Accept Invite External Jit Access
Accept an invitation for JIT database access.
ActionTry it
Integrate Supabase
with your AI CRM
Supabase is an open-source backend-as-a-service providing a Postgres database, authentication, storage, and real-time subscription APIs for building modern applications
Explore Triggers and Actions
Activate vanity subdomain for project
Activates a vanity subdomain for the specified Supabase project (e.g., 'my-brand.supabase.co'). Important notes: - Vanity subdomains require a paid plan (Pro/Team/Enterprise) - Usage of vanity subdomains and custom domains is mutually exclusive - After activation, your project's auth services will no longer work on the original {project-ref}.supabase.co hostname - Schedule a downtime window to update client code and OAuth providers before activating
ActionTry it
Append Resumable Upload
Append data to a TUS resumable upload. Uses a secret/service-role project key and bypasses Row Level Security. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Append Resumable Upload Signed
Append data to a signed resumable upload. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Apply a database migration
Applies a tracked SQL database migration to a Supabase project, for schema changes or other DDL/DML operations. You can provide a migration name, rollback SQL, and an idempotency key to help prevent duplicate tracking.
ActionTry it
Apply Project Addon
Apply or update billing addons and compute instance size. Changes may affect billing; inspect the project plan before modifying addons.
ActionTry it
Authorize Jit Access
Authorize user-to-role mappings for JIT access.
ActionTry it
Authorize user through OAuth
Requests Supabase OAuth 2.0 authorization for a registered application and returns the redirect location when the endpoint responds with a redirect, or status and error information otherwise.
ActionTry it
Beta activate custom hostname for project
Activates a previously configured custom hostname for a Supabase project, assuming DNS settings are verified externally.
ActionTry it
Beta get project's custom hostname config
Retrieves a Supabase project's custom hostname configuration, including its status, SSL certificate, and ownership verification, noting that availability may depend on the project's plan.
ActionTry it
Beta update project network restrictions
Updates network access restrictions (IPv4/IPv6 CIDR lists) for a Supabase project. Changes may terminate existing connections that do not match the new rules; the returned status indicates whether the configuration is stored or applied.
ActionTry it
Bulk create secrets
Bulk creates secrets for a Supabase project. Secret names must not start with SUPABASE_; leading and trailing whitespace is stripped from names and values before submission.
ActionTry it
Bulk delete secrets
Deletes one or more secrets from a Supabase project by their names. This action is irreversible - deleted secrets cannot be recovered. Use this action when you need to remove environment variables or configuration secrets that are no longer needed or should be replaced. Supports both single and bulk deletion operations through the same endpoint.
ActionTry it
Bulk update functions
Bulk updates Edge Functions in a Supabase project with configurations such as status and version. The operation can create new functions or replace existing ones; version increments must be supplied manually.
ActionTry it
Cancel Project Restoration
Cancel project restoration.
ActionTry it
Check vanity subdomain availability
Checks whether a vanity subdomain is available for a Supabase project without reserving or assigning it. The endpoint requires a Pro, Team, or Enterprise organization plan.
ActionTry it
Copy Storage Object
Copy an object. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Count action runs
Counts the number of action runs for a Supabase project using a HEAD request. Use this when you need to retrieve the total count of action runs without fetching the full list of runs.
ActionTry it
Count Function Results
Count rows from a known exposed table-valued function using HEAD, without a body. PostgREST enforces a read-only transaction; functions attempting database writes fail. Uses an elevated secret/service_role key that bypasses Row Level Security. OAuth requires secrets:read; fine-grained PATs require api_gateway_keys_read and api_gateway_keys_secret_read for project-key discovery. Not for scalar functions.
ActionTry it
Count Table Rows
Count matching rows in an exposed table or view without downloading rows. Uses an elevated secret/service-role key and bypasses Row Level Security. OAuth requires secrets:read; fine-grained personal access tokens require api_gateway_keys_read and api_gateway_keys_secret_read.
ActionTry it
Create a database branch
Creates a new, isolated database branch from an existing Supabase project (identified by `ref`), useful for setting up separate environments like development or testing, which can optionally be linked to a Git branch.
ActionTry it
Create a function
Creates a new serverless Edge Function for a Supabase project (identified by `ref`), requiring valid JavaScript/TypeScript in `body` and a project-unique `slug` identifier.
ActionTry it
Create a new third-party auth integration
Call this to add a new third-party authentication method (OIDC or JWKS) to a Supabase project for integrating external identity providers (e.g., for SSO); the API may also support `custom_jwks` if sent directly.
ActionTry it
Create an organization
Creates a new Supabase organization, which serves as a top-level container for projects, billing, and team access.
