Agent skill · software engineering · mvanhorn

pp-supabase

The full Supabase Management API (108 endpoints) plus a local SQLite cache of orgs, projects, functions, branches, and secret names — powering cross-project queries no live API answers in one call, with Auth Admin lookup, PostgREST schema introspection, and Storage usage rollup on top. Trigger phrases: `supabase auth admin lookup`, `supabase secret name audit`, `supabase branches drift`, `supabase project estate rollup`, `supabase storage usage`, `supabase pgrst schema`, `use supabase`, `run supabase`. Anti-triggers: `supabase start` (use the official supabase CLI), `supabase db push` (official CLI), `supabase gen types` (official CLI), supabase realtime subscribe (WebSocket — out of scope).

Why this skill is useful

Adds a CLI with unique commands for managing Supabase projects and cross-project queries that aren't available in public documentation.

What it needs

Requires supabase-pp-cli installed locally. About 8k tokens when loaded. Last updated 2026-08-06. 1,890 stars on the source repository.

What this skill does

Supabase — Printing Press CLI Prerequisites: Install the CLI This skill drives the supabase-pp-cli binary. You must verify the CLI is installed before invoking any command from this skill. If it is missing, install it first: 1. Install via the Printing Press installer: 2. Verify: supabase-pp-cli --version 3. Ensure $GOPATH/bin (or $HOME/go/bin) is on $PATH. If the npx install fails before this CLI has a public-library category, install Node or use the category-specific Go fallback after publish. If --version reports "command not found" after install, the install step did not put the binary on $PATH. Do not proceed with skill commands until verification succeeds. When to Use This CLI Use this CLI when an agent needs to sweep Management API entities across orgs, run cross-project queries from a local SQLite cache (secrets where-name, functions inventory, branches drift, projects estate), look up Auth users by email (auth-admin lookup), aggregate Storage bucket usage (storage usage), or fetch a per-project PostgREST schema for typed query planning (pgrst schema). For local Docker + migration workflows (supabase start, supabase db push, supabase gen types), use the official Supabase CLI. For PostgREST row CRUD, Storage object lifecycle (upload/download/sign), Auth Admin user mutations, and Edge Function runtime invocation, use supabase-js — these are documented Known Gaps in this CLI's first release (see README's ## Known Gaps). Unique Capabilities These capabilities aren't available in any other tool for this API. Cross-project rollups secrets where-name — Find every project (across orgs) holding a secret with a given name, plus when each was last synced. Use when an agent needs cross-project security posture answers ('which clients have STRIPEKEY', 'is this secret name leaked anywhere'). The supabase-community MCP cannot answer this without per-project iteration. …

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills mvanhorn/supabase

View the source on GitHub

Browse the @skills marketplace