Unverified50% confidenceFactExact time
The MCP server still calls the underlying REST APIs or queries the SQL database internally, but exposes high-level tools with AI-native semantics to the outside, along with input schema validation.
1
Sources
50%
Confidence
Long-term
Relevance
10/27/2026
First Seen
Sources
Related Entities
Related Claims
Unverified在Cursor中集成Supabase MCP后，AI可以直接查询数据库schema、执行SQL、管理用户认证等操作78% similarUnverifiedMCP tool calls trigger real operations (writing to databases, sending emails, etc.), so permission control and audit logging are especially important at the MCP server layer, which differs from API integrations that are primarily read-only queries.76% similarUnverifiedIf the tools exposed by an MCP server allow the model to pass in arbitrary SQL statements, this is essentially a SQL injection vulnerability with the LLM as the intermediary.75% similarUnverifiedIn production-grade MCP servers, purpose-specific tools (such as get_order_status) should be used instead of generic tools that accept arbitrary queries (such as run_sql), to reduce the attack surface.73% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1103353API
curl https://kongchang.com/api/v1/knowledge/claims/1103353MCP
get_claim(id=1103353)