From bb094f96c84a2679c5fc555892133f46e302ee29 Mon Sep 17 00:00:00 2001
From: Miranda Limonczenko <miranda.limonczenko@supabase.io>
Date: Wed, 19 Aug 2026 08:56:09 -0700
Subject: [PATCH] docs(mcp): revise authentication note to match style guide
 (#49219)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

<img width="769" height="212" alt="Screenshot 2026-08-18 at 12 17 18 PM"
src="https://github.com/user-attachments/assets/38ce6606-84ae-4833-a7d9-7a1931fdd773"
/>


## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md)
file.

YES

## What kind of change does this PR introduce?

Docs update. Copy and dedupe.

## What is the current behavior?

Gave this a style edit. Basically, saw this note breaking a lot of style
rules at once (`login` instead of `log in`, future tense, and also
breaking timelessness) and couldn't help myself for submitting a
revision. 😅

## What is the new behavior?

Preview:
https://docs-git-cursor-revise-mcp-auth-note-bbe8-supabase.vercel.app/docs/guides/ai-tools/mcp

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Miranda Limonczenko <czenko@users.noreply.github.com>
---
 apps/docs/features/ui/McpConfigPanel.tsx           | 14 +++-----------
 .../src/McpUrlBuilder/McpConfigPanel.md.tsx        | 12 +++---------
 .../ui-patterns/src/McpUrlBuilder/clients.data.ts  |  9 +++++++++
 packages/ui-patterns/src/McpUrlBuilder/index.ts    |  1 +
 4 files changed, 16 insertions(+), 20 deletions(-)

diff --git a/apps/docs/features/ui/McpConfigPanel.tsx b/apps/docs/features/ui/McpConfigPanel.tsx
index f7bece0a60d..9a8ae8cdf8b 100644
--- a/apps/docs/features/ui/McpConfigPanel.tsx
+++ b/apps/docs/features/ui/McpConfigPanel.tsx
@@ -26,6 +26,7 @@ import {
 import { Admonition } from 'ui-patterns/Admonition'
 import {
   createMcpCopyHandler,
+  MCP_HOSTED_AUTH_NOTE,
   McpConfigPanel as McpConfigPanelBase,
   type McpClient,
 } from 'ui-patterns/McpUrlBuilder'
@@ -336,17 +337,8 @@ export function McpConfigPanel() {
         />
       </div>
       {isPlatform && (
-        <Admonition type="note" title="Authentication" className="mt-3">
-          <p>
-            {
-              "Some MCP clients will automatically prompt you to login during setup, while others may require manual authentication steps. Either authentication method will open a browser window where you can login to your Supabase account and grant organization access to the MCP client. In the future, we'll offer more fine grain control over these permissions."
-            }
-          </p>
-          <p>
-            {
-              'Previously Supabase MCP required you to generate a personal access token (PAT), but this is no longer required.'
-            }
-          </p>
+        <Admonition type="note" title={MCP_HOSTED_AUTH_NOTE.title} className="mt-3">
+          <p>{MCP_HOSTED_AUTH_NOTE.body}</p>
         </Admonition>
       )}
     </>
diff --git a/packages/ui-patterns/src/McpUrlBuilder/McpConfigPanel.md.tsx b/packages/ui-patterns/src/McpUrlBuilder/McpConfigPanel.md.tsx
index 87b23d3fe41..3f2753185a0 100644
--- a/packages/ui-patterns/src/McpUrlBuilder/McpConfigPanel.md.tsx
+++ b/packages/ui-patterns/src/McpUrlBuilder/McpConfigPanel.md.tsx
@@ -9,6 +9,7 @@ import {
   DEFAULT_MCP_URL_NON_PLATFORM as LOCAL_URL,
   MCP_CLIENT_DATA,
   MCP_CLIENT_GROUPS,
+  MCP_HOSTED_AUTH_NOTE,
 } from './clients.data'
 import type { McpClientData } from './clients.data'
 import {
@@ -144,16 +145,9 @@ export function McpConfigPanel() {
       ))}
 
       <paragraph>
-        <strong>Authentication</strong>
-      </paragraph>
-      <paragraph>
-        Some MCP clients automatically prompt you to log in during setup, while others require
-        manual authentication steps. Either way, a browser window opens where you log in to your
-        Supabase account and grant the MCP client access to your organization.
-      </paragraph>
-      <paragraph>
-        A personal access token (PAT) was previously required, but is no longer needed.
+        <strong>{MCP_HOSTED_AUTH_NOTE.title}</strong>
       </paragraph>
+      <paragraph>{MCP_HOSTED_AUTH_NOTE.body}</paragraph>
     </>
   )
 }
diff --git a/packages/ui-patterns/src/McpUrlBuilder/clients.data.ts b/packages/ui-patterns/src/McpUrlBuilder/clients.data.ts
index 996f4157b86..972815f37b5 100644
--- a/packages/ui-patterns/src/McpUrlBuilder/clients.data.ts
+++ b/packages/ui-patterns/src/McpUrlBuilder/clients.data.ts
@@ -439,3 +439,12 @@ export const DEFAULT_MCP_URL_NON_PLATFORM = 'http://localhost:54321/mcp'
  * docs document (and what to fall back to in production).
  */
 export const HOSTED_MCP_URL = 'https://mcp.supabase.com/mcp'
+
+/**
+ * Hosted MCP authentication note. Shared by the docs HTML callout and the
+ * markdown export so the two pipelines cannot drift.
+ */
+export const MCP_HOSTED_AUTH_NOTE = {
+  title: 'Authentication',
+  body: "Some MCP clients automatically prompt you to log in during setup. Others require manual authentication steps. Either method opens a browser window where you log in to your Supabase account and grant the MCP client access to your organization. You don't need a personal access token (PAT).",
+} as const
diff --git a/packages/ui-patterns/src/McpUrlBuilder/index.ts b/packages/ui-patterns/src/McpUrlBuilder/index.ts
index fe8d3b96800..aea7e6a4d5c 100644
--- a/packages/ui-patterns/src/McpUrlBuilder/index.ts
+++ b/packages/ui-patterns/src/McpUrlBuilder/index.ts
@@ -9,6 +9,7 @@ export {
   FEATURE_GROUPS_NON_PLATFORM,
   MCP_CLIENT_GROUPS,
   MCP_CLIENT_DATA,
+  MCP_HOSTED_AUTH_NOTE,
 } from './clients.data'
 export type { McpClientData } from './clients.data'
 export { MCP_CLIENTS } from './mcpClients'