Question

Is it safe to paste my database URL into Cursor's chat?

Solved · 498 viewsasked 4 weeks ago by rosa_m

Cursor asked for the connection string to 'help debug'.

What I’ve tried

Did not paste it yet. Searched here and in the docs, found nothing that matched my case.

Comment

2 answers

Marked as helpful by the asker

lena_ops4 weeks ago

The URL contains your database password. Treat it like the password. Give Cursor the schema (\d+) and error messages, never the credentials. If you already pasted it once, rotate the database password today; it's one click in the Supabase dashboard.

Comment

chidi_eze4 weeks ago

If you want Cursor to actually query the database while debugging, give it its own read-only role instead of your password:

create role cursor_ro login password '...' ;
grant usage on schema public to cursor_ro;
grant select on all tables in schema public to cursor_ro;

Use it against a local copy or a staging project, never production. And drop the role when you're done.

Comment

A separate login for the AI. Obvious once you say it. rosa_m 4 weeks ago

Keyboard shortcuts

Is it safe to paste my database URL into Cursor's chat?

What I’ve tried

2 answers

Your answer