[pull] master from supabase:master

apps/docs/content/_partials/mcp_supabase_config.mdx

@@ -54,6 +54,28 @@
     }
     ```
 
+Or, if using `pnpm` instead of `npm`
+
+    ```json
+    {
+      "mcpServers": {
+        "supabase": {
+          "command": "cmd",
+          "args": [
+            "/c",
+            "pnpm",
+            "dlx",
+            "@supabase/mcp-server-supabase@latest",
+            "--read-only",
+            "--project-ref=<project-ref>"
+          ],
+          "env": {
+            "SUPABASE_ACCESS_TOKEN": "<personal-access-token>"
+          }
+        }
+      }
+    }
+    ```
     Replace `<project-ref>` with your project ref, and `<personal-access-token>` with your personal access token.
 
     <Admonition type="note">

apps/docs/content/guides/auth/auth-email-passwordless.mdx

@@ -24,7 +24,7 @@ Magic Links are a form of passwordless login where users click on a link sent to
 
 Email authentication methods, including Magic Links, are enabled by default.
 
-Configure the Site URL and any additional redirect URLs. These are the only URLs that are allowed as redirect destinations after the user clicks a Magic Link. You can change the URLs on the [Auth Providers page](/dashboard/project/_/auth/providers) for hosted projects, or in the [configuration file](/docs/guides/cli/config#auth.additional_redirect_urls) for self-hosted projects.
+Configure the Site URL and any additional redirect URLs. These are the only URLs that are allowed as redirect destinations after the user clicks a Magic Link. You can change the URLs on the [URL Configuration page](/dashboard/project/_/auth/url-configuration) for hosted projects, or in the [configuration file](/docs/guides/cli/config#auth.additional_redirect_urls) for self-hosted projects.
 
 By default, a user can only request a magic link once every <SharedData data="config">auth.rate_limits.magic_link.period</SharedData> and they expire after <SharedData data="config">auth.rate_limits.magic_link.validity</SharedData>.
 

apps/docs/content/guides/auth/quickstarts/react.mdx

@@ -37,7 +37,6 @@ hideToc: true
 
     ```bash name=Terminal
     npm create vite@latest my-app -- --template react
-
     ```
 
   </StepHikeCompact.Code>
@@ -65,14 +64,14 @@ hideToc: true
   <StepHikeCompact.Step step={4}>
     <StepHikeCompact.Details title="Set up your login component">
 
-    In `App.js`, create a Supabase client using your [Project URL and public API (anon) key](https://supabase.com/dashboard/project/_/settings/api).
+    In `App.jsx`, create a Supabase client using your [Project URL and public API (anon) key](https://supabase.com/dashboard/project/_/settings/api).
 
     You can configure the Auth component to display whenever there is no session inside `supabase.auth.getSession()`
 
     </StepHikeCompact.Details>
     <StepHikeCompact.Code>
 
-      ```js name=src/App.js
+      ```jsx name=src/App.jsx
         import './index.css'
         import { useState, useEffect } from 'react'
         import { createClient } from '@supabase/supabase-js'
@@ -121,7 +120,7 @@ hideToc: true
     <StepHikeCompact.Code>
 
       ```bash name=Terminal
-      npm start
+      npm run dev
       ```
 
     </StepHikeCompact.Code>

apps/docs/spec/api_v1_openapi.json

@@ -367,6 +367,13 @@
             "in": "query",
             "description": "Organization slug",
             "schema": { "pattern": "^[\\w-]+$", "type": "string" }
+          },
+          {
+            "name": "resource",
+            "required": false,
+            "in": "query",
+            "description": "Resource indicator for MCP (Model Context Protocol) clients",
+            "schema": { "enum": ["https://api.supabase.io/mcp"], "type": "string" }
           }
         ],
         "responses": { "204": { "description": "" } },
@@ -4395,7 +4402,12 @@
           "code": { "type": "string" },
           "code_verifier": { "type": "string" },
           "redirect_uri": { "type": "string" },
-          "refresh_token": { "type": "string" }
+          "refresh_token": { "type": "string" },
+          "resource": {
+            "type": "string",
+            "enum": ["https://api.supabase.io/mcp"],
+            "description": "Resource indicator for MCP (Model Context Protocol) clients"
+          }
         },
         "additionalProperties": false
       },
@@ -4532,12 +4544,7 @@
           "name": { "type": "string" },
           "description": { "type": "string", "nullable": true },
           "hash": { "type": "string", "nullable": true },
-          "secret_jwt_template": {
-            "type": "object",
-            "properties": { "role": { "type": "string", "minLength": 1 } },
-            "required": ["role"],
-            "nullable": true
-          },
+          "secret_jwt_template": { "type": "object", "additionalProperties": {}, "nullable": true },
           "inserted_at": { "type": "string", "format": "date-time", "nullable": true },
           "updated_at": { "type": "string", "format": "date-time", "nullable": true }
         },
@@ -4559,12 +4566,7 @@
             "pattern": "^[a-z_][a-z0-9_]+$"
           },
           "description": { "type": "string", "nullable": true },
-          "secret_jwt_template": {
-            "type": "object",
-            "properties": { "role": { "type": "string", "minLength": 1 } },
-            "required": ["role"],
-            "nullable": true
-          }
+          "secret_jwt_template": { "type": "object", "additionalProperties": {}, "nullable": true }
         },
         "required": ["type", "name"]
       },
@@ -4578,12 +4580,7 @@
             "pattern": "^[a-z_][a-z0-9_]+$"
           },
           "description": { "type": "string", "nullable": true },
-          "secret_jwt_template": {
-            "type": "object",
-            "properties": { "role": { "type": "string", "minLength": 1 } },
-            "required": ["role"],
-            "nullable": true
-          }
+          "secret_jwt_template": { "type": "object", "additionalProperties": {}, "nullable": true }
         }
       },
       "CreateBranchBody": {