supabase / mcp / 34994420860

97%

push

github

feat: support skip_elicitations in the local HTTP server (#434)

## Why

Let local HTTP callers opt out of cost elicitations per tool, matching
[platform #38134](https://github.com/supabase/platform/pull/38134)
(contract reference, not a deployment dependency).

Closes
[AI-1217](https://linear.app/supabase/issue/AI-1217/add-skip-elicitations-parity-to-the-package-local-http-server).

## What changed

- Accept one `skip_elicitations` CSV parameter containing
`create_project` and/or `create_branch`. Trim whitespace and ignore
empty entries; omitted or blank preserves defaults.
- Subtract only the selected tools from request-local elicitation
support, restoring their existing cost-confirmation flow. This does not
bypass costs, authorization, or read-only restrictions.
- Return HTTP 400 for unknown names, SQL tools, case variants, repeated
keys, and bracket-form arrays/objects. Update transport coverage and
contributing guidance; no flag changes.

## How to test

From the PR checkout root (branch
`barryroodt/ai-1217-http-skip-elicitations`, containing `package.json`
and `packages/`), use Node LTS and pnpm 10. Leave port 3111 alone; 3112
is an example, so choose a free port and substitute it consistently.

<details>
<summary>Build and start the no-create local check</summary>

```sh
mise install node pnpm
mise exec -- node --version
mise exec -- pnpm --version
mise exec -- pnpm install --frozen-lockfile
mise exec -- pnpm --config.enable-pre-post-scripts=true --filter '@supabase/mcp-server-supabase...' build
mise exec -- node packages/mcp-server-supabase/dist/cli.js --http --port 3112 --api-url http://127.0.0.1:1
```

Expect Node LTS, pnpm 10, and successful typechecks/builds for the
package and its workspace dependency. Stop if installation requires
registry authentication; the reviewer handles it, not an agent. The
install recipe was not rerun during verification.

Keep this server running in terminal A. Its unreachable loopback API and
the synthetic bear... (continued)

503 of 539 branches covered (93.32%)

Branch coverage included in aggregate %.

20 of 20 new or added lines in 1 file covered. (100.0%)

3490 of 3595 relevant lines covered (97.08%)

65.82 hits per line