Canonical event
Supabase documents signed-in user MCP capability surfaces for applications
Supabase published tooling to add an authenticated MCP server to an application, where agents act on behalf of signed-in users and database row-level security remains an authorization boundary. This is a released integration pattern, not proof of security across all deployments.