←back to thread

Supabase MCP can leak your entire SQL database

(www.generalanalysis.com)
801 points rexpository | 2 comments | 08 Jul 25 17:46 UTC | HN request time: 0.422s | source
Show context
raspasov ◴[08 Jul 25 22:44 UTC] No.44504711[source]▶
The MCP hype is real, but top of HN?

That's like saying that if anyone can submit random queries to a Postgres database with full access, it can leak the database.

That's like middle-school-level SQL trivia.

replies(3): >>44504731 #>>44505108 #>>44505154 #
1. gtirloni ◴[08 Jul 25 22:50 UTC] No.44504731[source]▶
Yes, but some lessons need to be re-learned over and over so it's seems totally fine that this is here considering how MCP is being promoted as the "integration to rule them all".
replies(1): >>44504756 #
2. raspasov ◴[08 Jul 25 22:54 UTC] No.44504756[source]▶
MCP is the new GraphQL.