ActionTry it
Create CLI login role
Creates a temporary CLI login role for database access with specified permissions; use when setting up CLI authentication for development or administrative tasks.
ActionTry it
Create new project
Creates a new Supabase project, requiring a unique name (no dots) within the organization; project creation is asynchronous.
ActionTry it
Create project api key
Creates a publishable or secret API key for an existing Supabase project, optionally with a description.
ActionTry it
Create project signing key
Create a new JWT signing key for a Supabase project, with an optional initial standby or in-use status.
ActionTry it
Create Resumable Upload
Create a TUS resumable upload. Uses a secret/service-role project key and bypasses Row Level Security. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Create Resumable Upload Signed
Create a signed TUS resumable upload. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Create Signed Download Url
Generate a time-limited download capability for an object. Uses privileged project-key discovery; protect the returned URL.
ActionTry it
Create Signed Download Urls
Generate time-limited download capabilities for multiple objects. Uses privileged project-key discovery; protect the returned URLs.
ActionTry it
Create Signed Upload URL
Create a two-hour signed authorization for uploading a Storage object. OAuth connections need ``secrets:read``. Fine-grained personal access tokens need ``api_gateway_keys_read`` and ``api_gateway_keys_secret_read``.
ActionTry it
Create SSO provider configuration
Creates a new SAML 2.0 Single Sign-On (SSO) provider for a Supabase project, requiring either `metadata_xml` or `metadata_url` for SAML IdP configuration.
ActionTry it
Create Storage Bucket
Create a Storage bucket. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Delete a project
Permanently and irreversibly deletes a Supabase project and all associated resources, including databases, storage, and configurations. This action is irreversible — the project cannot be recovered once deleted. Use when you need to completely remove a project from your organization.
ActionTry it
Delete all branches
Disables preview branching for a Supabase project, which deletes all remaining branches. IMPORTANT: Before calling this endpoint, you must manually delete all non-default branches. The API will reject the request with a 422 error if non-default branches exist. Use this action when you need to completely disable the preview branching feature for a project. This action is irreversible - all branches will be permanently removed and preview branching will be disabled. Requirements: - Preview branching must be enabled on the project - All non-default branches must be deleted first - Project must be on Pro plan or above to have preview branching
ActionTry it
Delete an API key from the project
Permanently deletes a specific API key (identified by `id`) from a Supabase project (identified by `ref`), revoking its access.
ActionTry it
Delete an edge function by slug
Permanently deletes a specific Edge Function (by `function_slug`) from a Supabase project (by `ref`); this action is irreversible and requires prior existence of both project and function.
ActionTry it
Delete branch by id
Permanently and irreversibly deletes a specific, non-default database branch by its `branch_id`, without affecting other branches.
ActionTry it
Delete Bucket Lifecycle
Delete bucket lifecycle configuration. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Delete CLI login roles
[Beta] Deletes existing login roles used by the Supabase CLI for the specified project. Use when you need to remove CLI authentication roles that were previously created for project access.
ActionTry it
Delete custom hostname config
Deletes an active custom hostname configuration for the project identified by `ref`, reverting to the default Supabase-provided hostname; this action immediately makes the project inaccessible via the custom domain and requires subsequent updates to client, OAuth, and DNS settings.
ActionTry it
Delete edge function
Deletes an Edge Function from a Supabase project by its slug. Use this action when you need to permanently remove a deployed Edge Function that is no longer needed or should be replaced. This action is irreversible — the function cannot be recovered once deleted, though you can redeploy it from source if needed.
ActionTry it
Delete Invite External Jit Access
Delete an external user's JIT invitation.
ActionTry it
Delete Jit Access
Delete JIT access by user ID.
ActionTry it
Delete Storage Bucket
Delete a bucket. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Delete Storage Object
Delete a Storage object. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Delete Storage Objects
Delete multiple objects. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Delete Table Rows
Permanently delete matching rows from an exposed Supabase table or view. Uses an elevated secret/service_role project key, bypassing Row Level Security. Requires filters unless allow_all_rows explicitly permits an unfiltered delete. OAuth needs secrets:read; fine-grained PATs need api_gateway_keys_read and api_gateway_keys_secret_read to reveal the project key.
ActionTry it
Delete third party auth config
Removes a third-party authentication provider (e.g., Google, GitHub) from a Supabase project's configuration; this immediately prevents users from logging in via that method.
ActionTry it
Delete vanity subdomain for project
Permanently and irreversibly deletes an active vanity subdomain configuration for the specified Supabase project, reverting it to its default Supabase URL.
ActionTry it
Deploy function
Deploys Edge Functions to a Supabase project using multipart upload.
