Use Supabase MCP read-only and away from production
Researchers showed that a prompt hidden in a customer support ticket could make a coding agent, running Supabase MCP with the service_role key, read private tables and post them back into the ticket.