Postgres, auth, storage, and realtime. The open-source Firebase alternative.
https://your-project.supabase.co
Supabase wraps a full Postgres database with instant REST and GraphQL APIs, built-in auth, file storage, and realtime subscriptions. The REST API is powered by PostgREST. Every table becomes an endpoint automatically.
Two keys are available: anon (public, row-level security enforced) and service_role (admin, bypasses RLS). The anon key is safe to use in client apps when combined with Row Level Security policies.
Supabase requires two headers with the same key: apikey for PostgREST routing and Authorization: Bearer for JWT verification. The connection config below sets both via auth_config + extra_headers.
apikey header and Authorization: Bearer| Method | Path | Description |
|---|---|---|
| GET | /rest/v1/{table}?select=* |
Query rows from a table |
| POST | /rest/v1/{table} |
Insert one or more rows |
| PATCH | /rest/v1/{table}?id=eq.{id} |
Update rows matching a filter |
| DELETE | /rest/v1/{table}?id=eq.{id} |
Delete rows matching a filter |
| POST | /auth/v1/signup |
Create a new user account |
| POST | /auth/v1/token?grant_type=password |
Sign in with email/password |
| POST | /storage/v1/object/{bucket}/{path} |
Upload a file to storage |
| POST | /rest/v1/rpc/{function} |
Call a Postgres function (RPC) |
Full CRUD API for your app's data. Tables auto-generate REST endpoints.
Built-in auth with email/password, magic links, OAuth providers, and JWTs.
Upload and serve files with S3-compatible storage and CDN delivery.
Subscribe to database changes in real time via WebSocket channels.