ActionTry it
Disable preview branching
Disables the preview branching feature for an existing Supabase project, identified by its unique reference ID (`ref`). Note: Preview branching must be enabled on the project for this operation to succeed. If the project does not have preview branching enabled, a 422 error will be returned.
ActionTry it
Disable project readonly mode
Temporarily disables a Supabase project's read-only mode for 15 minutes to allow write operations (e.g., for maintenance or critical updates), after which it automatically reverts to read-only.
ActionTry it
Download private object
Downloads an object from a private Supabase Storage bucket and returns its bytes as base64 with selected metadata. Choose anon or service-role authorization; anon access requires an allowing storage policy, while service-role access bypasses row-level security. An object version and download filename can optionally be specified.
ActionTry it
Download Public Object
Retrieve an object from a public bucket.
ActionTry it
Download Signed Object
Retrieve an object using a presigned URL.
ActionTry it
Download Storage Object
Retrieve a Storage object. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Empty Storage Bucket
Empty a bucket. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Enable project database webhooks
Enables database webhooks for the Supabase project `ref`, triggering real-time notifications for INSERT, UPDATE, or DELETE events.
ActionTry it
Exchange auth code for access and refresh token
(Beta) Implements the OAuth 2.0 token endpoint to exchange an authorization code or refresh token for access/refresh tokens, based on `grant_type`. This is a standard OAuth 2.0 token endpoint that uses application/x-www-form-urlencoded content type as per OAuth 2.0 specification. Requires a valid registered OAuth application client_id and client_secret. For authorization_code grant type: - Requires valid authorization code obtained from the OAuth authorization flow - Optionally requires code_verifier if PKCE was used during authorization For refresh_token grant type: - Requires valid refresh_token from a previous token exchange
ActionTry it
Execute project database query
Executes PostgreSQL queries against a Supabase project's database for data retrieval, modification, or schema operations. Read-only mode does not prevent detected INSERT, UPDATE, or DELETE statements from making changes.
ActionTry it
Execute read-only database query
Run a read-only SQL query against a Supabase project as supabase_read_only_user. This beta endpoint requires all entity references to be schema-qualified.
ActionTry it
Generate TypeScript types
Generates and retrieves TypeScript types from a Supabase project's database; any schemas specified in `included_schemas` must exist in the project.
ActionTry it
Get a database branch
Retrieves detailed information about a specific database branch by its name and project reference. Use this to check branch status, configuration, and metadata before performing operations on the branch.
ActionTry it
Get a migration
Retrieves a specific database migration entry from the migration history using its version identifier. Use when you need to inspect migration details, SQL statements, or rollback commands for a specific migration version.
ActionTry it
Get a specific SQL snippet
Retrieves a specific SQL snippet by its unique identifier.
ActionTry it
Get a SSO provider by its UUID
Retrieves configuration details for a project's SAML Single Sign-On provider by UUID.
ActionTry it
Get a third-party integration
Retrieves the detailed configuration for a specific third-party authentication (TPA) provider, identified by `tpa_id`, within an existing Supabase project specified by `ref`.
ActionTry it
Get action run logs
Retrieves the execution logs for a specific action run by its ID. Use this to debug action executions, view output messages, and investigate errors that occurred during action runs.
ActionTry it
Get action run status
Retrieves the status and details of a specific action run, including its steps, timestamps, and configuration. Use this to monitor or check the progress of an action execution.
ActionTry it
Get API Health Status
Checks the Supabase API for availability, helping diagnose connectivity issues.
ActionTry it
Get Authenticated Image Headers
Get authenticated image transformation headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Authenticated Object Headers
Retrieve authenticated object information headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Authenticated Object Info
Retrieve authenticated object information. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Authenticated Object Info Headers
Get authenticated object information headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Available Regions
Tool to get the list of available regions for creating a new Supabase project. Use when you need to determine which regions are available for project deployment, or to get region recommendations based on geographic location and instance size requirements. Note: This is a Beta endpoint.
ActionTry it
Get Backup Schedule
Get the project's backup schedule.
ActionTry it
Get Bucket Lifecycle
Get bucket lifecycle configuration. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Bucket Lifecycle Headers
Get bucket lifecycle response headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get current vanity subdomain config
Fetches the current vanity subdomain configuration for a Supabase project, including its status and any custom domain name. The endpoint requires a Pro, Team, or Enterprise organization plan.
ActionTry it
Get database branch config
Retrieves the read-only configuration and status for a Supabase database branch, typically for monitoring or verifying its settings.
ActionTry it
Get Database Disk
Get database disk attributes.
ActionTry it
Get Database Metadata
Gets database metadata for the given project. Returns information about databases, schemas, and tables structure. Note: This endpoint is deprecated and may be removed in future versions.
