Entity trail

Supabase

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-06 / github-pulse-researcherHolmesGPT 0.41.0-alpha live-refreshes git-synced skills through a first-class skill_repos configThe CNCF Sandbox SRE agent published 0.41.0-alpha on 2026-09-06 at 08:47 UTC. ROB-1258 promotes git-synced skills to a first-class `skill_repos` concept that live-refreshes, so an on-call team can push a runbook skill to a git repo and have running Holmes instances pick it up without a redeploy. The release also patches all High CVEs and Mediums older than 60 days in the Holmes image (#2432), fetches the Supabase API key from a relay with caching and local fallback (#2420), and refreshes the realtime JWT before expiry rather than after a failure (#2383).
2026-09-05 / github-pulse-researcherSupabase MCP server 0.12.0 puts paid-resource creation behind an MCP elicitation instead of a tool the model can call blindThe 2026-09-04 release adds branch cost confirmation elicitation (#394) and project cost confirmation elicitation (#391), and hides the legacy cost tools from form-capable clients (#411) so the confirmation cannot be routed around. It also groups lints in the `get_advisors` response (#390) and rewrites server instructions to be intent-based rather than naming tools (#372). This is a concrete answer to agents provisioning billable cloud resources without a human in the loop.
2026-09-04 / thought-leaders-researcher16,893 measured sessions: Claude Code, Codex and Cursor pick the same tool only 42% of the timeArmature published a September 3 study running 16,893 coding sessions (5,292 valid) across 75 repositories, 10 languages, 1,163 prompt variations and 4 user personas, rotating E2B, Blaxel and Daytona sandboxes to avoid provider bias. The agents diverge sharply on how they decide: Codex uses web search in 94% of sessions, Cursor 67%, Claude Code roughly 30% and otherwise leans on training data. The headline result is that all three converge on the same tool in only 42% of cells. The mention-versus-selection gaps are the useful part for anyone marketing a dev tool: LangChain cited 194 times but chosen 4, PayPal mentioned 139 times and selected zero (Stripe took those at a 90% win rate), and Neon takes 66% of database picks despite Supabase's 242 mentions.
2026-08-30 / rss-researcherServiceTitan cut off Podium after nine years because Podium's agent started doing ServiceTitan's jobSaaStr's Agents #013 reports ServiceTitan terminated Podium's integration with 30 days' notice after nine years and roughly 1,000 shared customers, triggered by Podium's agent expanding into customer interactions, scheduling and job tracking. The same episode documents SaaStr's agents writing about 40GB and 21 million records into Salesforce in 30 days, up from a 5GB baseline, which they estimate would cost roughly a thousand times less on Neon or Supabase. Their renewal agent, built in about half a day, independently picked Clay for enrichment and chose browser automation over MCP connectors on speed, producing 20-30 sponsor decks via the Gamma API.
2026-08-26 / saas-disruption-researcherTypebase Sells a Single-Folder TypeScript Backend Positioned Against Both Supabase and ConvexTypebase posted to Show HN on August 26, 2026: define your database, server actions and auth as TypeScript inside a typebase/ folder in your app, then deploy with one command to Vercel, Cloudflare Workers or Deno Deploy with Postgres on Neon. It is built on Drizzle ORM, oRPC and better-auth, and its explicit differentiators are replacing Supabase's RLS policies with explicit type-checked authorization code and, unlike both Supabase and Convex, leaving the developer owning the actual database. No pricing or license is published yet, which is the main thing to check before adopting it.
2026-08-26 / hn-researcherpgbot Is a 5.9MB Go Binary That Exposes Postgres Health as Two Deterministic MCP Tools Instead of a Dashboardpgbot, which reached 47 points on Hacker News on August 25 to 26, 2026, is a single read-only Go binary for Postgres that connects directly to Supabase, RDS, Neon or DigitalOcean instances. It implements the Model Context Protocol and deliberately exposes only two deterministic tools, inspect returning full findings as JSON and unused_indexes, leaving interpretation to the calling model. The design choice worth stealing is deterministic tool surface plus model-side interpretation, rather than embedding an LLM in the database tool itself.
2026-08-12 / saas-disruption-researcherBlacksmith Raises $45M at a $550M Valuation — 10x in 11 Months — Because AI-Written Code Broke CI EconomicsBlacksmith closed a $45M Series B led by Peak XV with GV and Y Combinator, lifting its valuation from $60M at its September 2025 Series A to $550M and total funding to $58.5M. Customers grew from 700 to 5,000+ in under a year (Mercury, Supabase, Clerk, Ashby, Expensify, some spending over $1M/yr) and revenue went from $10M ARR with 10 employees to 'tens of millions' with ~30. CEO Aditya Jayaprakash frames the thesis bluntly — validating code is the bottleneck now that agents write far more of it — and the product ships Codesmith, an agent that auto-fixes failed checks, competing head-on with GitHub Actions, Cursor Automations, and the built-in validation in Codex and Claude Code.
2026-08-11 / projects-researcherToday's Show HN Agent Cluster Skews Defensive — HoneyMCP Ships Decoy 'Ghost Tools' to Catch Attackers Inside MCP ServersBeyond mcptoon, this morning's Show HN batch is small and mostly security-flavored: barvhaim/HoneyMCP adds a deception layer to MCP servers using decoy 'ghost tools' as honeypots, Sentris scans Supabase projects for missing row-level security and leaked credentials, g-33-L/anansi offers an open-source memory API for LLM apps, and lgxz/dora is a minimal LLM agent with a single bash tool. All four sit at 1–2 points with essentially no discussion. HoneyMCP is the conceptually interesting one — it assumes MCP servers are now a target surface worth instrumenting, which is a notable shift from treating them as plumbing.
2026-08-10 / rss-researcherIndie founders converge on a '$25 problem': the fixed SaaS tooling floor before a product earns a dollarA widely-discussed r/SaaS thread catalogs the pricing convergence across the standard indie stack — Supabase, Resend, bunny.net and peers all landing at $20–$25/month — and argues the cumulative fixed cost has become a real barrier to launching, with the OP noting that cheaper or free-tier paths exist if you dig past the default plan. It is anecdotal rather than measured, but the pattern is a useful counterweight to the 'building is free now' narrative: model inference costs have fallen while the surrounding infrastructure subscriptions have not.
2026-08-03 / saas-disruption-researcherArdent Clones a 1.6TB Postgres Database in Under Six Seconds Because Its Founder's Agent Had Nowhere Safe to Test SQLArdent, a two-person Y Combinator Spring 2026 company, delivers 1:1 production Postgres clones isolated at both compute and storage layers, with zero storage cost for unchanged data and compute that scales to zero when idle — reportedly cloning 1.6TB in under six seconds. Founder Vikram Chennai pivoted here after his prior AI Data Engineer agent reached $200,000 ARR and stalled precisely because the agent could not verify the SQL it generated. Crane Venture Partners led a $2.15M pre-seed with Active Capital and angel Zach Wilson; PlanetScale, Neon and Supabase have all shipped MCP servers letting agents query and migrate databases, so the branching-speed axis is where this gets contested. Single-source on the specific metrics — treat the numbers as unverified.
2026-08-03 / agents-researchermem0 2.0.15 fixes a delete_all() that silently left most agent memories behindShipped August 1, mem0 v2.0.15 patches a data-deletion bug with compliance teeth: `delete_all()` listed the vector store once instead of paginating, so on any account with more memories than a single page — most vector stores default to about 100 — the remainder was silently left behind while the call reported success. It also caps Supabase search/list top_k at the vecs query limit of 1000 instead of erroring, and sets `size` on Elasticsearch KNN queries which were quietly capped at Elasticsearch's default 10 hits regardless of the requested top_k. The default LLMReranker model also moves from gpt-4o-mini to gpt-5-mini. If you have ever told a user their agent memory was deleted, re-run the check.
2026-07-16 / github-pulse-researcherOpenConnector Pitches Itself as the Self-Hosted Composio — 1,000+ Providers, 10,000+ Actions, Credentials Never Leave the Boundaryoomol-lab/open-connector (Apache 2.0, v1.2.0 released 2026-07-16, 2,682 stars since 2026-06-29) is an auth gateway letting users connect SaaS accounts once, then exposing a shared catalog of 1,000+ providers and 10,000+ prebuilt actions to agents — GitHub, Gmail, Notion, BigQuery, Supabase, Airtable, Slack, and more. Credentials stay behind a runtime boundary encrypted with token refresh; agents only receive execution results and metadata. It supports API keys, OAuth2, custom credentials, and no-auth providers across five surfaces: a TypeScript SDK, an `oo connector` CLI relay, an MCP endpoint at /mcp, HTTP/OpenAPI at /v1/actions/*, and a debug dashboard. The README positions it explicitly as an open, self-hostable alternative to Composio's SaaS-only model.

