Add Option for Claude Code <> Supabase: Read-Only Actions Instead of Read and Write, all-or-nothing

[DannyVojcak]

Right now, when attempting to connect Claude Code to Supabase MCP, it's all or nothing. I either give Claude full read + write access, or deny it access entirely. It would be strongly preferred to have an option to select read-only options and not enable writing actions. This can help avoid destructive, large blast-radius unintended changes.

[zaniluca]

Yeah, totally agree with you on the permissions thing, it's all or nothing right now which isn't ideal for safety.

By the way, I noticed there's a read_only=true flag you can use with the endpoint:

https://mcp.supabase.com/mcp?read_only=true

Not sure if that's already well-known or if it fully solves your concern, but worth checking out!