow to your migration tool. It works badly for fixing data:
- A reviewed diff shows SQL, not rows.
UPDATE orders SET status = 'cancelled' WHERE status = 'pending'looks fine in review. What it touches depends on the data when it runs. Rowbit shows the exact rows when the decision is made, and refuses to apply if they changed since. - A one-off fix can't wait for a pull request. Repairing a few broken rows during an incident needs an answer in minutes, and nobody writes and reviews a migration for every one.
- Not every write needs a person. Rules let small, safe writes straight through and hold only the risky ones, so reviewers aren't trained to rubber-stamp.
- Undo is per change. Down-migrations for data are usually missing or lossy. Rowbit keeps the before image of every row a change touched.
The well-known incidents of coding agents wiping production databases are a credentials problem as much as anything: take the credentials away and have the agent write migrations. Rowbit is for the agents that need to write. And if an agent does the same thing over and over, like issuing refunds, give it a tool that does just that instead of SQL.
Good to know
- Only Rowbit holds the database credentials. If an agent also has its own connection string, it can write around Rowbit. Give agents Rowbit's endpoint and nothing else (over HTTP, a token of their own), and Rowbit a database user of its own.
- An agent without `scopes` reads and writes with Rowbit's privileges. Its rules still decide every write, but nothing stops it reading whatever Rowbit's user can. Give production agents scopes.
- Undo restores rows, not the world. It puts the data back, but it can't take back an email that was sent or a refund that was paid because of it.
- Preview never writes to your tables. It reads the affected rows without taking locks and replays the write on a temporary copy that only Rowbit's connection can see. Tables with triggers or cascading foreign keys are refused, because their side effects wouldn't show in the preview or be undone. So are tables Rowbit's database user can't fully inspect: it needs the
TRIGGERandPROCESSprivileges. See database privileges for the exact grants. - Where data lives. Change state, previews (including before and after copies of affected rows) and the audit log are stored in a local SQLite file next to Rowbit. Protect it like a replica of the database (how).
- The CLI trusts whoever runs it. Anyone who can read
rowbit.dband has the database URL can runrowbit approve, under any--asname. Keep both from agents, and run Rowbit as a user they can't act as; see Before you use it for real. - Fail closed. Anything Rowbit can't evaluate, it refuses. See the change lifecycle and SECURITY.md.
Contributing
Ideas and opinions are welcome in Discussions. For code, see CONTRIBUTING.md. Commits need a DCO sign-off (git commit -s). Report security issues as described in SECURITY.md.
License
The server is AGPL-3.0-only. The rowbit.yml policy schema (crates/rowbit-policy) and future client SDKs are Apache-2.0.