# Supabase

**Canonical:** https://apis.io/providers/supabase/  
**Website:** https://supabase.com  
**APIs profiled:** 21

Supabase is an open-source Firebase alternative that provides a suite of backend services built on top of PostgreSQL. It offers a managed PostgreSQL database with auto-generated REST and GraphQL APIs via PostgREST, real-time data subscriptions via WebSockets, user authentication with JWT (GoTrue), file storage with S3-compatible object storage, edge compute via globally distributed TypeScript functions on the Deno runtime, and a management API for programmatic control of projects and organizations. Supabase is available as a fully managed cloud service (app.supabase.com) and as a self-hosted open-source deployment.

## Kin Score — 42.4 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 42.4).

| Facet | Score |
|---|---|
| Discoverability | 64.8 |
| Contract Quality | 70.7 |
| Governance | 11.4 |
| Contract Governance | 11.4 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 33.3 |
| Commercial Clarity | 34.2 |
| Access Clarity | 34.2 |

## Agent readiness — 40.8 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | documented |
| MCP Server | documented |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | documented |
| Event Surface Described | derived |
| Agent Skills | yes |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (21)

- **Supabase Realtime API** — The Supabase Realtime API provides WebSocket-based subscriptions for real-time data changes from PostgreSQL databases. It supports three channel types: database change events (I...
- **Supabase Admin API** — Administrative endpoints for managing users. Requires service_role key.
- **Supabase Authentication API** — User signup, signin, and token management endpoints.
- **Supabase Buckets API** — Manage storage buckets that organize files and folders. Buckets can be public or private and have configurable file size limits and allowed MIME types.
- **Supabase Configuration API** — Server configuration and settings endpoints.
- **Supabase Database API** — Manage database configurations, migrations, and extensions.
- **Supabase Domains API** — Configure custom domains and vanity subdomains for projects.
- **Supabase Functions API** — Deploy and manage Edge Functions for serverless compute at the edge.
- **Supabase Invocation API** — Invoke deployed Edge Functions via HTTP requests. Each function is accessible at its own URL path based on its slug.
- **Supabase MFA API** — Multi-factor authentication enrollment and verification endpoints.
- **Supabase Network API** — Manage network restrictions, bans, and SSL enforcement.
- **Supabase OAuth API** — OAuth social login provider endpoints.
- **Supabase Objects API** — Upload, download, move, copy, and delete files within storage buckets.
- **Supabase Organizations API** — Manage organizations including membership, billing, and settings.
- **Supabase Projects API** — Manage Supabase projects including creation, configuration, pausing, restoring, and deletion.
- **Supabase Rendering API** — Serve and transform stored files including image resizing and format conversion.
- **Supabase RPC API** — Invoke PostgreSQL functions via remote procedure calls.
- **Supabase Secrets API** — Manage project secrets used by Edge Functions and other services.
- **Supabase SSO API** — SAML-based single sign-on endpoints.
- **Supabase Tables API** — CRUD operations on database tables. Paths are auto-generated based on your database schema.
- **Supabase User Management API** — Endpoints for managing the currently authenticated user profile.

## MCP servers (1)

- **MCP Server**

## Agentic access (1)

- **Supabase Agentic Access** — 78 operations · 49 acting

## Security (4)

- **Supabase Authentication** — apiKey/http · 2 schemes
- **Supabase Domain Security** — TLSv1.3 · HSTS · DMARC
- **Supabase Vulnerability Disclosure** — Hackerone · security.txt · contact published
- **Supabase Trust Center** — SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR

## Plans (1)

- **Supabase Plans Pricing**

## Tags

Backend-as-a-Service, PostgreSQL, Open-Source, Authentication, Real-Time, Storage, Edge Functions, Database

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/supabase/). Scores are computed from the provider's own public artifacts under a published rubric.