Chumbo is an MCP server published by elsheppo in the Data category: add an end-user MCP server to a Supabase app, with OAuth and RLS already wired.
The repository has 2 stars and 0 forks, with the last commit 26 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
From source
git clone https://github.com/elsheppo/chumbo
This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about Chumbo
Powered by Claude · Grounded in docs
I know everything about Chumbo. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v0.12.2Chumbo 0.12.2 · 25 Sep 2026Chumbo 0.12.2 lets an application with its own OAuth authorization server authenticate the opaque access tokens it issues to MCP clients. Configure `auth: { mode: "oauth", issuer, verify }` and Chumbo calls `verify({ token, resourceUrl,…
v0.12.1Chumbo 0.12.1 · 19 Sep 2026Chumbo 0.12.1 refreshes cached OAuth discovery whenever a user explicitly runs project CLI login, so direct Supabase endpoints and custom app URLs pick up changed authorization-server capabilities. Command-specific `--help` now renders…
v0.12.0Chumbo 0.12.0 · 19 Sep 2026Chumbo 0.12.0 makes the same authenticated MCP capabilities available through project-branded CLIs and first-class Next.js or Node hosts. Define reusable capability metadata without changing ordinary MCP registration. Run project-branded…
v0.11.3Chumbo 0.11.3 · 14 Sep 2026Chumbo Cloud setup now follows each project’s Supabase deployment configuration. Uses a project-declared Supabase command when available, otherwise an installed local CLI or the global CLI. Selects the function import map and server-side…
v0.11.2Chumbo 0.11.2 · 14 Sep 2026Chumbo cloud setup now supports typed createSupabaseMcp calls. Failed Cloud task validation and safe-patch planning are reported as terminal setup failures instead of leaving stale agent progress.\n\nThis is an OSS CLI patch. Chumbo Cloud…
No package has been published for this server, so install it from source: clone the repository and follow its README.
Is Chumbo safe to use with an AI agent?
Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.
Is Chumbo still maintained?
Yes — the latest release is v0.12.2 (25 Sep 2026), and the last commit was 26 days ago. The repository has 2 stars.