# What changed in @supabase/mcp-server-supabase

> 17 changes in @supabase/mcp-server-supabase 0.12 to 0.14 from its official release notes, upgrade guides and advisories: 2 breaking, 1 security, 9 new APIs and options. Each one cited. Sources checked 2026-10-19. HTML: https://unstale.sh/npm/@supabase/mcp-server-supabase/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @supabase/mcp-server-supabase 0.14

### New APIs and options

- Adds bounded cost lifecycle observations. (0.14.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.14.0)
- Adds observations for destructive SQL. (0.14.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.14.0)
- Adds health advisor support. (0.14.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.14.0)

### Fixes and other changes

- Clarifies cost and deploy tool descriptions for the OpenAI scanner. (0.14.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.14.0)
- Stops double cost confirmation when using create_project and create_branch. (0.14.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.14.0)

## @supabase/mcp-server-supabase 0.13

### Breaking changes

- The costConfirmation option is renamed; the notes do not specify its new name. (0.13.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.13.0)

### Security

- Destructive SQL is confirmed via elicitation. (0.13.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.13.0)

### New APIs and options

- Adds URL-mode secret collection for create_edge_function_secret. (0.13.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.13.0)
- Adds a local HTTP entry to mcp-server-supabase. (0.13.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.13.0)
- Adds support for skip_elicitations in the local HTTP server. (0.13.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.13.0)
- Adds a v2 API client for management. (0.13.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.13.0)

## @supabase/mcp-server-supabase 0.12

### Breaking changes

- The get_advisors response groups lints, changing how developers consume advisor results. (0.12.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.12.0)

### New APIs and options

- Adds a cost confirmation elicitation for branches. (0.12.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.12.0)
- Adds a cost confirmation elicitation for projects. (0.12.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.12.0)

### Behavior and default changes

- Legacy cost tools are hidden from clients that support forms. (0.12.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.12.0)

### Fixes and other changes

- Corrects escaping in the advisor. (0.12.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.12.0)
- Server instructions are intent-based rather than naming tools. (0.12.0) — [release notes](https://github.com/supabase/mcp/releases/tag/mcp-server-supabase-v0.12.0)