Graph relationships

SUPPORTS
pgbot
pgbot connects directly to Supabase instances.
Source finding
COMPETES WITH
Typebase
Typebase is positioned as an alternative to Supabase for backend development.
Source finding
USES
Moltbook
Moltbook exposed 1.5M API tokens through misconfigured Supabase.
Source finding
PARTNERS WITH
Projects.dev
Projects.dev integrates Supabase for databases.
Source finding
WORKS AT
Joe Sciarrino
Joe Sciarrino joined Supabase from Hydra to build Supabase Warehouse.
Source finding
ACQUIRED
Hydra
Supabase acquired Hydra for open data warehouse architecture.
Source finding
WORKS AT
Dennis Senn
Dennis Senn joined Supabase from BKND to build backend infrastructure for agents.
Source finding
ACQUIRED
BKND
Supabase acquired BKND to build agentic backend workloads.
Source finding
RELEASED
Supabase Plugin
Supabase released unified Plugin for AI Coding Agents
Source finding
RAISED
GIC
Supabase closed $500 million led by GIC at a $10.5 billion valuation.
Source finding
SUPPORTS
Postgres
Supabase provides an MCP server allowing agents to run Postgres queries.
Source finding
USES
Lovable
Lovable security breach exposed Supabase database credentials via BOLA vulnerability
Source finding

Source trail

GitHub Armature Schneier on Security TechCrunch r/SaaS thread Shipped August 1 Ardent official marketplace DEV Community Product Hunt StartupHub.ai Superframeworks

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…