Supabase Provider

import { McpServer, supabase } from 'mcp-use/server'

const server = new McpServer({
  name: 'my-server',
  version: '1.0.0',
  oauth: supabase({
    projectId: process.env.MCP_USE_OAUTH_SUPABASE_PROJECT_ID!,
    // ES256 tokens use JWKS automatically
  })
})

server.listen(3000)

const server = new McpServer({
  oauth: supabase({
    projectId: process.env.MCP_USE_OAUTH_SUPABASE_PROJECT_ID!,
    jwtSecret: process.env.MCP_USE_OAUTH_SUPABASE_JWT_SECRET!
  })
})

# .env
MCP_USE_OAUTH_SUPABASE_PROJECT_ID=your-project-id
SUPABASE_URL=https://your-project-id.supabase.co
SUPABASE_ANON_KEY=eyJhbGci...
MCP_USE_OAUTH_SUPABASE_JWT_SECRET=your-jwt-secret  # Only for HS256

const server = new McpServer({
  oauth: supabase({
    // Required
    projectId: 'your-project-id',
    
    // Required for HS256 tokens (legacy)
    jwtSecret: process.env.MCP_USE_OAUTH_SUPABASE_JWT_SECRET,
    
    // Optional: Supabase URL (defaults to supabase.co)
    supabaseUrl: 'https://your-project-id.supabase.co',
    
    // OAuth mode: 'proxy' (default) or 'direct'
    mode: 'proxy',
    
    // JWT verification
    verifyJwt: process.env.NODE_ENV === 'production',
    
    // Custom user info extraction
    getUserInfo: (payload) => ({
      userId: payload.sub,
      email: payload.email,
      name: payload.user_metadata?.name,
      roles: payload.app_metadata?.roles || [],
      permissions: payload.app_metadata?.permissions || [],
    })
  })
})

const server = new McpServer({
  oauth: supabase({
    projectId: process.env.MCP_USE_OAUTH_SUPABASE_PROJECT_ID!
    // No jwtSecret needed - uses JWKS automatically
  })
})

const server = new McpServer({
  oauth: supabase({
    projectId: process.env.MCP_USE_OAUTH_SUPABASE_PROJECT_ID!,
    jwtSecret: process.env.MCP_USE_OAUTH_SUPABASE_JWT_SECRET!
  })
})