ActionTry it
Get Database Openapi
Get the project's PostgREST OpenAPI specification.
ActionTry it
Get Disk Utilization
Get disk utilization.
ActionTry it
Get information about an organization
Fetches comprehensive details for a specific Supabase organization using its unique slug.
ActionTry it
Get Jit Access
Get user-to-role mappings for JIT database access.
ActionTry it
Get JIT access config
Retrieves a Supabase project's just-in-time (JIT) access configuration state using the beta endpoint.
ActionTry it
Get legacy signing key
Deprecated by the provider; no sunset date or replacement is announced. Retrieve signing key information for the project's imported JWT secret. The endpoint may return HTTP 404 when unavailable. Behavior is unchanged.
ActionTry it
Get Organization Entitlements
Get organization entitlements.
ActionTry it
Get performance advisors
Retrieves project performance advisors for a Supabase project. Returns a list of performance lints that identify potential issues and optimization opportunities. Note: This endpoint is deprecated.
ActionTry it
Get Profile
Get the user's profile.
ActionTry it
Get project
Retrieves detailed information about a Supabase project by reference ID, including its status, database configuration, organization, region, and creation timestamp. Requires a Management API bearer token with appropriate project read access.
ActionTry it
Get project API key
Retrieves details of a specific API key for a Supabase project by its UUID. Use when you need to inspect a single key's configuration, type, or metadata.
ActionTry it
Get project API keys
Retrieves all API keys for an existing Supabase project, specified by its unique reference ID (`ref`); this is a read-only operation.
ActionTry it
Get project auth config
Retrieves a Supabase project's authentication settings for read-only inspection, including supported provider configurations, MFA policies, email and SMS templates, security settings, and hooks. The returned configuration may not include every field supplied by the API.
ActionTry it
Get project config
Retrieve a project's consolidated effective database, pooler, Auth, Data API, Realtime, and Storage configuration. This Supabase Management API endpoint is Alpha and currently supports Personal Access Tokens (PATs) only; Supabase OAuth access tokens are not supported.
ActionTry it
Get Project Disk Autoscale Config
Get disk autoscale configuration.
ActionTry it
Get Project Function Combined Stats
Get combined function statistics.
ActionTry it
Get project legacy API keys status
Deprecated by the provider; no sunset date or replacement is announced. Checks whether JWT-based legacy API keys (anon, service_role) are enabled. The endpoint may return HTTP 404 when unavailable. Behavior is unchanged.
ActionTry it
Get project logs
Retrieves the unified logs stream for a Supabase project, including database, API, and edge function logs, for monitoring and debugging. Custom queries use ClickHouse SQL against the logs table, filtering by source; legacy source tables and metadata joins must be migrated. Provide both UTC timestamps for a time window; Supabase documents a last-minute fallback without both and a maximum 24-hour range. Check the response's error field even when execution reports success. Returned row fields depend on the query.
ActionTry it
Get project metrics
Retrieve a Supabase project's Prometheus/OpenMetrics exposition.
ActionTry it
Get project network restrictions
Retrieves a Supabase project's network restriction settings, including IPv4 and IPv6 CIDR allowlists, entitlement, and application status. The response may also include the previous configuration while a change is pending.
ActionTry it
Get project PgBouncer config
Retrieves the active PgBouncer configuration (PostgreSQL connection pooler) for a Supabase project, used for performance tuning, auditing, or getting the connection string.
ActionTry it
Get project pgsodium config
Retrieves the PGSodium configuration, including the root encryption key, for an existing Supabase project identified by its `ref`.
ActionTry it
Get project postgres config
Retrieves the current read-only PostgreSQL database configuration for a specified Supabase project's `ref`, noting that some advanced or security-sensitive details might be omitted from the response.
ActionTry it
Get project signing keys
Tool to list all signing keys for a Supabase project. Use when you need to retrieve JWT signing keys for authentication verification or rotation management.
ActionTry it
Get project SSL enforcement configuration
Retrieves the SSL enforcement configuration for a specified Supabase project, indicating if SSL connections are mandated for its database.
ActionTry it
Get project Supavisor configuration
Retrieves the Supavisor (connection pooler) configuration for a specified Supabase project, identified by its reference ID.
ActionTry it
Get Project Upgrade Eligibility
Checks a Supabase project's eligibility for an upgrade, verifying compatibility and identifying potential issues; this action does not perform the actual upgrade.
ActionTry it
Get project upgrade status
Retrieves the latest status of a Supabase project's database upgrade for monitoring purposes; does not initiate or modify upgrades.
ActionTry it
Get Project Usage Api Count
Get project usage API counts.
