andrelandgraf

Tuesday’s top Hacker News post "Supabase MCP can leak your entire SQL database" led to discussions about using MCP in production, how to mitigate Prompt Injection attacks, and generally raised alarms in the developer community. In this post, I’ll highlight safe ways to use MCP today, including in production.

This post is misleading and seems aimed at promoting a tool. As far as I can tell, there’s no actual exploit in the MCP server. The described scenario depends on tricking an authorized user into executing malicious commands. That applies to any MCP server with write access.