You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
mcp oauth (experimental) not working with supabase mcp #5254
❯ codex mcp login supabase
Dynamic registration failed: Registration failed: HTTP 404 Not Found:
Authorize `supabase` by opening this URL in your browser:
https://mcp.supabase.com/authorize?project_ref=xxxxxxxxx&read_only=true&response_type=code&client_id=mcp-client&state=tshk3Txx-eZzGANecv2EaJZDQ&code_challenge=xxxxxx&code_challenge_method=S256&redirect_uri=http%3A%2F%2F127.0.0.1%3A49387%2Fcallback
I open the link and says not found, supabase provides buttons for vscode that use the same link and it works.
What steps can reproduce the bug?
open a supabase account, create a poject, try to connect via mcp with codex.
It looks like supabase uses the following header for oauth discovery:
www-authenticate: Bearer error="invalid_request", error_description="No access token was provided in this request", resource_metadata="https://mcp.supabase.com/.well-known/oauth-protected-resource/mcp"
Activity
github-actions commentedon Oct 16, 2025
Potential duplicates detected. Please review them and close your issue if it is a duplicate.
Powered by Codex Action
MauScheff commentedon Oct 16, 2025
Not a duplicate, but related.
gpeal commentedon Oct 17, 2025
It looks like supabase uses the following header for oauth discovery:
which I'll need to add support for in https://github.com/modelcontextprotocol/rust-sdk. I'll leave this open until I can fix it there and get it merged here.
https://www.rfc-editor.org/rfc/rfc9728.html#name-use-of-www-authenticate-for
gpeal commentedon Oct 23, 2025
Fixed by #5423