ActionTry it
Get Project Usage Request Count
Get project usage API request counts.
ActionTry it
Get project's auth config
Retrieves a project's authentication configuration, including provider, MFA, email, SMS, JWT and security settings. The response can contain sensitive secrets.
ActionTry it
Get project's PostgREST config
Retrieves the PostgREST configuration for a specific Supabase project.
ActionTry it
Get project's read-only mode status
Retrieves the read-only mode status for a specified Supabase project to check its operational state; this action does not change the read-only state.
ActionTry it
Get project's service health status
Retrieves the current health status for a Supabase project, for specified services or all services if the 'services' list is omitted.
ActionTry it
Get Public Image Headers
Get public image transformation headers.
ActionTry it
Get Public Object Headers
Get public object information headers.
ActionTry it
Get Public Object Info
Get public object information.
ActionTry it
Get Realtime Config
Get Realtime configuration.
ActionTry it
Get Resumable Upload Status
Get resumable upload offset and metadata. Uses a secret/service-role project key and bypasses Row Level Security. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Get Resumable Upload Status Signed
Get signed resumable upload offset and metadata. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Get Security Advisors
Retrieves security advisor findings and recommendations for a Supabase project. Use when you need to audit project security posture, identify SQL-based security issues, or get remediation guidance. Note: This endpoint is deprecated and may be removed in future API versions.
ActionTry it
Get Signed Image Headers
Get signed image transformation headers.
ActionTry it
Get Signed Object Headers
Get headers for a presigned object retrieval.
ActionTry it
Get Storage Bucket
Get bucket details. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Storage Bucket Headers
Get bucket response headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Storage Bucket List Headers
Get bucket-list response headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Storage Config
Get project Storage configuration.
ActionTry it
Get Storage Health
Check the Storage service health, distinct from Management API health.
ActionTry it
Get Storage Health Headers
Get Storage service health response headers.
ActionTry it
Get Storage Object Headers
Retrieve object information headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Storage Object Info
Retrieve object information. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Storage Object Info Headers
Get object information headers. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Get Table Schemas
Retrieve column details, types, primary and unique constraints, and optionally foreign keys for multiple database tables. Some returned metadata uses placeholders, and index information is not fetched.
ActionTry it
Get TUS resumable upload base options
Handles OPTIONS request for TUS Resumable uploads to discover server capabilities. Use when preparing resumable upload requests to verify supported TUS protocol versions and extensions.
ActionTry it
Get TUS resumable upload options
Handles OPTIONS request for TUS Resumable uploads to discover server capabilities. Use when preparing resumable upload requests to verify supported TUS protocol versions and extensions.
ActionTry it
Insert Table Rows
Insert rows or upsert on primary/UNIQUE keys in an exposed table or view. Uses a secret or service_role project key and bypasses Row Level Security. OAuth needs secrets:read; fine-grained PATs need api_gateway_keys_read and api_gateway_keys_secret_read to reveal project keys. Upserts can overwrite data.
ActionTry it
Invite External Jit Access
Invite an external user for JIT database access.
ActionTry it
Invoke Database Function
Invoke a known exposed Postgres function with named JSON arguments. Supports custom exposed schemas and table-valued result selection, filters, ordering, pagination, and counts. The function runs with a service-role project key that bypasses Row Level Security and may create, update, or delete data or execute DDL.
ActionTry it
Invoke Edge Function
Tool to invoke a deployed Supabase Edge Function over HTTPS. Use for testing and debugging Edge Functions with configurable method, headers, body, and authentication.
ActionTry it
Invoke Read Only Function
Invoke a known exposed Postgres function using GET in a read-only transaction. Not an Edge Function or arbitrary SQL executor. Database writes are rejected by PostgREST's GET transaction mode. Uses a secret/service_role key that bypasses Row Level Security, so reads can expose all rows. External side effects of a function are not prevented by a database read-only transaction. Supports table-valued projection, filters, ordering, pagination, and counts. OAuth needs secrets:read; fine-grained PATs need api_gateway_keys_read and api_gateway_keys_secret_read to reveal project keys.
ActionTry it
List Action Runs
List one page of action runs for a project.
ActionTry it
List all buckets
Retrieves a list of all storage buckets for a Supabase project, without returning bucket contents or access policies.
ActionTry it
List all database branches
Lists all database branches for a specified Supabase project, used for isolated development and testing of schema changes; ensure the project reference ID is valid.
ActionTry it
List all functions
Lists metadata for all Edge Functions in a Supabase project (specified by 'ref'), excluding function code or logs; the project must exist.
ActionTry it
List all organizations
Lists organizations associated with the authenticated Supabase account, returning their IDs, slugs, and names.
