Deadbolt

{
  "name": "Deadbolt",
  "description": "Deadbolt checks Supabase access control. Paste migration SQL or a read-only catalog snapshot and get a per-table matrix of what signed-out and signed-in users can read and write, the leaks ranked by severity, and the fix SQL. Runs in your browser, no account.",
  "version": "1.0.0",
  "url": "https://deadbolt.clawhard.com/a2a",
  "preferredTransport": "JSONRPC",
  "protocolVersion": "1.0",
  "supportedInterfaces": [
    {
      "url": "https://deadbolt.clawhard.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "1.0"
    },
    {
      "url": "https://deadbolt.clawhard.com/a2a",
      "protocolBinding": "JSONRPC",
      "protocolVersion": "0.3"
    }
  ],
  "provider": {
    "organization": "Clawhard Studio",
    "url": "https://clawhard.com"
  },
  "iconUrl": "https://clawhard.com/icon-512.png",
  "documentationUrl": "https://deadbolt.clawhard.com/llms.txt",
  "capabilities": {
    "streaming": false,
    "pushNotifications": false,
    "extendedAgentCard": false
  },
  "defaultInputModes": [
    "application/json",
    "text/plain"
  ],
  "defaultOutputModes": [
    "application/json",
    "text/plain"
  ],
  "skills": [
    {
      "id": "deadbolt_check_supabase_access",
      "name": "Check who can read and write Supabase tables (RLS, policies, grants)",
      "description": "Use when you write, review or are about to apply Supabase / PostgreSQL migration SQL (CREATE TABLE, RLS, CREATE POLICY, GRANT, views, SECURITY DEFINER functions, storage buckets), or when a user asks whether their Supabase data is exposed, whether RLS is set up right, or why a query returns 42501 permission denied or no rows.",
      "tags": [
        "deadbolt",
        "DeveloperApplication",
        "read-only"
      ],
      "examples": [
        "Is my Supabase schema leaking data?",
        "Check these migrations for RLS problems before I push",
        "Why do I get permission denied 42501 on my new Supabase table?"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ]
    },
    {
      "id": "deadbolt_catalog_query",
      "name": "Get the read-only SQL that snapshots a live Supabase database for Deadbolt",
      "description": "Use when you need to check a live Supabase project rather than migration files: returns a read-only SQL query that reads table RLS settings, grants for anon and authenticated, policies, SECURITY DEFINER functions and storage buckets (never row data) and returns one JSON value.",
      "tags": [
        "deadbolt",
        "DeveloperApplication",
        "read-only"
      ],
      "examples": [
        "Is my Supabase schema leaking data?",
        "Check these migrations for RLS problems before I push",
        "Why do I get permission denied 42501 on my new Supabase table?"
      ],
      "inputModes": [
        "application/json",
        "text/plain"
      ],
      "outputModes": [
        "application/json",
        "text/plain"
      ]
    }
  ]
}