anand-tan

4 ms·

1. 1.▲
   by anand-tan 1y ago

   Absolutely. If the tools were only from Supabase, then yes, you could use Postgres roles. However, most people use a combination of tools (GitHub, Stripe, Linear, etc.), and each has different permission models. I wanted to implement a solu
2. 2.▲
   by anand-tan 1y ago

   For reference, this was the thread that led me to work on this. https://news.ycombinator.com/item?id=44502318
3. 3.▲
   Show HN: Runtime Defense Against Prompt Injection in Supabase MCP(docs.tansive.io)

   3 points by anand-tan 1y ago|3 comments
4. 4.▲
   Show HN: Did that MCP Server leak your database?(github.com)

   1 points by anand-tan 1y ago|0 comments
5. 5.▲
   by anand-tan 1y ago

   This was precisely why I posted Tansive on Show HN this morning - https://news.ycombinator.com/item?id=44499658 MCP is generally a bad idea for stuff like this.
6. 6.▲
   Show HN: Tansive – AI Agents that won't accidentally restart your prod database(github.com)

   3 points by anand-tan 1y ago|0 comments