ActionTry it
List all projects
Lists Supabase projects for the authenticated user, including project ID, name, organization ID, region, status, database information, and creation time. OAuth access requires the projects:read scope.
ActionTry it
List all secrets
Retrieves all secrets for a Supabase project using its reference ID; secret values in the response may be masked.
ActionTry it
List all SSO providers
Lists all configured Single Sign-On (SSO) providers for a Supabase project, requiring the project reference ID (`ref`) of an existing project.
ActionTry it
List database branches
Lists all database branches for a specified Supabase project, providing information about each branch's status, configuration, and metadata. Use this action when you need to view all branches in a project, check branch statuses, or identify available branches before performing operations. Database branches are useful for isolated development and testing of schema changes.
ActionTry it
List Database Tables
Lists tables and optionally views in Supabase database schemas, providing an overview of database structure. Schema discovery can fall back to public, and per-schema failures are reported alongside any partial results.
ActionTry it
List Jit Access
List all user-to-role mappings for JIT access.
ActionTry it
List members of an organization
Retrieves all members of a Supabase organization, identified by its unique slug, including their user ID, username, email, role, and MFA status.
ActionTry it
List migration history
Retrieves the list of applied database migration versions for a Supabase project. Use this to track which migrations have been applied to the project's database. This is a read-only operation that requires the project reference ID.
ActionTry it
List Organization Projects
List one page of projects for an organization.
ActionTry it
List Project Addons
List billing addons and compute instance selections. Changes may affect billing; inspect the project plan before modifying addons.
ActionTry it
List project database backups
Lists all database backups for a Supabase project, providing details on existing backups but not creating new ones or performing restores; availability may depend on plan and configuration.
ActionTry it
List Project Restore Versions
List available restore versions for a project.
ActionTry it
List project secrets
Retrieves all secrets (environment variables) for a Supabase project by its reference ID. Use this action when you need to view the secrets configured for a project, such as API keys, database URLs, or other environment variables. Note that secret values in the response may be masked for security reasons.
ActionTry it
List SQL snippets for the logged in user
Retrieves the first page of SQL snippets for the logged-in user, optionally filtered by Supabase project. The response may contain a pagination cursor, but this tool cannot request subsequent pages.
ActionTry it
List Storage Buckets
List Storage buckets through the data-plane API. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
List Storage Objects
Search for objects under a prefix. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
List Storage Objects V2
Search for objects under a prefix using list v2. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
List third-party auth integrations for project
Lists all configured third-party authentication provider integrations for an existing Supabase project (using its `ref`), suitable for read-only auditing or verifying current authentication settings.
ActionTry it
Merge a database branch
Initiates a merge of a database branch into its target database. An optional migration version can limit how far migrations are merged; the response identifies the triggered workflow run.
ActionTry it
Modify Database Disk
Modify database disk configuration.
ActionTry it
Move Storage Object
Move an object. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Oauth Authorize Project Claim
Initiate OAuth authorization to claim a project. Returns redirect responses without following them; continue the browser flow using headers.location. An authorization redirect does not prove the claim has completed.
ActionTry it
OPTIONS for resumable upload sign
Send an OPTIONS request to the TUS resumable upload signing endpoint.
ActionTry it
OPTIONS for resumable upload sign
Send an OPTIONS request to a TUS resumable upload signing endpoint for a specified path.
ActionTry it
Patch a migration
[Beta] Patches an existing entry in the project's migration history, updating the name or rollback script. Use this to correct migration metadata after the migration has been created.
ActionTry it
Patch project network restrictions
Updates project's network restrictions by incrementally adding or removing IPv4/IPv6 CIDR blocks. Use when you need to modify existing restrictions without replacing the entire configuration.
ActionTry it
Pause Project
Pause a project, making its services unavailable until it is restored.
ActionTry it
Post Resumable Upload
Create a TUS upload through the wildcard creation route (an alias of base POST). Uses a secret/service-role project key and bypasses Row Level Security. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Post Resumable Upload Signed
Create a signed TUS upload through the wildcard creation route (an alias of base POST). Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Purge Bucket Cache
Purge cache for a bucket or its transformations. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Purge Object Cache
Purge cache for an object or its transformations. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Purge Storage Cache
Purge cache for the tenant or tenant transformations. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Push a database branch
Pushes a database branch, applying migrations and changes to the specified branch. Use when you need to deploy schema changes or migrations to a database branch.
ActionTry it
Remove an SSO provider
Deletes a specific SSO provider by its ID (`provider_id`) from a Supabase project (`ref`), which disables it and returns its details; ensure this action will not inadvertently lock out users.
