{
 "name": "Deadbolt",
 "description": "Deadbolt checks Supabase access control. Paste migration SQL or a read-only catalog snapshot and get a per-table matrix of what signed-out and signed-in users can read and write, the leaks ranked by severity, and the fix SQL. Runs in your browser, no account.",
 "version": "1.0.0",
 "url": "https://deadbolt.clawhard.com/a2a",
 "preferredTransport": "JSONRPC",
 "protocolVersion": "1.0",
 "supportedInterfaces": [
  {
   "url": "https://deadbolt.clawhard.com/a2a",
   "protocolBinding": "JSONRPC",
   "protocolVersion": "1.0"
  },
  {
   "url": "https://deadbolt.clawhard.com/a2a",
   "protocolBinding": "JSONRPC",
   "protocolVersion": "0.3"
  }
 ],
 "provider": {
  "organization": "Clawhard Studio",
  "url": "https://clawhard.com"
 },
 "iconUrl": "https://clawhard.com/icon-512.png",
 "documentationUrl": "https://deadbolt.clawhard.com/llms.txt",
 "capabilities": {
  "streaming": false,
  "pushNotifications": false,
  "extendedAgentCard": false
 },
 "defaultInputModes": [
  "application/json",
  "text/plain"
 ],
 "defaultOutputModes": [
  "application/json",
  "text/plain"
 ],
 "skills": [
  {
   "id": "deadbolt_check_supabase_access",
   "name": "Check who can read and write Supabase tables (RLS, policies, grants)",
   "description": "Use when you write, review or are about to apply Supabase / PostgreSQL migration SQL (CREATE TABLE, RLS, CREATE POLICY, GRANT, views, SECURITY DEFINER functions, storage buckets), or when a user asks whether their Supabase data is exposed, whether RLS is set up right, or why a query returns 42501 permission denied or no rows.",
   "tags": [
    "deadbolt",
    "DeveloperApplication",
    "read-only"
   ],
   "examples": [
    "Is my Supabase schema leaking data?",
    "Check these migrations for RLS problems before I push",
    "Why do I get permission denied 42501 on my new Supabase table?"
   ],
   "inputModes": [
    "application/json",
    "text/plain"
   ],
   "outputModes": [
    "application/json",
    "text/plain"
   ]
  },
  {
   "id": "deadbolt_catalog_query",
   "name": "Get the read-only SQL that snapshots a live Supabase database for Deadbolt",
   "description": "Use when you need to check a live Supabase project rather than migration files: returns a read-only SQL query that reads table RLS settings, grants for anon and authenticated, policies, SECURITY DEFINER functions and storage buckets (never row data) and returns one JSON value.",
   "tags": [
    "deadbolt",
    "DeveloperApplication",
    "read-only"
   ],
   "examples": [
    "Is my Supabase schema leaking data?",
    "Check these migrations for RLS problems before I push",
    "Why do I get permission denied 42501 on my new Supabase table?"
   ],
   "inputModes": [
    "application/json",
    "text/plain"
   ],
   "outputModes": [
    "application/json",
    "text/plain"
   ]
  }
 ]
}