Supabase MCP can leak your entire SQL database

Mitigations also need to happen on the client side.

If you have a AI that automatically can invoke tools, you need to assume the worst can happen and add a human in the loop if it is above your risk appetite.

It's wild how many AI tools just blindly invoke tools by default or have no human in loop feature at all.

Or give them access to appropriately permissioned tools and not superuser/admin/service accounts that can access everything