ActionTry it
Remove Project Addon
Remove billing addons or revert compute sizing. Changes may affect billing; inspect the project plan before modifying addons.
ActionTry it
Remove project network bans
Removes specified IPv4 addresses from a Supabase project's network ban list, granting immediate access; IPs not currently banned are ignored.
ActionTry it
Remove read replica
Initiates removal of a specified read replica database from a Supabase project. This beta operation requires a valid replica identifier and permission to manage read replicas; redirect application traffic before removal.
ActionTry it
Render Authenticated Image
Render an authenticated image with transformations. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Render Public Image
Render a public image with transformations.
ActionTry it
Render Signed Image
Render a signed image with transformations.
ActionTry it
Replace Bucket Lifecycle
Replace bucket lifecycle configuration. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Reset a database branch
Resets an existing Supabase database branch, identified by `branch_id`, to its initial clean state, irreversibly deleting all its current data and schema changes.
ActionTry it
Restart Project
Restart a project, temporarily interrupting its services. Newly provisioned projects must wait ten minutes.
ActionTry it
Restore Branch
Restore a scheduled branch deletion.
ActionTry it
Restore database PITR backup
Restores a Supabase project's database to a specific Unix timestamp using Point-in-Time Recovery (PITR), overwriting the current state; requires a paid plan with PITR and physical backups enabled.
ActionTry it
Restore Project
Restore the given project.
ActionTry it
Retrieve a function
Retrieves detailed information, metadata, configuration, and status for a specific Edge Function using its project reference ID and function slug.
ActionTry it
Retrieve a function body
Retrieves the body of a specified Supabase Edge Function using its project reference and function slug. This read-only operation does not execute the function or return runtime logs.
ActionTry it
Retrieve network bans for project
Retrieves the list of banned IPv4 addresses for a Supabase project using its unique project reference string; this is a read-only operation.
ActionTry it
Reverify custom hostname
Re-verifies DNS and SSL configurations for an existing custom hostname associated with a Supabase project.
ActionTry it
Rollback Migrations
Rollback database migrations and remove them from history.
ActionTry it
Select From Table
Select rows from a Supabase/PostgREST table or view, with column selection, filtering, sorting, and pagination. When a project API key is not supplied, the tool may use a service-role key, which bypasses row-level security.
ActionTry it
Setup read replica for project
Provisions a read-only replica for a Supabase project in a specified supported AWS region to enhance read performance and reduce latency. This beta feature requires a Pro, Team, or Enterprise organization plan.
ActionTry it
Shutdown Realtime
Shut down the project Realtime service connections, disconnecting active clients.
ActionTry it
Terminate Resumable Upload
Terminate a TUS resumable upload. Uses a secret/service-role project key and bypasses Row Level Security. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Terminate Resumable Upload Signed
Terminate a signed resumable upload. Implements one TUS protocol step; callers retain Location and Upload-Offset for continuation.
ActionTry it
Update a function
Updates an existing Supabase Edge Function's properties, including its name, slug, source code, JWT settings, and import map, using its project reference and function slug.
ActionTry it
Update a project
Updates a Supabase project's configuration (currently supports updating the project name). Use when you need to rename an existing project.
ActionTry it
Update Action Run Status
Update the status of an action run.
ActionTry it
Update an API key for the project
Updates the description of an existing Supabase project API key without regenerating the key string.
ActionTry it
Update an SSO provider by its UUID
Updates an existing SSO provider's SAML metadata, associated email domains, or attribute mappings for a Supabase project, identified by `ref` and `provider_id`.
ActionTry it
Update API key
Updates an existing Supabase project API key's name, description, or JWT template without regenerating the key. It can request that the key value be revealed in the response.
ActionTry it
Update Backup Schedule
Update the project's backup schedule.
ActionTry it
Update branch configuration
Updates the configuration of a Supabase database branch, allowing modification of its name, associated Git branch, notification URL, persistence settings, and status. Use this action when you need to modify branch settings after creation, such as linking to a different Git branch, changing the branch name, or updating persistence behavior. Note: Database branching requires a paid Supabase plan (Pro or higher).
ActionTry it
Update database branch config
Updates a Supabase database branch's configuration, including its name, associated Git branch, persistence, and status. The reset-on-push field is deprecated and ignored by Supabase.
ActionTry it
Update database password
Updates the database password for a Supabase project. Use it to rotate credentials or recover database access.
ActionTry it
Update database pooler config
Updates Supavisor (database pooler) configuration, including default pool size and pool mode, for an existing Supabase project identified by its reference.
ActionTry it
Update Jit Access
Update a user mapping for JIT access.
