←back to thread

Supabase MCP can leak your entire SQL database

(www.generalanalysis.com)
784 points rexpository | 1 comments | 08 Jul 25 17:46 UTC | HN request time: 0.216s | source
Show context
arewethereyeta ◴[09 Jul 25 01:47 UTC] No.44505620[source]▶
meanwhile people are crying for simple features like the ability to create a transaction (for queries) for years but let's push AI.
replies(1): >>44505983 #
1. dimgl ◴[09 Jul 25 02:58 UTC] No.44505983[source]▶
I think I know what you're talking about because I ran into this too. In defense of Supabase, you can still use transactions in other ways. Transactions through the client are messy and not easily supported by PostgREST.

The GitHub issue here sums up the conversation about this:

https://github.com/PostgREST/postgrest/issues/286

Regardless of Hacker News's thoughts on MCP servers, there is a cohort of users that are finding them to be immensely useful. Myself included. It doesn't excuse the thought processes around security; I'm just saying that LLMs are here and this is not going away.