Integrations · Development

Connect Supabase to Well

Link Supabase table row, project, and auth event to the customer and revenue context they affect.

What Well pulls from Supabase

Supabase feeds table row, project, auth event into Well as a source. The connection is read-only; disconnect at any time from your workspace settings to revoke Supabase’s access.

From SupabaseIn Well
Table row
Indexed record
Project
Workspace context
Auth event
Audit entry
Supabase logo
Sync mode
MCP hybrid
Refresh
live + reconciliation reads
Direction
Supabase → Well

What Well does with your Supabase connection

Connect

Connect Supabase over OAuth (MCP DCR): Well registers a client through Supabase's OAuth Dynamic Client Registration and you approve on Supabase's side, so the password never reaches Well; Well holds only a scoped token it can refresh.

Sync

Well brings table row, project, and auth event in from Supabase on live events backed by periodic reconciliation reads. The first sync backfills history in the background and the connection stays live after.

Enrich

Well resolves each Supabase entity into indexed record, workspace context, and audit entry, assigns categories, and links every record to an audit trail across the rest of your connected tools.

Available

Your data from Supabase lands in the workspace as indexed record, workspace context, and audit entry you can search, chart, and automate.

Questions Supabase unlocks

Ask in plain language. Well answers from your connected Supabase connection, resolved against the rest of your stack.

Ask Well

Ask anything about your Supabase connection

Summarise this month
What needs attention?
Find unmatched records

Ask about your Supabase connection…

Connect Supabase in three steps

  1. 01

    Authorise Supabase via MCP

    From Well's Connections panel, search for Supabase and click Connect. Well discovers Supabase's MCP OAuth metadata from its .well-known endpoint, registers a client via Dynamic Client Registration, and routes you through the authorize prompt on Supabase's side. No client credentials to paste.

    • AuthOAuth (MCP DCR)
    • DiscoveryMCP .well-known
    • MCP servermcp.supabase.com/mcp
  2. 02

    Map your entities

    Well's MCP client discovers table row, project, and auth event from Supabase that Supabase's MCP server exposes and brings them into your workspace using the canonical mappings defined in Well's data-views layer. You can inspect the workspace data model from Settings > Data Model.

    • Mappingpreconfigured by Well
  3. 03

    Use the data

    Ask questions in conversation, build records tables, or let agents act on Supabase records. Because Supabase ships through MCP, Well treats every entity it exposes as queryable graph state alongside the rest of your connected tools.

    • First syncstarts as soon as connect completes

MCP handshake typically completes under a minute on warm connections. Resource enumeration runs immediately after; full backfill of historical Supabase records happens in the background.

How Supabase stays secure with Well

Well connects to Supabase's MCP server (mcp.supabase.com/mcp) via the Model Context Protocol. The MCP server itself handles credential issuance through OAuth Dynamic Client Registration; Well never sees a long-lived Supabase secret. Tokens are scoped to the table row, project, and auth event Supabase exposes and refreshed server-side. Reads only, Well cannot modify or delete Supabase records.

OAuth (MCP DCR)Encrypted at restGDPR compliant
Read the full privacy and security policy
Scopes Well requestsmcp.supabase.com/mcp
  • Read Supabase records

    Resources the Supabase MCP server exposes, scoped by your OAuth approval.

    granted
  • Resolve table row, project, and auth event across your stack

    Match identifiers in Supabase against the same entities your other connected tools expose, so each record carries cross-tool context.

    granted
  • Modify or delete Supabase records

    Not granted; Supabase is read-only in Well. Write-back is opt-in per connector when a write surface exists.

    refused
  • Store Supabase passwords or session cookies

    Authentication runs through OAuth (MCP DCR) tokens we never see.

    refused
Disconnect any time from Well settings or Supabase’s admin panel.

Frequently asked questions about Supabase and Well

From Well, open Connections, find Supabase, and click Connect. Well discovers the OAuth metadata at mcp.supabase.com/mcp/.well-known/oauth-authorization-server, registers a client on the fly via Dynamic Client Registration, and walks you through the authorize prompt on Supabase's side. No client_id or client_secret to paste; the handshake takes roughly a minute.

Well brings in table row, project, and auth event from Supabase and reshapes each entity into your workspace: table row becomes indexed record; project becomes workspace context. Every record arrives with the source identifier preserved, so Supabase stays the source of truth while Well lets you query the data alongside the rest of your stack.

Well links Supabase activity (issues, commits, deploys, runs) to the customer accounts in your CRM that originated each request. A bug report from a top-revenue customer shows that revenue context inline; a deploy mentions the customer-facing features that just shipped.

Each Supabase table row is scored against the candidate indexed records in your workspace on identifier overlap, amount or quantity match, date proximity, and counterparty resolution. Matches above the auto-link confidence threshold flow through cleanly; below the threshold they queue for a one-click human review, with the most likely indexed record prefilled and the Supabase source attached.

Well combines live Supabase events with periodic reconciliation reads of table row, project, and auth event. New rows appear within seconds when Supabase pushes them; periodic reads catch anything a push missed. The first connect backfills history from Supabase in the background.

Open Connections > Supabase in Well and click Disconnect. Well calls Supabase's token revocation endpoint and stops calling Supabase immediately on its side; provider-side propagation to Supabase's admin panel varies by provider. The table row, project, and auth event Well already synced stay in your workspace by default; ask Support to purge them if your compliance flow requires it.

Supabase records are stored in the region Well operates for your workspace. Specific region details and the steps to change region are available from Support. See /privacy for the current data-handling policy.

Supabase logo

Ready to connect Supabase?

Connect once. Every table row, project, auth event from Supabase becomes searchable, queryable, and ready for your agents and tables. Disconnect any time.