{"event":{"id":"evt-supabase-mcp-agent-app-surface-20261002","dedupe_key":"agent_addressable_application_surface:2026-10-02:supabase-exposes-application-capabilities-to-signed-in-user-agents-through-mcp","event_type":"agent_addressable_application_surface","title":"Supabase exposes application capabilities to signed-in user agents through MCP","summary":"Supabase announced repo-addressable backend configuration for coding agents and an MCP pattern intended to let a user's agent operate inside an application in the signed-in user's authorization context. This is implementation evidence for agent-addressable software surfaces that reuse existing identity and permission boundaries, without establishing universal MCP interoperability or production security.","occurred_at":"2026-10-02T00:00:00.000Z","published_at":"2026-10-02T00:00:00.000Z","observed_at":"2026-10-04T21:50:08.000Z","reconstructed_at":null,"ingest_type":"live_world_scan","locations":null,"status":"verified","confidence":0.94,"metadata":{"actors":["Supabase"],"change_kind":"agent_capability_surface_strengthening","uncertainty":"Exact authorization scope, revocation behavior, production security properties and adoption remain insufficiently verified."},"created_at":"2026-10-04T21:57:54.251Z","updated_at":"2026-10-04T21:57:54.251Z"},"artifacts":[],"signals":[{"id":"sig-agent-addressable-software-auth-context-20261004","statement":"Application platforms are becoming more explicitly agent-addressable while reusing existing user identity and authorization context, strengthening the existing identity-and-permissions control-plane pattern without establishing universal interoperability or safe autonomy.","signal_type":"agent_capability_surface_strengthening","direction":"increasing","confidence":0.9,"epistemic_status":"supported_inference","mapping_mode":"contemporaneous","reconstructed_at":null,"created_at":"2026-10-04T21:57:54.253Z","updated_at":"2026-10-04T21:57:54.253Z"}]}