supabase

Implements and verifies Supabase database, auth, and schema changes using CLI and MCP tools.

Updated May 2, 2026
One-click install
npx skills add https://github.com/FadhilAlif/jejak_karier --skill supabase-fadhilalif
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: supabase
Source: https://github.com/FadhilAlif/jejak_karier/tree/main/.agents/skills/supabase
Command: npx skills add https://github.com/FadhilAlif/jejak_karier --skill supabase-fadhilalif

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve? Supabase APIs, CLI commands, and security conventions change frequently, so relying on outdated knowledge leads to broken integrations, silent RLS failures, and security vulnerabilities. This Skill grounds every Supabase task in current documentation and enforces verification and security checklists. ## Core Features & Use Cases - Up-to-date guidance: Fetches the Supabase changelog and docs (via MCP search_docs or .md URLs) before implementing any feature, avoiding stale training-data answers. - Schema change workflow: Iterates on SQL with execute_sql or supabase db query, runs advisors, then commits clean migrations with supabase db pull. - Security checklist: Catches Supabase-specific traps like user_metadata in JWT authorization, views bypassing RLS, missing SELECT policies on UPDATE, and storage upsert permission gaps. - Use Case: When a user's Next.js app with @supabase/ssr has login sessions failing, the Skill checks current SSR docs, diagnoses cookie handling, applies the fix, and verifies it with a test query. ## Quick Start Use the supabase skill to fix my RLS policy so authenticated users can only read their own rows, then verify it works.

Frequently Asked Questions about supabase

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I make schema changes in Supabase without breaking migrations?

Iterate with execute_sql (MCP) or supabase db query (CLI), which run SQL directly without writing migration history. When ready, run advisors, then generate the migration with supabase db pull <name> --local --yes and verify with supabase migration list --local.

How do I fix Supabase auth and session issues in Next.js?

Check the current Supabase docs for @supabase/ssr integration patterns rather than relying on memory, since APIs change between versions. Common issues involve cookie handling, getSession versus getUser usage, and JWT refresh behavior.

Why does my Supabase UPDATE return 0 rows with RLS enabled?

In Postgres RLS, an UPDATE requires a matching SELECT policy because the row must first be readable. Without a SELECT policy, updates silently affect 0 rows with no error. Add a SELECT policy matching your access model.

Can I use user_metadata in Supabase RLS policies?

No. raw_user_meta_data is user-editable and can appear in auth.jwt(), making it unsafe for authorization decisions. Store authorization data in app_metadata (raw_app_meta_data) instead, and remember JWT claims are not fresh until token refresh.

Why is my new Supabase table not accessible via the REST API?

Depending on your project's Data API settings, new tables may not be auto-exposed. Check the Data API settings and explicitly GRANT access to the anon and authenticated roles, and always enable RLS when granting public access.

What should I do when the Supabase MCP server is not connecting?

First curl https://mcp.supabase.com/mcp — a 401 means the server is up. Then verify .mcp.json points to the correct URL. If tools still are not visible, complete the OAuth 2.1 authentication flow in your agent and reload the session.