ActionTry it
Update JIT access config
[Beta] Update a Supabase project's just-in-time (JIT) access configuration. Use to enable or disable JIT access features for privileged operations on the project.
ActionTry it
Update pgsodium root key
Updates a Supabase project's pgsodium root encryption key. Changing the root key can make data encrypted with the previous key inaccessible.
ActionTry it
Update project legacy API keys
Deprecated by the provider; no sunset date or replacement is announced. Disable or re-enable JWT-based legacy API keys (anon, service_role). The endpoint may return HTTP 404 when unavailable. Behavior is unchanged.
ActionTry it
Update project's auth config
Update Supabase project Auth configuration via the Management API. Use to fix misconfigured Auth redirects, SMTP settings, or other auth parameters. Only provided fields are updated; others remain unchanged. Before updating, confirm the Auth service status is ACTIVE_HEALTHY by checking project health.
ActionTry it
Update project's custom hostname configuration
Updates the custom hostname for a Supabase project, requiring subsequent DNS changes for SSL certificate issuance and domain ownership. API errors may be returned in an error message field.
ActionTry it
Update project's postgres config
Updates specified PostgreSQL configuration parameters for an existing Supabase project (`ref`) to optimize database performance; note that unspecified parameters remain unchanged, and caution is advised as incorrect settings can impact stability or require a restart.
ActionTry it
Update project's PostgREST config
Updates PostgREST configuration settings (e.g., `max_rows`, `db_pool`, `db_schema`, `db_extra_search_path`) for a Supabase project to fine-tune API performance, data exposure, and database resource usage.
ActionTry it
Update Realtime Config
Update Realtime configuration.
ActionTry it
Update SSL enforcement config
Updates the SSL enforcement configuration (enable/disable) for a specified Supabase project's database.
ActionTry it
Update Storage Bucket
Update bucket properties. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Update Storage Config
Update project Storage configuration.
ActionTry it
Update Storage Object
Update the object at an existing key. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Update Table Rows
Update matching rows in an exposed Supabase table or updatable view. Uses a secret or service_role project key, bypassing Row Level Security. PostgREST warns that unfiltered PATCH updates every row: filters are required unless allow_all_rows=true. Filters can still match every row; check them carefully. OAuth needs secrets:read; fine-grained PATs need api_gateway_keys_read and api_gateway_keys_secret_read to reveal the project key.
ActionTry it
Upgrade the project's PostgreSQL version
Initiates an asynchronous upgrade of a Supabase project's PostgreSQL database to a specified `target_version` from a selected `release_channel`, returning a `tracking_id` to monitor status; the `target_version` must be available in the chosen channel.
ActionTry it
Upload Signed Object
Upload an object using a presigned URL.
ActionTry it
Upload Storage Object
Upload a new object. Uses a secret/service-role project key and bypasses Row Level Security.
ActionTry it
Upsert migration
Tool to upsert a database migration without applying it. Use when you need to track migration changes for a project. [Beta] This endpoint stores migration metadata without executing the SQL.
ActionTry it
How the Supabase integration works
The Supabase integration connects your Dench AI CRM directly to Supabase, so agents can read and act on your Supabase data as part of everyday work — answering questions in chat, keeping your CRM in sync, and running automations without anyone copying data between tools.
235 actions are available for agents to invoke on your behalf. Every call runs through Supabase's own authorization, scoped to the account you connect.
Set up Supabase in Dench
- 1
Sign in to your Dench workspace and open Integrations.
- 2
Find Supabase and click Connect — you'll authorize access through Supabase's own sign-in flow. No API keys or code required.
- 3
Ask an agent to use Supabase in chat, or call it from an automation.
- 4
Manage or disconnect the connection any time from workspace settings.
Frequently asked questions
How does the Supabase integration work with Dench?
The Dench Supabase integration connects your AI CRM to Supabase, so AI agents can work with your Supabase data as part of chats, automations, and CRM workflows. You connect your account once, and every agent in your workspace can use it — governed by your workspace permissions.
What actions can AI agents perform with Supabase via Dench?
The Supabase integration currently exposes 235 actions, including Accept Invite External Jit Access, Activate vanity subdomain for project, Append Resumable Upload, Append Resumable Upload Signed, Apply a database migration, and Apply Project Addon. Agents invoke them on your behalf from chat or from automations.
Do I need to write code to connect Supabase to Dench?
No. You connect Supabase from your Dench workspace using Supabase's own sign-in and authorization flow — no API keys to copy, no glue code to maintain.
Is the Supabase integration secure?
Connections are authorized through Supabase's own authentication flow, and Dench stores only the authorization needed to act on your behalf. You can review and disconnect the Supabase connection from your workspace settings at any time.