Let the agent build the backend. Keep the approval.
MCP over stdio or HTTP, preview branches, and policy tests before merge.
Coding agents are good at writing migrations and bad at knowing when a migration is dangerous. Scribase ships an MCP server that exposes the backend as typed tools: the agent works on a preview branch, runs the Aegis mutation test against its row-level security policies, and asks before merging. Production is never the agent’s scratchpad.
What you need
- An MCP server the editor can connect to without a local database
- Schema changes that land on a preview branch first
- Proof that a new RLS policy does not leak rows before it merges
{ "mcpServers": { "scribase": {
"url": "https://api.scribase.com/mcp",
"headers": { "Authorization": "Bearer ${env:SCRIBASE_ACCESS_TOKEN}" }
} } }How Scribase fits
Remote or local MCP
Run scribase-mcp locally over stdio, or point the editor at the hosted HTTP endpoint with a personal access token. Both expose the same tools: projects, environments, branches, SQL, migrations, and policy tests.
Preview, test, merge
The default agent path is create preview branch, apply the change, run policy.test (the Aegis mutation harness), show the result, and merge only after confirmation. Destructive operations go through the approval gate.
Typed results
scribase gen types writes the Database type for your client from the live schema, so the agent’s next edit is type-checked against the table it just created.
The capabilities behind it
Every claim above maps to a feature Scribase ships. Here are the ones this fit leans on most.
Common questions
Which editors work with the Scribase MCP server?
Any MCP client: Cursor, Claude Code, Claude Desktop, Windsurf, VS Code, and others. Local clients can use stdio; clients that support remote servers can use the streamable HTTP endpoint with a bearer token.
Can the agent drop a production table?
Not without a person. Destructive operations require approval, and the recommended flow keeps the agent on a preview branch until the policy test passes and you confirm the merge.