Farenhytee/database-sentinel

Overview

Open-source security audit tool for Supabase that runs as a read-only MCP server, CLI agent, or Claude Skill. It detects RLS misconfigurations, exposed keys, and risky functions, then returns a scored report with fix SQL. A hosted version is available as Locksoup.

Best for

Best for
Supabase developers who need quick, actionable security audits

Use cases

• Audit Supabase RLS policies for misconfigurations
• Check for exposed API keys and risky database functions
• Generate fix SQL from a scored security report

How to use

Install

pip install -e ".[dev]" && supabase start && python -m evals.run --split dev

Tested with

Claude Code, Cursor, ChatGPT

Notes

Open-source security audit tool for Supabase that runs as a read-only MCP server, CLI agent, or Claude Skill. It detects RLS misconfigurations, exposed keys, and risky functions, then returns a scored report with fix SQL. A hosted version is available as Locksoup.

49 stars on GitHub. Last updated 2026-10-06. Licensed MIT.

Use cases

• Audit Supabase RLS policies for misconfigurations
• Check for exposed API keys and risky database functions
• Generate fix SQL from a scored security report

Pros

• Read-only operation reduces risk during audits
• Provides actionable fix SQL alongside findings
• Offers multiple interfaces: MCP server, CLI, and Claude Skill

Cons

• Limited to Supabase, not general database security
• Read-only means no automated remediation
• Small community with 49 stars

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.