Airlock RLS MCP Server

by mateuszingano Your server? Claim it

local only

Airlock RLS runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 14 Oct 2026.

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

—

Installs / week

npm · airlock-rls-mcp

Stars

0 open issues

14 Oct 2026

Last commit

from GitHub

MIT

License

JavaScript

Nothing serious here today

Today is the operative word: we check Airlock RLS every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add airlock-rls-mcp -- npx -y airlock-rls-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "airlock-rls-mcp": {
      "args": [
        "-y",
        "airlock-rls-mcp"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.airlock-rls-mcp]
command = "npx"
args = ["-y", "airlock-rls-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "airlock-rls-mcp": {
      "args": [
        "-y",
        "airlock-rls-mcp"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "airlock-rls-mcp": {
      "args": [
        "-y",
        "airlock-rls-mcp"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Airlock RLS

same job, measured the same way

rowstile

by rowstile

Check, test, prove and review a rowstile policy: access rules for Postgres row-level security

368 installs/wk local only

lavela

by ym2629

Deploy a repo to a live app from chat: servers, Postgres, domain, email, Stripe, security scan.

answering

Rls Doctor

by subhajitlucky

Read-only Postgres/Supabase RLS audit with a rolled-back probe that proves who can read which rows.

1 989 installs/wk local only

Secure Schema MCP

by siddharth-coder13

Read-only MCP server for exposing database schema metadata without row data.

82 installs/wk local only

Audit AI

by audit0

Finds authorization holes in Next.js + Supabase apps and live Supabase databases. No API key.

46 installs/wk local only

Malinois

by malinois

Check a live app you own for public databases, leaked keys and exposed files.

2 tools answering

PostgreSQL

by antonorlov

MCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.

983 installs/wk local only

Shippable

by egarter

Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions

1 002 installs/wk local only

Airlock RLS — questions

Answers built from our own checks of this server.

Why is there no uptime for Airlock RLS?

Airlock RLS runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package airlock-rls-mcp.

How do I connect Airlock RLS?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls airlock-rls-mcp straight from npm; nothing to host, nothing to sign up for.

Is Airlock RLS open source?

Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.